Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
File: t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft (raw, json)
Hash identifier: zbr+wDIrs5+aqVQuLPpVLY7+ZP22g5UT0RB0NrRetko=
Subject key identifier: 1E:53:22:AC:91:5F:26:FB:5A:9A:12:F2:9F:8F:38:D6:08:D6:43:40
Authority key identifier: B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
Certificate issuer: /CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Certificate serial: 01A0E73FA2ED74EAC289F2AF11CE94FBA37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
Manifest number: 0261
Signing time: Mon 28 Sep 2026 09:01:42 +0000
Manifest this update: Mon 28 Sep 2026 09:01:42 +0000
Manifest next update: Tue 29 Sep 2026 09:01:42 +0000
Files and hashes: 1: ZBLmjHEnNj5CsLTBhAUiBj1hV0A.roa (hash: 3EA6s7k8+iqt8vTemGLaBh1ZR5wfpLsxKHoZaTRSwXw=)
2: t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl (hash: yX8m3uk+0RbZ6ZK1fucgucvzBIWvi0XpULdPd9mDdjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:a2:ed:74:ea:c2:89:f2:af:11:ce:94:fb:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Validity
Not Before: Sep 28 09:01:42 2026 GMT
Not After : Sep 29 09:01:42 2026 GMT
Subject: CN=1e5322ac915f26fb5a9a12f29f8f38d608d64340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:f7:38:c2:20:4c:c8:28:0b:bf:ca:fc:90:
6f:0d:54:7f:f9:80:56:d6:4b:92:e0:46:a7:e2:52:
f8:6d:1b:a6:ef:a2:e5:c8:90:81:92:f0:e6:9b:79:
cc:82:84:95:22:44:fb:c3:f5:07:42:f5:29:16:10:
ba:05:ba:29:20:a0:f9:cc:95:ef:bf:96:65:ec:b4:
c5:a9:3e:7e:21:6a:d7:fd:1d:4c:7c:d3:35:d7:7d:
a0:31:e3:e9:d8:5a:aa:4a:89:5c:73:51:5f:0a:ef:
1f:d1:cb:1b:e3:a7:ce:bc:c8:36:d6:e0:93:40:77:
f5:72:36:4b:ef:67:aa:d5:aa:d8:b9:78:cf:1c:9c:
bd:3b:a3:60:65:86:6e:37:6f:c3:36:2f:59:d4:ce:
db:1a:4a:e0:53:8b:34:8b:3d:8b:58:45:b2:e2:cd:
d2:e1:5c:e8:a4:36:5d:28:15:9a:b9:73:09:53:99:
69:94:17:fb:36:fa:00:11:2e:0a:30:4f:88:ba:5e:
0e:43:fc:2b:56:ae:61:2e:50:3c:32:c9:52:0c:0b:
89:80:b4:80:ee:99:ab:61:70:5e:c3:8b:59:69:0b:
7e:3b:28:f4:2a:f8:74:31:ad:60:53:83:90:b9:30:
6b:d3:91:07:d0:7d:22:75:21:34:ca:4c:27:fa:b8:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:22:AC:91:5F:26:FB:5A:9A:12:F2:9F:8F:38:D6:08:D6:43:40
X509v3 Authority Key Identifier:
keyid:B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:13:b6:c6:51:8d:65:74:fe:a4:b8:63:b0:ce:06:fe:64:
15:8f:75:db:a8:3c:09:72:89:d1:05:64:53:38:99:a6:9c:2f:
ec:30:63:45:a1:f9:9a:65:53:04:33:bb:c7:1a:47:0f:78:fa:
05:e2:82:eb:f5:b1:a6:2b:ac:b0:4e:2a:3a:7d:d4:0a:9d:33:
73:d4:2b:17:e9:06:63:ed:5e:71:27:a6:fa:3d:dd:49:f3:06:
5c:34:79:78:6b:f9:11:c0:91:53:92:4f:5b:f7:c5:76:b8:38:
5d:2d:70:3a:04:b5:e9:50:2c:48:58:3b:02:67:df:69:2f:2f:
26:cc:8c:2c:6e:70:3e:82:21:73:64:b6:44:84:9b:b0:e9:4d:
cd:16:64:26:e5:f4:24:88:fc:14:6d:47:f8:e1:de:3f:24:90:
c0:08:c2:ec:47:1e:1e:c2:5a:47:d7:3c:86:de:cc:31:84:d7:
8e:d9:4e:62:21:99:80:6a:1b:34:32:de:2a:5f:42:f5:dc:69:
3d:4f:64:a0:e4:34:06:ac:4f:9d:9f:7e:27:39:61:cc:66:d5:
08:c2:0f:63:5b:ef:47:70:35:ad:24:27:10:81:83:5c:d5:66:
7e:18:ee:fc:ef:b4:27:23:e5:2a:52:64:e9:7d:c7:99:6e:d4:
31:f5:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:17 2026 by rpki-client