Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: h1lKrs56RD85Y8Wn4Hmgok2STJVuJwwb6CRl6OYfHHs=
Subject key identifier: 01:58:A5:00:DB:F8:E5:CB:11:C1:CF:1E:FA:AE:25:3B:C7:22:78:50
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 01A0C88F11F05AE94B09D2AF556CE0546EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 02B9
Signing time: Tue 22 Sep 2026 10:00:14 +0000
Manifest this update: Tue 22 Sep 2026 10:00:14 +0000
Manifest next update: Wed 23 Sep 2026 10:00:14 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: KYULjVNw+zf/Eq4k8zCncRFo9kEeXgY7DWZECbVLtac=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:11:f0:5a:e9:4b:09:d2:af:55:6c:e0:54:6e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Sep 22 10:00:14 2026 GMT
Not After : Sep 23 10:00:14 2026 GMT
Subject: CN=0158a500dbf8e5cb11c1cf1efaae253bc7227850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:ec:72:6b:e1:d4:c6:86:b9:de:05:fc:3a:
96:36:fd:bb:0c:9c:4b:4d:b6:7d:c0:83:aa:4b:01:
93:e7:f1:81:53:74:bb:55:f4:df:8b:5e:38:fd:ff:
05:45:4a:8e:73:38:2d:88:2c:e0:ff:4c:52:02:f4:
a8:86:0e:3b:f2:90:8c:2d:b8:92:e4:62:79:eb:c5:
ce:1c:3d:25:d2:86:46:65:c1:d8:14:41:3d:d4:3f:
8b:dc:8d:26:ea:14:a2:52:af:a1:ca:e9:68:04:cb:
88:bb:0b:bf:17:a3:56:fd:0f:8f:e9:1c:82:6e:22:
a7:0d:76:37:01:1d:ad:c3:85:c9:a6:59:1c:d5:68:
2f:3a:94:27:68:9c:60:a0:8b:87:da:7a:7a:81:a6:
1f:79:8d:30:1d:0e:0f:65:cf:2a:67:c0:0d:6a:56:
f5:18:b7:15:59:1e:92:7b:38:79:83:a8:14:10:a3:
a2:ee:b8:fd:e4:62:ea:5f:73:01:32:d9:f9:1d:7f:
1d:a4:4e:fe:cb:8f:d7:3b:f2:41:66:35:41:2d:50:
e6:bb:79:19:86:e9:2b:14:01:48:b9:50:6e:fa:1c:
e8:cb:b3:b3:8e:ca:0f:a4:17:04:57:07:cb:30:90:
ec:7d:ea:1e:2e:9a:bb:9e:86:24:e0:de:3a:d6:a4:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:A5:00:DB:F8:E5:CB:11:C1:CF:1E:FA:AE:25:3B:C7:22:78:50
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:92:c2:44:16:95:4a:2a:db:78:22:06:5c:44:3e:a6:52:8b:
83:99:e8:44:19:50:94:8b:4b:f7:cd:41:ec:a6:4c:4c:9b:7e:
30:46:2a:52:d2:00:46:b6:88:0e:2d:42:ef:29:47:b0:a4:89:
81:17:88:18:a6:f9:cd:91:66:b3:d3:3b:a9:1e:2e:e4:84:a9:
0e:77:75:df:76:c7:11:6a:1d:c9:d6:92:17:25:b0:5d:d9:61:
3e:dd:0e:fd:87:16:12:59:84:29:04:36:2f:f1:1f:5b:9f:11:
96:37:1b:2c:f3:0f:f1:ca:23:bb:fd:ae:6c:1f:84:37:0c:ff:
12:e1:5f:83:22:72:77:9f:bc:0a:eb:27:77:b5:f0:e5:d6:97:
d4:7d:a5:7e:92:63:73:f2:d3:f5:b7:d7:7c:74:76:de:c0:59:
3c:3a:dc:7a:c3:01:fa:ed:17:67:f0:e6:a1:c6:95:40:1f:19:
83:a8:be:3c:26:3d:b1:8a:24:f7:40:9c:84:a5:c5:bd:fb:56:
fd:42:44:95:75:8c:4d:26:e8:b9:cd:b1:13:86:56:a7:ff:9b:
f5:fe:f3:ab:6f:0e:b7:f3:29:4c:27:d9:68:b5:a1:52:cc:f9:
4f:5a:25:e7:94:89:f5:7c:0c:c3:87:ac:e4:c3:bc:fd:48:61:
9c:31:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:16 2026 by rpki-client