Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: QfmdkGE0G0/k8qddEjtUPgyaF58crcvsukyxkB/H/eE=
Subject key identifier: 4C:7C:AF:F1:4E:FE:9F:54:4A:91:A9:3E:6B:C2:29:9B:E7:91:15:78
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01A0C40E0F379195EFED2A2980D5FE644B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 13:00:50 +0000
Manifest this update: Mon 21 Sep 2026 13:00:50 +0000
Manifest next update: Tue 22 Sep 2026 13:00:50 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 0KAc3tjyX9obcDWfSb3qOe59XJuxMHGA56DSlvWYS4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:0f:37:91:95:ef:ed:2a:29:80:d5:fe:64:4b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Sep 21 13:00:50 2026 GMT
Not After : Sep 22 13:00:50 2026 GMT
Subject: CN=4c7caff14efe9f544a91a93e6bc2299be7911578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:c1:88:07:e1:ec:28:f3:bb:e7:7c:14:06:
67:05:ff:2b:ef:95:1a:37:06:92:8c:08:a6:2a:c1:
9c:f5:ff:30:c4:bb:d3:33:17:32:63:34:2c:e6:7e:
07:eb:b1:2b:6e:0c:00:99:69:0e:f9:4c:90:1d:db:
07:4c:7c:37:33:de:9a:6f:8c:8e:99:99:13:11:56:
ca:d5:17:bb:4d:79:d8:48:cf:8a:d8:84:7e:c0:da:
55:52:8f:cd:27:80:c6:63:b8:49:89:22:f4:49:26:
24:9f:d6:56:94:14:5e:e8:99:4e:41:27:14:19:af:
6a:b2:ed:3a:1e:47:24:50:68:ce:2f:13:87:0a:4a:
13:6c:bc:19:67:f2:b7:a0:82:91:b5:ef:38:81:af:
77:a5:d2:bb:7a:7d:de:23:e2:d7:26:d0:a5:23:8e:
a7:0c:52:75:f5:a7:e7:16:a1:97:95:3b:d9:42:28:
fe:d6:9f:3f:a9:9e:9c:45:0d:c8:a3:25:09:4d:5d:
e6:e6:27:38:f0:f8:6b:7e:fc:a0:f1:6a:6f:d5:36:
d6:33:5e:a8:2a:77:3f:52:95:91:39:3d:8e:00:1e:
99:26:c7:9b:da:93:4f:b6:e8:54:6c:ab:32:4d:0d:
c1:15:6b:f6:fd:c4:d9:e9:80:3b:81:31:88:eb:dd:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:AF:F1:4E:FE:9F:54:4A:91:A9:3E:6B:C2:29:9B:E7:91:15:78
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8a:d3:13:af:cf:03:63:80:61:14:97:a5:06:bf:98:0a:c5:
db:bc:ad:47:80:15:b1:4a:c3:ec:47:27:0f:a8:6e:28:b0:93:
f1:d0:90:e2:48:55:36:21:b3:21:ad:e6:69:e8:f9:09:2d:17:
02:cb:a8:6b:2a:b0:92:52:75:7c:f3:76:9d:1d:56:f0:07:7a:
b2:1d:b5:9b:db:ce:2e:47:ee:a1:f9:b5:b0:8b:ac:66:88:c5:
ba:62:79:1e:bf:28:be:51:f8:32:10:91:37:c7:8d:d2:35:7f:
32:9a:df:c6:c0:ca:8d:a5:d2:0a:97:73:fb:f1:6c:8b:03:da:
33:38:6f:33:39:6f:05:07:b1:54:9e:2e:98:a1:cb:f1:da:9e:
6d:a7:01:0e:bd:77:5c:1a:45:d0:74:75:73:96:ce:13:08:73:
16:91:b1:7b:97:53:a2:8f:f0:24:73:95:84:22:67:bf:6b:c6:
67:0c:2d:b8:6c:a0:9a:88:04:b3:7b:7c:d2:56:f1:08:f7:d9:
29:e9:0b:60:fe:4c:e1:a2:55:f0:bf:5a:55:66:f5:14:21:03:
7e:3e:68:d2:83:df:19:ae:28:db:36:b5:88:b9:db:cb:2e:b9:
14:1d:35:14:a0:6a:8c:b3:50:c8:ed:d4:af:b7:46:e9:55:b2:
b0:14:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:14:55 2026 by rpki-client