Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: bgbo6TmFOuApr3FqAj71OvWqTBu2P/bJX+uJph54mco=
Subject key identifier: 0A:33:04:B5:75:DD:56:D9:D3:8D:30:10:1F:9B:7F:4B:80:96:D6:17
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 01A10549F11D12C50C9D50699B628B5A7525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0D3A
Signing time: Sun 04 Oct 2026 05:01:34 +0000
Manifest this update: Sun 04 Oct 2026 05:01:34 +0000
Manifest next update: Mon 05 Oct 2026 05:01:34 +0000
Files and hashes: 1: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (hash: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: w2ZYkfZumu9lRxOHladX3iCzN+7nO9ThmoYybESm/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:49:f1:1d:12:c5:0c:9d:50:69:9b:62:8b:5a:75:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Oct 4 05:01:34 2026 GMT
Not After : Oct 5 05:01:34 2026 GMT
Subject: CN=0a3304b575dd56d9d38d30101f9b7f4b8096d617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:e7:bb:ea:20:93:13:94:10:28:32:07:a9:
cf:8b:0a:7f:01:c7:9b:48:3b:7c:93:1f:98:fc:81:
8f:d2:08:23:04:a5:b8:0f:ba:59:31:0a:8f:82:42:
7b:68:cd:0d:a5:0d:b2:20:a7:07:6b:f2:28:94:4b:
cf:f5:fc:bf:6c:3b:8c:f8:60:03:2b:43:86:00:1b:
36:3a:eb:67:8c:56:b7:48:0d:23:03:92:43:be:32:
14:b0:4f:38:21:82:77:3d:3e:c0:6b:15:d3:7c:ec:
21:2d:f5:87:53:0b:51:93:ff:6e:8c:83:37:5c:4a:
d7:3a:9e:07:d3:db:65:54:11:9d:81:49:b9:f6:f0:
33:64:b1:1b:cc:38:43:e3:7a:68:ec:07:f3:26:3e:
fb:1e:06:b3:af:c4:90:26:1d:ac:9c:1c:71:a9:3c:
2c:68:6d:f4:4e:8c:af:41:94:86:89:fd:fb:11:8e:
34:10:3a:ba:7a:67:de:3c:76:8f:bf:2c:8b:bc:0e:
79:08:b1:ae:86:ed:75:63:57:f0:57:37:06:91:1c:
ea:74:a6:14:8c:f8:57:c6:02:1d:2b:dd:a5:54:aa:
10:f4:f8:07:39:0c:cd:0e:d5:37:fa:29:44:2f:9b:
03:de:e2:7c:c0:b4:f8:df:58:e3:03:21:a4:c1:6c:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:04:B5:75:DD:56:D9:D3:8D:30:10:1F:9B:7F:4B:80:96:D6:17
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c9:cd:d6:d4:3f:f1:7e:ae:7d:6a:cd:d1:39:50:48:c9:cc:
3f:72:1c:4d:d1:fd:8e:3b:a8:cf:29:b1:e2:0b:2f:21:fd:b9:
10:66:4d:15:3f:76:a7:9c:2c:e8:93:57:29:90:a2:ee:c8:1e:
83:c6:bd:4f:17:79:c9:ef:6f:32:5c:02:3f:e8:39:ab:af:0d:
0f:07:74:98:04:39:6e:31:3c:11:9d:46:5b:a5:1b:90:c1:39:
fd:f4:c8:29:45:51:9c:c0:20:12:60:d2:b8:24:9f:4f:a6:60:
bd:09:33:09:33:d4:3c:22:04:28:2c:6e:81:89:0e:05:31:45:
aa:51:a9:b9:15:67:e5:15:d2:2e:39:ca:0a:88:0a:ce:9d:8c:
4b:4c:0a:6d:5a:f3:05:99:7c:19:06:12:b2:7a:6f:29:8b:fc:
3d:fd:92:e3:a6:ed:07:d9:52:64:64:d0:54:1f:c3:99:45:e3:
e6:7a:d0:7e:3f:bd:8d:87:99:4e:38:c6:05:91:02:1a:4c:2c:
85:cf:54:c4:cb:84:c2:06:11:d2:a9:c4:81:29:bc:46:65:73:
8e:ff:cd:7f:ac:ef:7d:eb:18:f4:33:70:83:00:69:ff:07:2a:
3e:e7:ab:35:c1:1f:1c:e5:3e:dc:78:26:b9:08:9f:11:3a:6b:
8e:5a:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:47:29 2026 by rpki-client