Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File: nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier: q3ox9u3GoOmo3WGrPATK0VNHqtmE2Rj4k3XXOSvKd1c=
Subject key identifier: 84:B6:D1:6D:6D:A1:DB:49:BE:A2:8A:A8:64:FB:45:F8:02:EF:6F:7B
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer: /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial: 01A0BF1EE6340C2BA4F89C10C43D68FFA72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number: 0139
Signing time: Sun 20 Sep 2026 14:01:08 +0000
Manifest this update: Sun 20 Sep 2026 14:01:08 +0000
Manifest next update: Mon 21 Sep 2026 14:01:08 +0000
Files and hashes: 1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: yLm8DOP9xE0iuoYWxvZSXx0/Sz5DuDE6GGLpL0MJblE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:e6:34:0c:2b:a4:f8:9c:10:c4:3d:68:ff:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Validity
Not Before: Sep 20 14:01:08 2026 GMT
Not After : Sep 21 14:01:08 2026 GMT
Subject: CN=84b6d16d6da1db49bea28aa864fb45f802ef6f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:7c:cd:18:76:7a:3d:4e:bd:91:2c:f2:de:
ae:e8:ed:f3:cd:66:62:2a:e3:e5:bf:36:59:fa:32:
dc:1b:27:0f:5d:b7:76:58:82:11:e0:47:49:d1:46:
5b:0c:d6:ef:e3:48:8f:5e:e6:4e:b3:52:af:a9:de:
c2:e8:ee:9a:65:90:86:88:72:d9:17:e0:ef:7d:ef:
03:c8:4a:ac:0b:a8:99:3a:f6:b1:35:e4:8a:04:ef:
4b:4f:3f:bc:23:74:9b:65:a1:73:53:71:32:8d:91:
cf:d1:a8:18:1d:a0:39:63:e8:ff:0b:af:61:73:5c:
4d:2e:10:7c:1b:cc:03:43:f0:40:84:76:0a:b0:85:
cb:5e:7e:2e:80:2f:c8:32:2e:77:90:4f:ae:4d:1f:
c4:0b:97:f1:5d:d0:9d:70:f5:fe:6c:17:0f:e3:19:
60:a3:7d:80:df:8c:8f:b8:14:60:44:47:9a:4e:3a:
ed:15:1e:3f:5f:de:07:2a:d3:dc:a8:81:5a:dc:97:
ae:c5:13:94:72:03:0a:80:44:80:9b:31:c3:94:d3:
95:39:c6:b1:36:42:9a:f3:e8:f7:0e:d6:26:06:aa:
79:0b:d5:2e:bc:59:a9:eb:3c:78:e5:cb:99:fd:26:
cf:31:78:4e:43:8a:65:6e:62:31:28:66:7c:da:e9:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:D1:6D:6D:A1:DB:49:BE:A2:8A:A8:64:FB:45:F8:02:EF:6F:7B
X509v3 Authority Key Identifier:
keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:06:c5:43:94:6c:67:14:04:91:1b:7a:d6:4b:f9:4e:05:
77:a8:ab:ef:48:cc:4c:70:58:7a:a0:43:e8:6f:dc:ef:8b:6e:
1b:7c:2e:6e:1a:5e:6f:7d:31:f7:ef:67:5a:c6:dd:af:6f:a3:
6d:a7:e5:3d:70:bb:bf:d3:aa:77:33:f4:d2:14:e4:eb:aa:fe:
ab:1d:88:a0:ce:84:d9:1b:18:a1:8d:c4:fb:8a:c4:30:6e:03:
51:51:51:cb:4d:46:15:f8:bf:7a:54:4b:ce:27:c9:a0:aa:b2:
3a:46:af:40:5d:62:80:d4:fe:34:c2:3c:82:1e:11:a2:b3:15:
8f:9f:73:1d:41:ce:a2:8e:cc:65:78:ba:1d:09:43:73:26:fa:
6e:84:a5:4e:36:3b:9b:6b:fe:e1:67:15:df:43:a4:d0:e8:3c:
e4:5a:84:cf:7c:f5:14:bf:2c:7f:a8:d5:c7:94:dd:4c:f0:9c:
74:8d:72:f9:6e:66:52:cd:40:60:d3:17:81:20:97:9f:1d:48:
41:9c:ab:3b:f4:30:6c:31:f6:7e:21:a9:91:ef:6e:58:4b:80:
3c:67:05:0c:23:6d:b3:a9:87:e5:37:41:d1:15:6f:6f:05:8d:
d4:c4:16:62:5f:ff:5f:77:93:ab:8d:f5:23:f0:0b:54:7e:9e:
bd:fc:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:40:44 2026 by rpki-client