Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
File: nN3tdbQwkYCFNbSuvXq-X2oTveE.mft (raw, json)
Hash identifier: p3Y9mlo11F7NAPCUBnf6Xz0B4NONCBIzqXXx2ZOVovY=
Subject key identifier: 99:9B:E2:49:26:BF:8E:51:05:83:0B:B6:18:2B:AA:8E:E9:A2:23:62
Authority key identifier: 9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
Certificate issuer: /CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Certificate serial: 01A130A1B095FAC50577A1A947FEAB594600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:01:05 +0000
Manifest this update: Mon 12 Oct 2026 15:01:05 +0000
Manifest next update: Tue 13 Oct 2026 15:01:05 +0000
Files and hashes: 1: Spy0ABfhiBR-fkb9ryyNj0gV224.roa (hash: Yn8A8PlzG90yhOJl/so573+Ah6OeGtK4m3ymx4hJJHo=)
2: nN3tdbQwkYCFNbSuvXq-X2oTveE.crl (hash: 3ZnPPatgvBL8A2TOFswaaDa7TZn6Sqp3obIRQHlFyQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:b0:95:fa:c5:05:77:a1:a9:47:fe:ab:59:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Validity
Not Before: Oct 12 15:01:05 2026 GMT
Not After : Oct 13 15:01:05 2026 GMT
Subject: CN=999be24926bf8e5105830bb6182baa8ee9a22362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:5c:0f:13:54:2e:57:91:8f:39:76:4f:df:
cb:d0:fb:b0:7f:68:75:14:4b:59:bb:70:b7:65:13:
77:5c:a1:51:91:79:ad:9b:cd:0c:19:15:e3:2f:b3:
de:80:95:a7:0a:fb:fc:7a:73:1a:63:2f:b3:e2:7e:
b3:7f:26:0b:38:d1:ed:04:c9:d2:bf:af:99:e7:60:
65:d8:42:7c:5d:01:f0:af:1e:d9:1f:2e:19:45:05:
55:aa:2d:ef:2f:49:9c:93:6e:d3:72:92:5f:0c:92:
53:e5:22:b9:b4:f5:27:0f:86:5d:45:e6:cb:07:94:
30:9c:a3:f3:f1:63:31:ca:b2:dd:5b:d2:3e:9f:50:
fd:d9:20:66:ea:0a:06:73:e6:d8:87:a1:cd:45:8f:
bc:54:f7:6b:aa:5c:ae:a9:e5:cf:40:e5:01:27:de:
fd:a1:3e:69:54:6a:a2:51:74:9b:b1:b8:81:fe:1e:
7f:7c:7a:89:2d:ea:6a:ca:61:6f:7f:b3:f6:4b:59:
58:14:4f:af:41:a3:fd:6e:14:bd:32:16:d9:fc:8c:
a9:b7:e0:aa:7f:29:68:bf:a8:55:90:87:ef:f9:61:
a2:e3:bf:d5:20:31:c9:02:1c:17:dc:21:c5:69:90:
74:81:2a:7d:12:9e:e9:f6:4e:fb:22:7a:bc:9b:f7:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:E2:49:26:BF:8E:51:05:83:0B:B6:18:2B:AA:8E:E9:A2:23:62
X509v3 Authority Key Identifier:
keyid:9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:36:2a:eb:98:02:94:48:c2:58:a6:af:9d:64:c4:10:1b:ea:
ce:aa:36:20:37:e3:eb:38:1a:2e:0b:96:d0:52:43:9c:79:e4:
f8:bd:dd:ac:bd:7a:92:70:71:c2:63:4f:39:77:99:a3:78:c7:
26:21:76:ad:5f:c9:95:3b:d8:04:a5:8b:4c:6f:d2:0b:3a:b7:
c4:4c:8e:c4:6c:6c:e7:6b:96:de:10:a2:91:1e:b2:55:7f:f4:
47:81:8e:56:1f:9b:2e:5f:85:4f:f3:5b:bf:86:34:48:7b:54:
49:a6:13:87:b0:ed:c6:31:6f:9f:fb:81:c2:43:e6:4f:33:63:
4c:c4:e9:2b:b3:21:8d:db:0e:9e:06:86:75:4d:5e:d6:7a:03:
4c:6f:bd:ba:23:41:ae:95:aa:fc:dd:97:4c:1a:cc:be:23:b7:
ce:15:a1:cb:2f:eb:7d:8c:3e:83:cc:73:74:0a:97:8e:5f:c4:
42:86:28:dd:e8:f3:a3:d8:85:f9:f0:8e:52:fc:72:97:bb:5b:
0f:68:a7:f8:c3:e5:95:07:67:f1:6e:b4:30:16:d4:80:14:3f:
87:b4:40:06:7d:a9:29:d2:76:6b:bd:7d:df:ba:93:5e:90:23:
3b:86:de:4c:33:97:ae:87:a4:ad:4d:40:3b:27:29:7d:1a:d9:
7e:75:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:04:50 2026 by rpki-client