Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
File: nJDYRR9QxPd5xDksMdCMGQPRcbM.mft (raw, json)
Hash identifier: RyIacwnwQlUuKe7d0/4h6MoNB8TvOzii9GbRQBba/eQ=
Subject key identifier: 52:EF:4B:49:FB:B0:3F:D2:AE:55:53:EF:51:2A:AA:BF:51:97:03:F3
Authority key identifier: 9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
Certificate issuer: /CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Certificate serial: 01A0BE793C75718121932118AC9F96307BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
Manifest number: 0158
Signing time: Sun 20 Sep 2026 11:00:11 +0000
Manifest this update: Sun 20 Sep 2026 11:00:11 +0000
Manifest next update: Mon 21 Sep 2026 11:00:11 +0000
Files and hashes: 1: 0B6TTL2Ovm5IyyizUs5dyCiNfGY.roa (hash: iM7sj42gsr07BNC7So8eVXquELxcg4zLh2sPTtFgoK8=)
2: esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa (hash: 1eCK8LrpSrRj8EFJVrIKYjfWX5NzAdlbGgvE1Hoh2DA=)
3: nJDYRR9QxPd5xDksMdCMGQPRcbM.crl (hash: shRRo4L38H2rfQK3V69+F84I0lJZxMlyoMml18em3iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:3c:75:71:81:21:93:21:18:ac:9f:96:30:7b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Validity
Not Before: Sep 20 11:00:11 2026 GMT
Not After : Sep 21 11:00:11 2026 GMT
Subject: CN=52ef4b49fbb03fd2ae5553ef512aaabf519703f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:3c:5d:12:1f:13:84:6e:10:96:7c:6d:d2:
b6:15:5a:42:98:8f:e2:00:31:54:40:d6:de:dd:bd:
53:d5:0d:d3:00:14:6d:42:49:c1:86:a2:6c:d3:3a:
7e:a2:77:40:55:d0:73:42:8f:4d:86:4b:21:27:90:
13:2a:6f:8a:82:f9:76:a9:f8:e5:fd:26:6b:d9:31:
b5:e0:9e:95:c8:09:fd:bf:22:48:ad:e3:12:26:c5:
33:d4:c3:3b:2b:48:bc:92:23:9f:e1:b0:85:95:91:
98:d2:71:a1:88:91:fc:88:8b:7e:ff:6f:7c:bd:ba:
7b:e4:dd:0e:87:a6:85:65:a4:1d:a9:32:d4:cc:68:
a5:2e:50:a6:b8:aa:ad:96:45:f1:45:88:e1:86:45:
ec:f2:48:2d:6b:d0:ee:a9:cd:de:e5:8b:ab:79:91:
e1:54:5a:e8:0a:ff:12:02:7b:58:21:ec:d9:b6:40:
09:8f:5d:e1:2d:96:c2:c6:fd:fa:6c:60:4c:89:ce:
96:da:bf:72:10:ba:2a:ca:a0:c0:25:f0:da:51:22:
8b:b8:b3:e1:73:8b:91:67:ec:f2:e9:fc:15:42:8c:
c3:f5:6b:df:71:68:82:6c:bd:45:18:e4:93:0e:e1:
1c:b3:cb:5a:36:26:7f:e2:05:97:bb:2a:fe:61:9a:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:4B:49:FB:B0:3F:D2:AE:55:53:EF:51:2A:AA:BF:51:97:03:F3
X509v3 Authority Key Identifier:
keyid:9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a8:b0:51:cc:2d:77:ae:1f:2c:32:4c:58:fc:4c:3f:25:88:
06:7e:13:27:75:99:ea:ad:e8:40:e2:fb:ad:0b:6e:9d:4a:83:
97:4b:f2:1a:e8:0f:46:72:56:99:db:f6:cc:2b:d4:ac:25:9d:
aa:47:d2:6b:b5:9c:1d:bb:86:a4:c6:b6:fd:e0:a5:a5:15:e9:
45:81:e0:5a:13:c7:6e:03:f6:59:3c:ef:d8:44:11:36:22:3f:
27:01:a1:af:96:03:08:2e:29:6d:55:18:06:02:36:c9:b9:0c:
56:9d:ee:24:71:85:38:ec:3a:3c:85:bf:8d:47:5d:8e:a5:93:
ec:4a:fc:46:38:5b:90:f9:f4:29:64:48:6a:7d:29:71:6d:7e:
5e:11:07:09:e2:bc:87:b1:58:6c:a9:c8:7a:70:a5:01:b2:b9:
52:28:f1:08:d4:ee:5c:62:7d:cf:8f:15:43:53:56:24:c9:6e:
d9:a2:f0:bc:2d:14:fc:bc:c3:22:bb:02:a4:b2:9e:91:fa:82:
5c:e5:11:16:35:b4:6a:72:64:d6:60:85:49:14:8e:ac:bb:2a:
12:dd:a4:91:ff:25:f6:a4:d3:7f:32:33:75:43:8b:9e:33:6a:
5b:62:f9:b0:27:a1:cc:8e:4e:c3:d2:4c:7d:f0:f5:2d:b4:83:
c1:3b:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:37:06 2026 by rpki-client