Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: SsMEwqWSZF/oifzbOApDro+jh1MzBsHanKuFM5gH8pg=
Subject key identifier: 68:E6:53:08:0F:FB:B4:38:CA:71:8B:34:9F:10:73:BB:E6:09:64:8B
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01A0C8C6A75A7542256D23E3AE642F9EB835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0D9B
Signing time: Tue 22 Sep 2026 11:00:57 +0000
Manifest this update: Tue 22 Sep 2026 11:00:57 +0000
Manifest next update: Wed 23 Sep 2026 11:00:57 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: YAYijHWSn0Ee8kggeO/NG3YjDOfvV8XK60sl+aryGYk=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:a7:5a:75:42:25:6d:23:e3:ae:64:2f:9e:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Sep 22 11:00:57 2026 GMT
Not After : Sep 23 11:00:57 2026 GMT
Subject: CN=68e653080ffbb438ca718b349f1073bbe609648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:80:4f:74:c6:89:e0:a0:32:b7:10:f8:fd:
3b:ca:2a:8b:64:ce:54:a8:3f:8a:a2:38:f1:24:e0:
62:32:5d:67:88:4a:e2:1a:ec:41:2d:63:4b:c9:40:
33:7f:b7:e8:74:f1:c4:d7:ee:f2:4b:a2:33:0f:db:
a8:45:5c:6f:57:6c:98:d6:1a:50:03:6d:5b:87:10:
f1:61:87:0d:84:28:9d:f0:c3:5f:fc:ca:34:d0:55:
1d:13:f7:7b:8e:0e:81:6f:44:23:7a:2e:51:ef:20:
40:e4:a5:9b:8e:34:49:eb:40:d6:c4:94:60:27:63:
21:f9:b6:ae:a4:50:b8:dd:17:40:ee:c2:40:49:ae:
1c:8f:b8:45:80:38:97:b0:a7:2a:95:3f:04:12:79:
a7:ac:54:a5:92:ee:04:9e:22:3b:ae:e1:f7:03:09:
db:2a:4d:fd:26:f5:63:f4:9e:1a:d7:b3:49:de:a1:
48:0f:d7:ed:4e:e5:bf:a8:1d:08:b4:97:b6:3e:4d:
69:b6:a5:d2:8b:c7:b4:86:48:b6:ea:1e:c3:67:49:
83:de:ec:9a:fb:8e:ff:e4:a2:fb:12:9f:ba:de:3b:
15:50:a7:15:18:ee:af:07:8f:18:8e:ce:36:f8:a2:
ea:b7:ec:36:65:83:72:7d:d2:c6:1d:c4:7f:9e:5b:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:53:08:0F:FB:B4:38:CA:71:8B:34:9F:10:73:BB:E6:09:64:8B
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:6d:fd:ea:59:14:58:76:2e:ec:72:b5:eb:39:70:fc:4d:
a4:07:d3:64:20:bf:1a:17:61:dc:d8:ed:0e:cd:81:08:ff:23:
4f:6b:d3:bc:f1:f9:47:c7:cd:ec:8d:a3:ae:89:b9:fe:2b:9e:
1d:d4:c1:c1:7a:97:2e:8f:00:ee:64:7f:ee:26:37:94:99:d9:
4c:68:06:d0:4d:36:e7:f5:2c:07:78:59:d9:55:6e:6c:31:e1:
57:2f:f1:e3:51:67:7f:33:33:5d:b6:6f:e2:40:45:a5:ff:32:
4f:f0:47:c9:8f:ed:ab:dc:cb:71:9e:9d:f3:b4:66:e9:7f:83:
89:7c:3e:de:4e:e4:3d:ae:3c:24:e7:4b:ea:95:b5:8a:c4:29:
f5:b4:cc:25:a7:04:fc:cb:ab:0f:a2:fe:1d:d5:34:b3:ce:f3:
f4:76:0e:1c:97:3a:54:04:8a:ab:2d:72:a0:7f:70:93:c0:c1:
36:1e:e7:25:ac:26:1d:f1:c6:8e:22:2c:c7:76:60:12:f5:22:
aa:0c:7b:b3:5f:e1:ad:5d:ed:40:b4:66:6a:64:af:6e:4d:05:
95:4c:52:93:33:40:f3:33:03:4c:69:2a:20:30:25:15:b0:c2:
ed:18:3a:ce:5e:99:fe:f9:37:cb:dd:7c:86:83:60:fd:76:54:
79:59:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:41:21 2026 by rpki-client