Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: dkBx+B+7tbZ7xK0tfHBUhkcRjOyrIkofUYbryjGhChI=
Subject key identifier: 08:2A:93:F4:A3:48:EC:B0:D6:E2:3A:B5:CD:F0:50:16:AE:A4:53:ED
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01A0C58E176325E8D1ABB673F1B1074EFD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 1099
Signing time: Mon 21 Sep 2026 20:00:18 +0000
Manifest this update: Mon 21 Sep 2026 20:00:18 +0000
Manifest next update: Tue 22 Sep 2026 20:00:18 +0000
Files and hashes: 1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: XtB59RZ4yHrXe1Lji6Vx8tZNqSQ5zoRK5XX7fE4ggkU=)
3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:17:63:25:e8:d1:ab:b6:73:f1:b1:07:4e:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Sep 21 20:00:18 2026 GMT
Not After : Sep 22 20:00:18 2026 GMT
Subject: CN=082a93f4a348ecb0d6e23ab5cdf05016aea453ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:f2:13:c5:8c:db:06:da:55:ef:fc:4b:ff:
39:ab:c6:41:13:b7:19:01:70:6c:22:4c:86:d7:91:
35:a7:2a:7d:c1:8c:f3:10:60:3f:ef:7a:3b:17:80:
66:0f:d0:09:92:db:5b:c3:0e:96:9e:03:7f:00:7f:
2a:d9:9a:b1:1e:d4:1d:1b:9d:44:7c:71:0c:b0:66:
0c:7b:9e:f7:26:49:0b:97:2b:af:6c:01:09:23:32:
c3:e3:9c:09:b6:fa:8e:79:ac:2f:b1:90:df:81:8a:
eb:6b:c3:38:e0:07:e9:ac:79:14:e2:8c:bf:bf:a0:
01:67:32:10:e7:40:5d:3e:b2:2d:52:b8:0c:f2:bc:
42:4e:c5:8d:5c:c5:4d:64:64:53:9b:18:71:1f:77:
06:d8:2c:43:35:83:5c:c9:c7:05:70:ff:1c:28:78:
e6:58:ec:cf:3f:c7:0b:fc:2c:5b:e1:8f:67:ae:80:
22:8a:7c:85:30:ca:e9:3b:fa:50:bb:6a:86:1e:b0:
58:13:9f:ea:07:a3:87:78:d2:96:41:80:48:75:cb:
69:0c:e0:04:43:fa:23:7a:90:9c:8f:c8:1f:34:57:
02:0d:cb:ac:a8:47:ea:01:5d:7f:de:91:dd:19:5d:
9e:fc:66:68:20:ae:e3:b8:2f:e7:76:48:d8:b0:ea:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:93:F4:A3:48:EC:B0:D6:E2:3A:B5:CD:F0:50:16:AE:A4:53:ED
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:24:30:86:52:90:50:cf:ff:0b:ca:2e:df:ce:ab:0a:93:6b:
fe:2c:a9:af:6a:91:5a:4d:13:39:c7:78:d1:11:78:a4:2f:e0:
eb:af:7d:3b:9d:31:3e:f8:c1:0e:78:f3:31:46:bc:7d:96:2c:
72:82:25:48:60:c5:e6:d7:c0:fc:48:b0:71:41:1c:4a:f8:57:
67:ce:e0:69:ec:6f:60:b2:59:19:e0:61:0e:ec:40:06:eb:90:
9c:05:98:6a:a4:77:43:57:2c:5a:c9:4d:75:d7:56:1f:33:40:
cb:bd:7b:87:ba:31:99:c8:5a:d8:63:39:15:f8:b5:38:33:31:
fb:92:29:35:44:cb:46:da:b2:a1:dc:7d:96:86:44:f7:0d:0f:
71:3d:b8:df:5b:05:77:6b:32:e3:fd:53:eb:b3:a2:e0:98:88:
24:76:3d:1d:6e:5d:e1:e5:23:38:a6:3c:13:7c:56:14:d0:84:
e2:39:aa:d1:99:91:7e:85:0f:60:a7:44:62:92:70:e2:27:ee:
f1:80:b4:44:e9:bb:ce:f5:4b:e0:7e:19:b4:79:98:7d:70:b3:
fe:25:11:90:62:ea:f2:9b:2a:58:aa:36:f0:5a:34:e2:ae:c1:
e2:f0:d5:60:d3:d0:98:d8:8e:14:d0:be:55:ce:bb:7b:43:21:
82:d6:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:57 2026 by rpki-client