Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: SxBcBOfIbSaUtPsLVX6rY4oVvB38gNmjZP7d7TcsxaY=
Subject key identifier: BF:DE:EF:0B:01:6D:6D:8B:E5:EF:81:98:F0:10:9C:87:CA:5C:DC:46
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 01A134477A5F759CB4338AAC02FED8EE3879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 1AA4
Signing time: Tue 13 Oct 2026 08:01:01 +0000
Manifest this update: Tue 13 Oct 2026 08:01:01 +0000
Manifest next update: Wed 14 Oct 2026 08:01:01 +0000
Files and hashes: 1: KJhzEQAWLMV6-n64J1IGurNPXJA.roa (hash: CtHxiuCIKbij596MTURQ2oG9yHp4BtbuHJNvFD8eVFU=)
2: M8HxuDTjeppXENHYtsmDwzIxfqg.roa (hash: ehN4HCrYdAsRJz9J+AoM/g7LUsIA+10CKLm98CDchvI=)
3: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: uG7qqMAkAOVutqI0wlJ4GLvRyS1bQJJzLyvYXBAR73o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:47:7a:5f:75:9c:b4:33:8a:ac:02:fe:d8:ee:38:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Oct 13 08:01:01 2026 GMT
Not After : Oct 14 08:01:01 2026 GMT
Subject: CN=bfdeef0b016d6d8be5ef8198f0109c87ca5cdc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:c0:30:06:bc:12:63:d3:c7:c8:2f:77:b1:
ef:58:35:1e:c4:b8:d9:e6:8a:3e:bb:6b:22:86:63:
c9:ea:a6:3c:ef:66:b3:ab:4e:5c:b8:02:38:d0:89:
58:d7:e3:a0:42:f0:19:44:c1:9c:19:76:6f:91:e4:
2a:0e:3d:c4:71:4d:96:b9:3e:76:1b:ec:01:f4:24:
08:86:8f:7d:f7:dd:ca:61:e7:bb:f8:30:b1:79:cd:
8d:c7:d4:7f:77:a1:15:d4:15:b5:31:f4:d0:47:fa:
4f:5e:e1:fd:1a:73:5e:4c:d6:22:87:86:ef:8a:35:
06:b3:03:36:ab:dc:76:25:7d:40:c7:3c:c3:c9:44:
27:d1:cc:c2:81:5f:01:2a:e2:f6:bb:3b:b9:77:32:
11:ab:00:96:e3:af:59:ff:f3:69:c9:35:51:fe:16:
da:af:f2:6e:37:db:b6:ab:33:26:60:ec:e2:e4:96:
ec:a5:43:d6:26:0b:ee:53:ab:b5:b3:ae:a5:fd:fa:
81:00:a8:41:5c:cc:4f:e7:77:28:71:6d:6c:c6:70:
c6:51:13:42:73:7f:e7:3c:56:85:a3:bf:0a:7e:08:
18:d6:2c:3d:2f:3e:17:28:81:e8:65:7b:36:e4:27:
d8:aa:cc:15:94:d3:8c:b6:d8:c4:06:36:ee:85:9a:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DE:EF:0B:01:6D:6D:8B:E5:EF:81:98:F0:10:9C:87:CA:5C:DC:46
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:95:dd:c0:a8:e7:5f:e3:ca:7e:a0:57:c3:2a:e3:5c:f2:4f:
f1:d3:1c:04:87:91:28:a9:bb:19:c8:b1:fd:d6:a3:20:b9:10:
c9:a8:75:e8:95:ad:b2:da:f6:77:bb:a7:12:4a:8b:68:8a:63:
ed:75:8c:d2:66:33:e7:fb:a7:b5:0d:89:09:b7:0e:0e:d8:8c:
7e:a1:42:0f:19:4e:2f:94:3c:48:df:ea:65:bd:d0:8a:7c:a4:
e0:09:02:1f:7f:9b:f6:ed:b3:ad:b4:42:bb:bb:70:6f:7f:97:
ae:8c:f2:86:60:65:76:1e:31:76:66:bf:e0:88:d0:9a:81:6b:
7c:51:d8:5e:98:0b:0f:e7:f3:72:d5:f0:4c:6b:31:97:27:ae:
57:9e:ff:c0:95:c1:55:44:fe:af:1f:e9:9b:5e:c8:99:6e:23:
7b:29:5d:9b:50:4e:21:92:31:3f:af:43:a2:cf:0e:ab:b2:fe:
90:ea:bc:4f:86:68:d4:d7:66:c0:60:ce:65:5b:d4:85:18:cf:
5f:ca:ee:db:51:b7:ca:94:88:97:48:43:a1:9e:7a:13:48:a6:
6c:10:d7:40:ce:cd:07:14:bc:4a:23:5b:ed:26:9e:78:c8:22:
a9:5c:ec:16:19:a7:c6:b8:cd:7a:95:1e:d0:94:f4:f5:6a:33:
3f:71:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:24:38 2026 by rpki-client