Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: 7NH036FhK6M1dnrVhgKza65i25TT2IpJTGEJ8x0W2ig=
Subject key identifier: 23:09:4C:2F:6F:F0:AE:0C:DF:80:DC:35:83:21:DA:BC:64:7D:7F:7C
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01A11D521FB257EA9831429108FBF9F82B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 21:01:23 +0000
Manifest this update: Thu 08 Oct 2026 21:01:23 +0000
Manifest next update: Fri 09 Oct 2026 21:01:23 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: x7n3pa2pBv3nDJemFP5Z9kYRsBYyNK1jP09C8IxGEt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:52:1f:b2:57:ea:98:31:42:91:08:fb:f9:f8:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Oct 8 21:01:23 2026 GMT
Not After : Oct 9 21:01:23 2026 GMT
Subject: CN=23094c2f6ff0ae0cdf80dc358321dabc647d7f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:7a:11:ca:99:fa:1a:f6:37:dc:7d:c4:61:
05:e3:3c:d2:02:0d:83:0c:33:f7:85:07:85:0c:6d:
ee:c2:a6:c6:83:ba:0b:6d:16:44:9c:4f:bc:c4:cb:
cf:df:90:4a:bf:e7:b5:d8:f2:5d:86:76:39:4c:b0:
10:0c:ff:84:35:7b:ea:ff:73:52:ed:f4:4a:86:64:
91:f8:75:c5:f3:30:2d:b2:30:33:6e:dd:c8:c7:e2:
c3:d9:f0:12:63:c5:6d:bb:cb:bc:2a:fa:e3:48:58:
3c:98:c7:eb:28:57:36:95:77:d8:03:fe:1e:98:a5:
00:8b:3d:6f:17:39:cc:98:da:11:7f:6a:57:9f:97:
f5:27:c2:2b:17:08:71:0b:46:9e:43:5a:b8:93:1e:
3a:90:20:73:ae:58:d5:f0:6b:d8:00:7a:c8:ff:f4:
b5:11:61:8d:1e:8b:cc:7d:33:d4:d0:8d:f9:2f:88:
37:3a:69:75:f9:cb:1d:ce:43:fc:65:bd:ba:9f:63:
0c:50:7e:d4:03:f0:49:b7:7b:70:de:90:ac:f6:95:
44:1b:0e:b6:a1:d4:94:f5:6e:fb:11:fd:14:e0:b9:
bc:f4:bb:98:40:eb:e7:20:34:90:a3:76:13:bd:20:
9d:da:95:55:ec:61:ce:4b:4f:1a:92:1d:94:26:e2:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:4C:2F:6F:F0:AE:0C:DF:80:DC:35:83:21:DA:BC:64:7D:7F:7C
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fc:5a:e0:c8:7a:cd:78:20:4e:da:9f:fa:10:49:88:d0:98:
60:37:12:54:09:87:c8:86:6c:ce:96:dc:3f:f1:68:51:5a:8c:
8a:12:ab:a3:9f:14:31:bd:a2:e4:db:c7:08:cd:47:47:c4:bb:
a4:9d:65:59:24:17:f8:78:f4:99:06:94:f9:79:55:c8:4f:e0:
54:3c:00:d1:d0:bb:90:35:cd:23:b8:25:b5:f2:5b:a3:e8:af:
09:0c:ce:94:87:9a:a5:c3:e5:ca:aa:98:94:2e:b4:6f:10:5b:
ac:91:0d:c6:68:ca:11:7a:a1:fd:9c:d6:8f:8f:50:69:6a:a9:
d0:e8:7a:8d:ee:90:c9:0f:12:38:51:79:2a:61:0f:00:57:ba:
73:f0:26:1c:ca:95:17:01:b1:d3:8b:1d:47:f6:35:b6:7b:d5:
dd:f7:3e:8d:b9:66:3b:e3:78:37:f9:7b:ee:b9:1b:01:64:68:
c7:ca:67:ab:43:38:86:c6:19:44:91:49:8d:35:50:da:ec:a4:
68:37:77:3b:35:51:89:10:ea:f5:15:64:e6:f2:61:68:02:06:
b2:6b:02:7d:59:6a:25:72:36:44:ff:2f:8e:54:61:d9:2a:80:
70:1a:76:a5:0a:84:04:31:a0:6a:03:9e:9d:ec:a4:fb:ca:36:
75:23:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:39:11 2026 by rpki-client