Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: kqqmCuRu64tBZ+zvZsCL3Pzllv92XPsp7BB7D+BLzeg=
Subject key identifier: 9A:40:0D:18:B6:FF:8C:96:C3:85:56:12:6D:47:E1:F6:B2:4B:5C:DB
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 01A0DC4DE7DB4DF18FD7276998D49FBE5971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 17E3
Signing time: Sat 26 Sep 2026 06:01:28 +0000
Manifest this update: Sat 26 Sep 2026 06:01:28 +0000
Manifest next update: Sun 27 Sep 2026 06:01:28 +0000
Files and hashes: 1: R7Ev9HH_K9DOIOMp6xmYQSBJ3LQ.roa (hash: X1Rxis2xsh9D70KdlclAD1iUcJEca7H7zmBLpXbXixs=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: gYRkjC0dLrykk3vTzmhOr8YAC1XuYL+1kYiI7ZeYgm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:e7:db:4d:f1:8f:d7:27:69:98:d4:9f:be:59:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Sep 26 06:01:28 2026 GMT
Not After : Sep 27 06:01:28 2026 GMT
Subject: CN=9a400d18b6ff8c96c38556126d47e1f6b24b5cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:90:9c:38:88:2e:30:3b:12:71:19:66:e0:
01:06:08:f1:d5:5b:82:7e:2a:12:19:b8:0b:d1:ca:
69:8a:3e:1b:1f:e6:18:86:d1:0e:88:17:5b:29:ff:
7b:ee:16:93:c0:6d:7c:77:11:b5:61:b4:09:89:fd:
65:87:7a:89:51:14:ff:d9:e4:4b:55:7c:cd:9a:4f:
f4:1e:68:24:d6:33:2e:03:5a:7b:cc:3c:46:d3:af:
fa:ea:3d:66:2a:15:6c:bc:fe:ce:cd:cf:d0:f7:3e:
c9:5e:d8:3d:60:e2:47:73:b7:49:c5:b7:ab:7e:8d:
20:2e:93:58:03:68:2d:42:e8:2d:c7:b2:31:d8:f7:
51:82:b6:50:36:a2:e6:68:ef:eb:d3:4c:8d:e3:68:
6a:49:45:fc:17:0b:7d:2a:44:03:31:87:6d:f4:85:
9f:49:e1:86:ff:78:db:ab:66:f1:0a:f3:74:65:b2:
71:ab:3a:81:00:0b:13:cb:c5:01:e1:47:0a:2c:b3:
b5:f0:e9:33:5a:28:31:c0:b5:4d:d3:bc:c4:e3:b1:
7a:3d:6e:ea:c7:d3:98:83:1a:42:4a:86:63:76:58:
f7:cb:75:46:e9:aa:9c:51:8a:21:7d:4f:99:c3:fe:
62:75:be:a5:99:8a:43:80:47:a4:a5:9b:93:95:e9:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:0D:18:B6:FF:8C:96:C3:85:56:12:6D:47:E1:F6:B2:4B:5C:DB
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8c:7e:de:68:fb:18:db:f7:05:1c:b7:8d:c9:1c:45:5f:4b:
b8:3f:2b:46:85:6d:f4:ce:de:8a:31:2c:a0:6e:26:ba:51:f6:
f4:6e:0a:8e:11:f5:68:d6:e1:ed:af:d3:7c:48:e6:ab:84:f2:
d0:45:5e:bf:eb:b6:d6:40:88:73:45:02:82:83:f1:f4:41:3b:
9b:2e:06:45:61:3f:a0:47:22:ac:98:a6:9e:4f:aa:83:eb:38:
1a:d7:16:88:6a:b4:d6:22:d0:8b:61:a0:43:40:03:38:a0:a6:
39:a0:dc:f8:1e:4f:f4:95:23:8d:df:86:c0:09:26:f2:03:a0:
52:0b:43:92:fb:5e:81:d7:77:5d:4e:4c:bf:6a:6f:e7:2e:07:
8f:7b:8e:22:fd:b1:5d:e5:64:05:26:d9:f6:4e:aa:c0:10:0f:
0f:04:41:3d:23:b9:38:32:a4:07:65:c3:4d:bb:39:36:c5:08:
6b:e9:ba:1b:e8:b2:cb:57:5a:56:6a:df:1c:2c:48:6e:d1:95:
88:0e:36:89:73:c8:99:53:29:95:d9:00:3a:79:c5:0e:f8:4b:
24:60:56:9d:61:1e:7c:7c:b1:aa:cc:0b:0b:de:10:02:4c:77:
2b:a0:5c:5b:52:c5:a5:95:96:ec:59:c4:c4:86:31:2b:a7:2f:
87:83:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:20:46 2026 by rpki-client