Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: MsoG6554dOwba90f8RuUByK7caaO5kUq1IByQ75ca7o=
Subject key identifier: D3:D5:53:8F:31:11:21:4D:03:FB:74:6A:BA:B3:22:2E:58:5A:F3:6A
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 01A12AD65A4248271466E753493E089A861F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:00:52 +0000
Manifest this update: Sun 11 Oct 2026 12:00:52 +0000
Manifest next update: Mon 12 Oct 2026 12:00:52 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: xn/ZKUiV+3TUDBSWpoACx5iqxKLp3JTX7+RP9My1y40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:5a:42:48:27:14:66:e7:53:49:3e:08:9a:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Oct 11 12:00:52 2026 GMT
Not After : Oct 12 12:00:52 2026 GMT
Subject: CN=d3d5538f3111214d03fb746abab3222e585af36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:9c:6f:9d:4f:27:d2:8f:bf:d3:23:ba:e0:
d8:cd:39:f2:75:fc:c7:d5:0d:c2:d8:d7:73:f9:f9:
d7:12:e9:7a:e2:34:03:10:19:fa:1e:d9:ae:43:d3:
cf:48:de:44:bf:ca:08:bb:68:98:fe:b0:2d:16:b2:
98:94:4b:6a:47:f9:39:df:a9:5d:b0:62:65:d3:99:
c9:8d:b2:d3:89:16:40:48:a9:15:94:39:be:a4:37:
3e:1d:03:d4:4d:cc:0b:c3:45:8c:04:7e:d5:f5:6c:
f1:6e:e9:46:1d:0d:bb:5c:25:7a:5a:ad:75:27:54:
79:12:64:a6:19:cc:c0:6d:a3:51:17:96:e6:9d:71:
a6:92:ac:1c:48:8e:96:d5:b9:e2:11:e8:41:7b:e6:
77:89:9e:a5:d7:75:06:c2:2d:d0:2a:66:40:34:97:
a6:46:9b:55:bc:b8:96:47:9b:9c:70:4b:92:b0:84:
86:68:f3:a5:6b:a2:58:e4:d8:32:a9:db:89:6e:75:
46:7a:f9:63:e4:d5:7f:d5:7f:b5:b6:5f:66:96:0c:
01:86:c8:e9:b4:01:ae:09:ba:7c:07:e5:8c:50:aa:
f8:87:55:23:60:42:da:4d:c5:e3:dc:f9:89:0d:e7:
de:30:57:f6:ba:b5:cf:e3:53:1b:bc:98:30:5c:95:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:53:8F:31:11:21:4D:03:FB:74:6A:BA:B3:22:2E:58:5A:F3:6A
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ec:d1:f5:df:84:e7:fe:93:8c:c1:20:63:38:7d:0e:7a:00:
e7:ae:4d:69:84:4c:ac:f2:c0:52:c5:d8:ab:c0:58:35:2d:fb:
43:7d:d7:cf:ae:b7:ca:f6:c4:ea:57:91:db:28:78:7d:ab:fb:
6c:80:07:24:96:e4:59:ee:3f:1a:06:4a:ab:1f:eb:3a:66:92:
77:cd:44:a7:7d:78:f4:a7:e9:ac:73:91:33:a3:14:2b:98:ac:
a1:d9:93:91:6e:a1:85:eb:74:0e:3a:65:40:30:a7:43:11:1d:
28:8b:1e:e8:7e:28:66:1c:b7:41:7e:03:24:e4:22:7e:9d:07:
07:d3:13:86:6a:b2:aa:4f:3d:11:d7:2e:d5:df:45:d7:b8:61:
f4:14:fc:04:e9:70:87:41:07:cf:54:a4:37:b8:12:9c:e1:6a:
43:b5:8a:f7:ad:4a:d6:45:5a:dd:c9:85:e0:b2:96:b1:67:ae:
b6:a1:40:8c:1b:cc:54:a1:fa:1a:a7:e7:f3:4a:72:74:95:fc:
43:a2:76:20:bb:a4:cf:12:8e:52:37:5f:7b:13:f3:bd:a2:18:
22:93:34:5d:79:e7:78:b1:c8:ec:9c:ec:ca:9f:a1:38:0c:46:
ab:96:fe:7b:17:a0:69:c7:e7:ff:22:ed:8f:11:60:a5:7f:c5:
ba:08:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:00:53 2026 by rpki-client