Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: LwpqoTgRxIXlxc8TFWAniYHgUgflyyNtWtBNnoVnROA=
Subject key identifier: D8:CE:15:56:00:7F:1E:26:B5:68:A6:8A:E1:D3:E9:C1:90:6B:6B:EA
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 01A0C28DA2670E121907FF97A0A5B426B6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 075D
Signing time: Mon 21 Sep 2026 06:00:57 +0000
Manifest this update: Mon 21 Sep 2026 06:00:57 +0000
Manifest next update: Tue 22 Sep 2026 06:00:57 +0000
Files and hashes: 1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: THSL0kklvnTu0MCqEvALKk5dNzbC7XgZTTgVN4GyM5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:a2:67:0e:12:19:07:ff:97:a0:a5:b4:26:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Sep 21 06:00:57 2026 GMT
Not After : Sep 22 06:00:57 2026 GMT
Subject: CN=d8ce1556007f1e26b568a68ae1d3e9c1906b6bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:6a:39:4a:e5:73:ce:6d:68:51:83:2e:b1:
43:50:50:ad:00:f8:29:72:c6:11:a0:b2:f6:28:c0:
be:30:88:7e:db:cf:2c:d5:35:2c:67:50:4c:43:ad:
7e:84:f1:dd:53:e2:01:99:07:e9:e4:00:03:c7:15:
b4:c6:67:82:57:15:a5:b8:ed:cb:20:93:88:f8:04:
2c:3d:fe:43:01:64:a9:8b:d4:77:75:52:aa:54:d6:
da:ad:31:36:0b:ca:11:b9:1a:2b:0e:69:39:79:42:
23:a8:33:76:0b:25:ba:17:17:82:49:46:bd:ce:ea:
b3:be:09:fa:f7:d1:26:4f:03:89:67:6b:72:0e:58:
93:e4:48:e7:3c:1d:77:9f:8a:11:82:c5:51:af:39:
2a:03:ac:56:64:61:05:57:e5:7c:17:74:19:30:1a:
fe:2c:03:c0:92:ca:c4:07:a8:25:eb:4f:7f:7d:dc:
ea:8c:18:94:c9:1e:d9:92:7d:16:db:ea:5b:39:a6:
f7:6f:a3:6d:5d:12:fd:79:80:24:29:01:65:ae:7b:
75:8a:ef:49:2b:df:1b:3f:58:c5:41:e8:7d:85:db:
6d:5f:6c:6a:52:2e:e1:cd:54:80:c2:cb:26:30:d2:
1d:8e:5f:0b:80:9d:ed:4b:fc:94:3e:63:85:d1:30:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:15:56:00:7F:1E:26:B5:68:A6:8A:E1:D3:E9:C1:90:6B:6B:EA
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3a:cb:ac:3e:fa:e6:64:e4:7c:88:cc:46:0a:6d:a8:80:e0:
5c:a5:c9:c8:15:38:9b:91:df:61:d6:03:ce:66:6b:77:79:56:
dd:62:44:f2:12:56:76:9b:0d:7c:4b:a0:26:63:95:58:b5:03:
dd:6c:1d:cf:9c:18:96:7b:60:9a:24:b1:07:75:b6:dd:22:13:
d4:5f:cb:ce:44:08:cb:db:4f:29:0f:1e:66:5b:69:16:b8:31:
ae:96:cc:c9:14:6f:e6:43:b5:05:5e:e5:31:c2:91:4f:eb:51:
10:0d:77:82:a2:25:13:ca:22:c3:84:b1:3c:fb:60:d4:8e:13:
04:98:82:2f:11:01:ad:6e:63:ff:d7:38:7d:37:06:46:c0:e1:
eb:00:27:fe:77:67:c2:9d:3d:0e:1e:7b:f5:7d:c0:99:30:46:
df:e5:63:6c:93:42:dd:cf:f8:45:2e:7c:73:bd:0c:fe:05:a6:
5c:57:20:74:4f:f3:5a:8b:df:cb:47:75:5c:0d:ec:c6:ab:0e:
f6:5a:a4:ff:e5:a5:68:ec:ea:4a:23:7a:87:e0:29:1c:e9:b6:
e5:e8:f1:62:3a:b1:21:d2:e1:e9:c4:e7:6f:68:e9:3b:a3:a1:
0f:c2:c1:7e:a6:72:95:52:8a:85:16:ca:5c:90:9a:a1:91:fc:
ab:21:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:29:53 2026 by rpki-client