Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
File: nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft (raw, json)
Hash identifier: W4agJhya6biSNIMoSTVF2rMHjaHKaHHHU7awF87p2N8=
Subject key identifier: D1:B1:14:76:88:6D:CA:FA:E6:D0:6F:A1:C6:25:89:B0:3A:E5:7A:DC
Authority key identifier: 9D:1B:EF:2C:96:1F:DC:CE:94:EB:E2:DB:FB:22:60:9E:28:CC:F5:CF
Certificate issuer: /CN=9d1bef2c961fdcce94ebe2dbfb22609e28ccf5cf
Certificate serial: 01A1DF832DD485E927CDAC47C4FC6AF3B5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRvvLJYf3M6U6-Lb-yJgnijM9c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
Manifest number: 7C
Signing time: Sun 15 Nov 2026 14:01:18 +0000
Manifest this update: Sun 15 Nov 2026 14:01:18 +0000
Manifest next update: Mon 16 Nov 2026 14:01:18 +0000
Files and hashes: 1: 0o9Ph672PYFs3U67nvyPgpwJ0KU.asa (hash: rbJ2M0kHmIDMnsyW66p1tZekT2YXfrvqRpPRJrHulic=)
2: nRvvLJYf3M6U6-Lb-yJgnijM9c8.crl (hash: qBJHQwQW+J+xk/JazBcAoJxUKmDPAJZjETwG5u8FiLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRvvLJYf3M6U6-Lb-yJgnijM9c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:2d:d4:85:e9:27:cd:ac:47:c4:fc:6a:f3:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1bef2c961fdcce94ebe2dbfb22609e28ccf5cf
Validity
Not Before: Nov 15 14:01:18 2026 GMT
Not After : Nov 16 14:01:18 2026 GMT
Subject: CN=d1b11476886dcafae6d06fa1c62589b03ae57adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:81:a8:e6:b6:d4:e2:ec:69:6b:bf:86:6a:
bf:72:c1:58:2e:35:53:08:32:22:ca:a0:e1:54:90:
d8:60:7d:09:bf:45:ab:b5:21:21:f9:75:f7:0f:12:
04:5e:ac:70:a2:31:53:ba:51:67:3d:7a:cc:93:65:
f5:56:ed:f7:82:3d:e7:46:e6:73:a1:db:3f:e2:d5:
89:4e:41:e5:46:d9:e5:76:80:59:a3:bd:31:23:8a:
b9:5b:e5:32:7c:c7:73:55:39:82:2f:30:a0:7e:57:
95:18:85:01:6e:49:a5:43:08:1d:03:2a:b4:c0:39:
3f:d1:d2:ec:80:e8:23:97:65:78:0e:a8:76:cb:6f:
90:cd:40:37:ac:43:12:02:17:f2:43:d6:c1:47:65:
30:c3:81:ae:8c:fd:7b:07:58:4d:0f:f0:03:77:20:
05:de:9f:67:da:63:aa:cf:c5:3b:b7:42:51:ea:47:
cc:df:fa:5a:8b:96:e7:ff:f0:bc:c9:05:4c:b9:7e:
5f:ec:56:3d:9c:5c:bd:53:24:9e:b8:6a:75:27:f1:
53:db:0a:44:20:b3:fc:ca:d9:31:7e:61:1f:c4:08:
24:04:f7:98:f9:de:c0:bc:42:45:a2:cc:3e:f2:a3:
70:f3:00:16:f9:52:55:b4:b2:28:b5:d6:80:4f:3e:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:14:76:88:6D:CA:FA:E6:D0:6F:A1:C6:25:89:B0:3A:E5:7A:DC
X509v3 Authority Key Identifier:
keyid:9D:1B:EF:2C:96:1F:DC:CE:94:EB:E2:DB:FB:22:60:9E:28:CC:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRvvLJYf3M6U6-Lb-yJgnijM9c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:61:09:bf:d9:42:87:a4:f0:72:03:ea:b9:bb:94:31:8f:fd:
7a:c6:0f:df:33:73:c1:35:02:85:97:10:e4:72:28:ae:fc:04:
22:9b:1d:63:17:d1:9c:df:8e:56:98:f6:f1:8d:72:4a:1f:ca:
81:ff:56:51:ab:d5:3a:26:df:1e:7f:bf:ca:e6:57:36:23:8c:
d0:e6:e4:59:cc:7c:39:3a:5f:4f:ed:db:46:42:10:f4:63:d4:
e7:e5:1b:b8:c4:77:d7:c9:22:65:ed:24:45:0f:76:aa:2f:45:
e5:40:7c:4b:12:45:97:29:60:9a:b9:8b:56:6d:37:e0:f2:84:
eb:ed:5b:dd:71:dc:eb:6d:92:db:2f:3d:8a:10:cf:b0:03:b5:
9d:2a:56:a5:8c:c7:10:b9:51:35:20:10:36:c4:85:01:6e:c3:
d9:49:ff:25:85:71:4b:0e:2c:e7:79:85:9d:3d:0e:ab:dd:4d:
eb:df:d9:7c:16:d3:8d:c8:58:e1:7d:14:4c:8f:82:73:a5:03:
40:69:e6:04:1f:c6:a7:17:ba:d1:70:08:67:b7:7c:1f:ff:65:
14:b1:16:5e:d8:6e:1b:37:4d:a6:b3:3b:28:36:3e:f3:46:9d:
60:31:42:d7:bf:5a:da:09:14:92:1e:f2:87:32:42:61:15:1b:
82:fe:99:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:31:28 2026 by rpki-client