Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
File: nRsJrQnDR1asNA3Y6hSRqMf8toc.mft (raw, json)
Hash identifier: ox5bYMaUkxtYOHrJtQQE+Y+15a99r6x2jsiI8e4HPNI=
Subject key identifier: DF:53:8B:A5:2E:6B:F8:17:D4:66:E2:05:FD:F0:EE:A6:E1:0E:17:92
Authority key identifier: 9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
Certificate issuer: /CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Certificate serial: 01A10625BD042174DE94D977F27972806CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 09:01:38 +0000
Manifest this update: Sun 04 Oct 2026 09:01:38 +0000
Manifest next update: Mon 05 Oct 2026 09:01:38 +0000
Files and hashes: 1: nRsJrQnDR1asNA3Y6hSRqMf8toc.crl (hash: Mt9RirX70UGEzf5D2Fyam5ex9eD14pzXkJLzlAhR7fQ=)
2: yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa (hash: umwlZGJl591xCRTw6gLVt5FDOEtVDC3jktYmPDdcoaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:bd:04:21:74:de:94:d9:77:f2:79:72:80:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Validity
Not Before: Oct 4 09:01:38 2026 GMT
Not After : Oct 5 09:01:38 2026 GMT
Subject: CN=df538ba52e6bf817d466e205fdf0eea6e10e1792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:d2:55:57:8d:1a:46:6e:9c:92:b9:1e:0c:
c2:6a:c0:3e:f9:4a:20:63:48:50:ff:9e:30:63:fd:
4a:79:fe:9b:98:cb:4f:48:d5:53:94:4e:5d:de:37:
d9:73:12:53:fa:4c:32:8a:19:61:12:1a:cd:21:e6:
b6:4a:1f:a1:a4:7f:6b:5e:4e:08:d2:2b:2d:62:1d:
b3:dc:73:b3:cf:ea:5d:67:8d:19:f8:e1:f1:98:bd:
51:4b:07:e6:bf:1d:3a:9f:18:13:29:ac:69:6b:ff:
bc:8a:23:dc:b5:b2:05:e5:c0:da:90:09:91:93:58:
e1:1e:6c:9a:c8:f9:6e:29:68:7d:c8:f9:3e:29:eb:
64:df:dd:b4:62:7a:66:bf:18:42:d7:2a:f9:01:14:
64:3e:84:f4:e6:6a:e6:53:8b:af:51:bf:7e:f4:c2:
3f:99:9b:d9:dc:bd:c8:4f:1b:01:b9:29:eb:b1:13:
f2:b6:d0:79:e3:65:a7:c0:e0:a0:4c:76:9a:a1:04:
ac:6e:7a:08:90:37:f6:b3:27:c8:78:56:93:9c:31:
cf:4f:06:9e:22:75:ce:1c:26:b0:dc:82:fa:34:3b:
54:6d:3c:4c:45:1a:e8:97:d5:7b:7f:74:e8:69:aa:
16:c0:02:09:0c:b2:ee:61:45:3a:9f:a3:33:2f:64:
c8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:8B:A5:2E:6B:F8:17:D4:66:E2:05:FD:F0:EE:A6:E1:0E:17:92
X509v3 Authority Key Identifier:
keyid:9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:56:71:a8:b0:5c:23:19:f0:86:f7:04:e2:6f:2c:eb:91:
2b:aa:c4:34:f3:05:32:d6:a8:82:f6:54:c6:06:a4:99:9b:f0:
9a:cd:98:22:bd:32:e4:27:d2:a1:a5:fd:4d:b3:e3:e7:98:03:
ea:1d:8f:35:15:56:fd:ef:8c:72:e5:7b:ff:81:b5:2d:60:b9:
a5:10:5d:4c:fb:89:4e:ed:cc:d1:67:e0:a3:0d:c6:1f:08:f0:
58:b4:63:73:c4:95:4a:9d:a2:9b:03:27:cd:2b:16:81:01:39:
d1:08:39:c6:43:b7:36:82:5b:16:d3:d6:8e:de:a3:27:41:7f:
dd:0b:a0:63:2a:48:54:64:c0:05:b3:0a:a4:fa:00:a1:0d:64:
05:a7:5f:d1:93:da:30:75:aa:68:38:7a:24:41:4e:ba:59:12:
95:76:d7:c5:d8:83:35:81:8a:a6:f1:ee:39:28:08:a2:6a:9e:
1d:54:8c:cc:57:a9:a6:20:8c:35:0d:f7:bf:7f:5f:51:37:fe:
e1:32:2b:81:d5:dd:26:61:6b:58:ad:19:10:c4:f7:4d:dc:37:
94:f3:be:3d:51:95:ea:2e:88:12:ab:6b:5d:21:fb:21:74:30:
ca:f1:80:aa:40:aa:f7:7d:71:57:d4:dc:e7:85:96:0e:66:b0:
e1:bf:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:53:36 2026 by rpki-client