Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
File: NOFy8gusVmf_hcr_gLRTZ1jm2po.mft (raw, json)
Hash identifier: j1GRSpZV7XEEnPdIyhIRQUnhTps/5Wo2IgrwJqOdRA0=
Subject key identifier: FA:D1:CB:FA:5C:E8:15:A0:B8:07:B5:F9:AC:DF:F3:B0:F0:1F:1C:CF
Authority key identifier: 34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
Certificate issuer: /CN=34e172f20bac5667ff85caff80b4536758e6da9a
Certificate serial: 01A0C28DFE5E33B7749330983E09C65ABB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:20 +0000
Manifest this update: Mon 21 Sep 2026 06:01:20 +0000
Manifest next update: Tue 22 Sep 2026 06:01:20 +0000
Files and hashes: 1: ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa (hash: 6CkIgU30ZTpBXP27tZUxeNY4xYkwYzV9C1Gfa7vFkz4=)
2: NOFy8gusVmf_hcr_gLRTZ1jm2po.crl (hash: H9xt/BgyiT4R4EtC4Ot9fi+f58ZRiiXd28/12ncT5JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:fe:5e:33:b7:74:93:30:98:3e:09:c6:5a:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e172f20bac5667ff85caff80b4536758e6da9a
Validity
Not Before: Sep 21 06:01:20 2026 GMT
Not After : Sep 22 06:01:20 2026 GMT
Subject: CN=fad1cbfa5ce815a0b807b5f9acdff3b0f01f1ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:f3:26:92:d8:6f:41:23:01:8b:3d:af:e5:
4f:a2:75:c2:2c:6a:8e:9f:8e:48:a4:46:09:0f:e0:
e3:4c:af:b7:83:74:1d:e1:41:b1:bd:7c:c0:51:48:
80:80:5b:16:02:23:42:97:21:4c:c6:96:c0:60:b5:
d2:a3:22:78:45:aa:75:5d:6a:86:c2:eb:94:7d:9c:
63:28:f7:1f:17:83:c7:a8:85:c8:60:d8:df:54:97:
33:0e:54:46:e6:a9:4d:77:14:47:63:62:a4:5b:1a:
ed:68:60:f4:6a:13:48:29:90:e7:fb:ba:4c:d6:72:
e7:a2:36:f6:9e:bd:84:b0:d2:51:c2:cf:1c:c3:dd:
2c:74:d4:44:3c:19:8a:40:33:93:93:de:66:92:29:
83:9f:da:9b:9a:0f:26:a6:57:f9:4a:a6:be:1a:e2:
2e:63:79:d8:64:b2:e3:98:4f:00:b4:db:02:5b:8e:
18:f2:ae:20:3b:7c:6f:d1:47:c0:05:af:14:c4:57:
72:f8:bd:43:14:dd:58:c4:2c:aa:ad:3b:42:79:01:
6a:96:0b:27:b3:9b:72:90:16:af:c7:0d:97:a0:c7:
1b:db:31:1a:dc:32:bf:ff:32:fb:98:e8:b3:ea:84:
8e:67:77:17:7e:29:38:8f:70:77:6b:69:52:ca:d6:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D1:CB:FA:5C:E8:15:A0:B8:07:B5:F9:AC:DF:F3:B0:F0:1F:1C:CF
X509v3 Authority Key Identifier:
keyid:34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:24:a3:07:1d:d5:63:cf:2d:05:f2:ae:85:cd:1c:f2:24:
a3:c8:b8:18:d3:0a:eb:b0:a6:b8:59:8c:44:6a:0e:a7:d4:b9:
bb:74:82:c5:c6:9b:52:dd:aa:ae:df:7e:35:0d:80:de:58:99:
73:ae:e9:95:74:8f:71:40:5d:95:b5:9d:d8:3f:fd:b6:bc:df:
3c:5f:d2:5d:b8:12:a0:c0:83:1d:8a:45:eb:85:8a:c7:92:6a:
20:99:4b:7b:98:11:da:fa:aa:d5:67:53:e9:83:2b:31:20:91:
bb:b8:b3:7c:0a:b7:4e:a2:64:b5:37:18:9c:07:09:4a:2e:07:
0b:f9:74:da:95:b2:76:83:6a:70:6b:c2:97:6f:47:8a:56:1a:
eb:80:ec:b1:e6:32:93:64:46:d4:0e:85:55:f0:fe:47:a7:04:
ea:4e:81:d9:06:1c:f7:d6:ca:46:94:81:39:d7:44:c5:88:c6:
18:38:ad:d7:35:83:6d:b0:ce:24:f2:c7:3f:98:c0:30:bc:13:
19:b6:d0:96:28:f1:65:cc:90:8b:7e:85:7b:83:7f:a2:0d:55:
21:4d:9a:dc:c5:8b:ff:27:4e:77:9f:e4:01:c0:b3:f3:36:03:
af:01:76:0f:e1:84:c9:8a:6e:30:a1:47:32:7a:71:dd:4f:20:
be:ed:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:51:41 2026 by rpki-client