Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
File: Na5NvD-sOkzQcM-fAql4rz_gqiY.mft (raw, json)
Hash identifier: d2ik2jA6hkcxt/t7wDVS/Fhoq+poSAs1owI6Rtr9GgE=
Subject key identifier: B9:B3:6D:0E:B5:48:BE:5E:92:5E:8E:AD:79:78:52:33:16:6B:B7:17
Authority key identifier: 35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
Certificate issuer: /CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Certificate serial: 01A126FA0219953C94A7E521635E5879A330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 18:01:21 +0000
Manifest this update: Sat 10 Oct 2026 18:01:21 +0000
Manifest next update: Sun 11 Oct 2026 18:01:21 +0000
Files and hashes: 1: Na5NvD-sOkzQcM-fAql4rz_gqiY.crl (hash: dajw5Gv7aeD3WIQdZuSQ7ASH1YflDbTL0BJiFkDKvTE=)
2: RRaajtQrss5SvD0UbtCJxO7e-rU.roa (hash: 3rTSj5RjYBccOHFc9KbwnqOPuKe1LfVBGgP8gO67rtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:fa:02:19:95:3c:94:a7:e5:21:63:5e:58:79:a3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Validity
Not Before: Oct 10 18:01:21 2026 GMT
Not After : Oct 11 18:01:21 2026 GMT
Subject: CN=b9b36d0eb548be5e925e8ead79785233166bb717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:6c:8a:8d:68:df:df:c7:9c:ca:c7:e7:c2:
ac:ea:33:cc:9a:9f:a5:b8:1d:21:b5:99:c1:c6:b9:
de:7f:7b:2a:18:5e:66:de:ce:3a:54:3e:ff:4e:08:
6b:37:24:be:c3:c9:47:d6:50:39:c7:c8:1b:1d:3f:
8d:73:dc:f7:15:d8:13:bf:9f:e4:51:79:86:1b:bc:
09:c0:84:49:ac:d8:35:6f:16:70:6f:c2:c8:6f:a0:
66:ca:8e:03:10:d4:1e:f6:8d:fd:fc:60:f4:0c:28:
3a:e9:67:6a:a1:2d:b3:5f:b7:3b:91:93:37:5d:9a:
f3:a5:1a:de:d1:63:71:cc:75:48:08:43:e3:9f:38:
74:73:7b:35:06:9c:7d:0b:86:fc:68:ef:0c:6f:3d:
a2:ae:94:1b:0c:e0:e2:80:b5:f2:12:06:a8:20:f2:
c5:96:fa:3a:6f:d1:b8:cf:62:c3:85:09:39:08:03:
13:0c:37:3c:87:e7:54:f6:7d:5b:40:17:34:24:07:
cd:62:eb:c5:00:77:e4:16:2e:55:50:08:be:f1:21:
68:22:84:57:58:44:d5:0a:9e:dd:1a:ad:6e:61:b7:
c9:da:1c:f7:b3:99:1d:b6:89:09:55:23:8f:e1:b3:
17:77:b1:18:a8:ed:76:45:de:b1:0a:f8:11:ab:a2:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:6D:0E:B5:48:BE:5E:92:5E:8E:AD:79:78:52:33:16:6B:B7:17
X509v3 Authority Key Identifier:
keyid:35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:92:0c:34:52:d8:76:3f:f1:5f:14:5a:48:25:95:64:f0:
3c:64:2c:59:df:b5:08:57:c7:50:b6:57:23:06:71:0b:83:55:
c5:96:c5:dc:ad:4e:f0:be:26:df:6f:e9:d9:09:df:62:41:89:
ee:dd:2a:3f:9e:9d:19:29:05:f2:db:a0:07:64:ac:2a:c5:79:
c4:4d:73:fd:49:0b:d9:9d:15:a9:2c:41:cb:1c:bc:b1:6c:75:
05:80:49:6e:69:29:4b:45:97:2a:9f:d2:ac:6c:c9:3d:65:77:
6d:20:c4:33:8e:cd:d6:d3:e4:45:ab:28:dd:5a:4a:b9:4f:37:
a6:7d:00:4e:e3:d8:16:fb:ca:02:0f:57:49:8a:86:7e:82:0c:
b8:d7:72:6e:dd:62:db:dd:69:b7:49:40:4b:b2:d0:51:5c:b6:
c4:b1:a1:b2:a1:f2:02:39:e3:0c:52:61:1b:0f:c9:90:66:f3:
9d:d8:bf:28:00:6e:75:20:2c:e4:a7:69:75:ea:23:a7:7a:d4:
9f:96:f9:11:c4:a4:b7:33:fa:f9:3d:cc:7b:b7:6a:fc:ec:7a:
80:4e:9a:1d:56:7a:d6:98:d2:ad:3b:16:ee:19:b7:09:5f:36:
a4:d3:41:ae:fd:17:81:6a:58:08:8a:e6:fe:8e:6e:02:8f:e1:
1a:ea:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:28:52 2026 by rpki-client