Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: L1xnBsgbLspRuSQ2cfzxQX8WadB04XN0aiP10Qu8dE8=
Subject key identifier: 79:45:AC:C6:92:53:37:1D:1C:6A:46:59:2A:1D:87:2F:86:8D:A2:1F
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 01A0D5A73634A11D7126271CFD5D30FBABFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 23:01:40 +0000
Manifest this update: Thu 24 Sep 2026 23:01:40 +0000
Manifest next update: Fri 25 Sep 2026 23:01:40 +0000
Files and hashes: 1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: Q+a/3mZR7KGHEu9jOrGIiT5K1U7oi3nDB3XIhEZcdj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:36:34:a1:1d:71:26:27:1c:fd:5d:30:fb:ab:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Sep 24 23:01:40 2026 GMT
Not After : Sep 25 23:01:40 2026 GMT
Subject: CN=7945acc69253371d1c6a46592a1d872f868da21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:e1:d7:b0:16:cb:3c:70:af:ff:1a:8c:e7:
bb:ed:db:37:c5:4b:10:52:12:9c:d4:c0:23:9d:ca:
ff:45:e9:b7:f0:53:c1:1c:c0:20:5c:27:66:f2:93:
09:74:78:82:12:74:5b:97:d7:85:6a:b9:38:e4:31:
eb:15:0f:57:79:99:1f:5c:d7:14:fc:5b:cf:63:01:
35:cc:33:17:41:4f:ab:89:eb:61:18:e2:3c:47:27:
75:5a:bb:3f:7c:55:41:43:58:99:65:81:7a:a1:0d:
08:41:b0:ee:1a:7c:1d:31:a5:7f:28:b0:98:d9:51:
e1:b4:25:86:0d:cf:22:d2:bb:fe:9a:1d:68:92:0a:
4d:28:ec:96:10:07:43:52:67:26:e8:2c:dc:28:e2:
25:66:fd:82:ca:84:88:70:75:8a:df:bf:33:bc:5b:
01:44:23:f8:e7:3d:e4:77:00:a0:43:a6:a8:10:66:
8c:cc:94:0c:b9:c5:9f:2b:a1:d0:52:23:99:4e:cb:
ad:9b:77:e6:e0:59:e1:01:0e:dc:b2:63:c5:86:8c:
92:94:62:38:38:c0:92:35:dc:2c:4a:6b:9d:b4:db:
2a:f9:88:5a:0d:c4:90:8f:c8:19:9b:7a:18:38:cf:
45:ae:86:0b:ec:80:6c:72:df:29:31:8a:4d:fe:a3:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:AC:C6:92:53:37:1D:1C:6A:46:59:2A:1D:87:2F:86:8D:A2:1F
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:29:53:9f:85:78:ec:b6:72:86:69:59:4a:4a:1e:bb:2e:63:
d8:70:7b:16:bb:23:8f:11:c3:b4:f0:34:8d:bb:69:e0:2c:6e:
88:50:c4:8a:c3:09:1d:f4:79:bf:f8:47:a3:8a:eb:b2:b3:7f:
00:84:0c:ba:7b:37:ed:be:f0:e2:b3:39:8c:00:45:d3:2b:1f:
17:e8:2b:99:45:43:13:2c:7a:d8:d4:63:8e:3f:98:d4:0a:b5:
76:96:ff:94:2a:82:41:02:99:bb:01:94:75:f1:dc:59:18:5c:
2f:bf:43:b4:bf:38:1a:1c:36:9c:7d:52:54:f7:37:c8:03:4d:
85:59:0c:de:86:5e:7f:e8:a7:2e:2b:80:e0:b7:16:ec:9a:16:
59:6f:9f:a4:fd:fb:cc:6b:d0:aa:8d:60:54:05:a6:fe:d5:21:
80:ab:48:45:83:5b:55:da:f1:e5:df:30:28:e9:3e:4c:03:ca:
a3:21:b4:86:ea:5d:d3:ed:96:9d:2c:af:0e:f6:c4:9a:83:85:
0a:7c:9b:de:fb:11:1f:c5:c5:97:b2:3b:eb:82:e0:dd:53:22:
e3:13:5e:b3:f0:f0:d4:00:eb:ef:47:34:a4:11:36:1c:91:75:
22:42:cf:9f:89:29:5f:15:f9:e2:cf:ce:a2:38:ca:c3:97:a2:
39:6d:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:26:20 2026 by rpki-client