Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
File: NfJIyy_lWJzEbJo1M7d5lmGclpM.mft (raw, json)
Hash identifier: LyJYobWwF+DEjK7qc/MBCx9fAWDXW1HFt71Vmsqp0G8=
Subject key identifier: CF:A4:84:27:D1:DF:FA:3D:EB:50:4F:C0:2E:65:11:72:BF:22:AF:4D
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Certificate issuer: /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial: 01A104374EA75B7F18AAF2CFE19CAE85B9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:01:35 +0000
Manifest this update: Sun 04 Oct 2026 00:01:35 +0000
Manifest next update: Mon 05 Oct 2026 00:01:35 +0000
Files and hashes: 1: NfJIyy_lWJzEbJo1M7d5lmGclpM.crl (hash: KgS/kqFb/dhPRhVPhLnkmPrdh5ZHjGTEpBk+mZN/zEw=)
2: eojrh4FYJOqn2Ldzg006OCzOQCA.roa (hash: wx1jFfpx9zsFd3AkjedbstvGgcY2Qb3PIq4eLA6x+1M=)
3: h9Vxutjtfpi1EQcen3goCtrMe_g.roa (hash: +RNsc+f9Zpcxd9dc3ORPp5I+o9EaIxcXyvozD+Nd1qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:4e:a7:5b:7f:18:aa:f2:cf:e1:9c:ae:85:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Validity
Not Before: Oct 4 00:01:35 2026 GMT
Not After : Oct 5 00:01:35 2026 GMT
Subject: CN=cfa48427d1dffa3deb504fc02e651172bf22af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:e3:20:a6:05:13:94:ea:05:d1:83:5b:94:
47:d9:9d:ee:96:46:33:68:53:b1:d7:77:30:96:20:
0c:e7:cd:88:f4:88:32:fc:74:47:d2:c1:2f:0e:9b:
d6:20:a8:4e:fd:f9:31:40:55:57:31:5b:2b:7d:5e:
f0:a0:ab:0f:0c:1d:d4:7e:8a:14:07:f6:f9:ed:b6:
de:4d:fc:9e:90:9d:a6:6c:84:91:db:60:c7:0b:10:
f7:0b:05:43:45:89:43:09:f3:2a:c9:93:58:a0:0f:
65:73:85:5b:dc:02:0f:24:ac:8d:b4:4f:c6:96:a1:
a5:57:09:17:44:a9:5e:d9:d3:93:a2:c1:2e:27:22:
f2:e1:fe:86:ab:24:cf:fe:90:4b:db:81:14:4b:59:
d3:de:c4:6b:d2:49:f9:44:05:02:f9:69:bc:58:15:
5f:c4:e3:03:4d:b9:6f:f9:62:38:94:f4:35:31:a1:
34:53:99:be:89:ad:35:28:3b:79:d5:4b:ee:ca:61:
1d:2e:93:dc:d1:0e:7c:af:a9:17:bc:0e:9a:29:40:
d8:bf:23:00:fb:ec:d0:4a:00:53:7b:b6:48:a2:e2:
5d:57:3a:df:54:19:ac:5d:79:a2:22:b3:9f:84:5c:
3d:50:62:06:5e:26:2b:5d:ff:0d:a1:0f:33:db:cd:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:84:27:D1:DF:FA:3D:EB:50:4F:C0:2E:65:11:72:BF:22:AF:4D
X509v3 Authority Key Identifier:
keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:05:a1:1d:fe:6b:c5:60:92:f8:8d:9a:8b:9e:76:36:e9:
9b:f4:84:62:a8:d1:36:08:a4:40:7e:6f:61:83:85:3d:39:9a:
f4:a4:c8:be:c7:e6:45:1c:d8:6a:4c:e2:ed:28:f2:ce:91:20:
1f:41:73:13:5b:4c:97:8e:a7:15:87:70:0a:7c:38:fd:3c:8d:
e6:fb:c0:9c:5c:58:2c:18:01:3a:ea:bc:9c:f5:d2:2a:f6:30:
f4:b4:9a:5d:c4:27:01:b4:15:52:b1:c8:d0:78:bc:08:72:33:
25:0b:d6:a7:07:57:ad:08:76:7d:f2:d1:49:e9:b8:ca:42:53:
1d:f0:26:fd:e6:c6:ea:4b:f5:c4:16:39:82:9c:52:a5:cd:cf:
73:88:82:0c:93:78:05:34:67:9e:f6:62:af:a8:b5:fc:80:5f:
2a:27:8e:ff:e1:9d:0f:35:11:bb:f8:cd:19:ae:2e:ac:86:df:
fb:69:7b:47:12:15:e1:7e:b4:62:ec:9c:28:ea:36:3d:bb:9a:
27:b1:cc:cd:91:5c:fa:57:7b:a8:bd:73:af:e7:ca:f0:67:5f:
48:f1:ce:4b:70:af:5c:19:41:66:82:1f:68:0c:da:f8:0d:7d:
28:8f:27:6e:d2:b7:28:8d:3e:15:8b:f7:c4:e6:b7:15:8e:bf:
b7:de:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:20:48 2026 by rpki-client