Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
File: nTHCM8vSZtsCYgud65DQjkFpLmc.mft (raw, json)
Hash identifier: WAOFunSfYIgVy6PzsbNh7kBjji2XoCErsWsq6Up8nSI=
Subject key identifier: B6:37:84:1B:D8:74:C2:52:E9:DF:85:76:E0:64:EE:2F:59:A7:09:84
Authority key identifier: 9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
Certificate issuer: /CN=9d31c233cbd266db02620b9deb90d08e41692e67
Certificate serial: 01A0BF8C7A8CB6BEEC4E1B409269371A8CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
Manifest number: 1143
Signing time: Sun 20 Sep 2026 16:00:49 +0000
Manifest this update: Sun 20 Sep 2026 16:00:49 +0000
Manifest next update: Mon 21 Sep 2026 16:00:49 +0000
Files and hashes: 1: 3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa (hash: RwQ/Qy1kKylc45gWPZOazTOGnIJ82QduJgu3sQQqwXY=)
2: nTHCM8vSZtsCYgud65DQjkFpLmc.crl (hash: 15AgmyduQONFCu2LSwScyHHPAsESVE+U/f0Us2u038Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:7a:8c:b6:be:ec:4e:1b:40:92:69:37:1a:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d31c233cbd266db02620b9deb90d08e41692e67
Validity
Not Before: Sep 20 16:00:49 2026 GMT
Not After : Sep 21 16:00:49 2026 GMT
Subject: CN=b637841bd874c252e9df8576e064ee2f59a70984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:4e:83:2c:59:9e:24:03:24:a5:58:54:18:
05:6a:ec:2c:b9:07:57:86:63:05:b1:1a:aa:90:4d:
56:0f:33:98:e6:98:64:6c:38:a3:62:02:a5:31:25:
56:cc:5c:e9:7d:72:22:7d:8c:bb:14:c3:13:19:55:
f0:dc:a1:d9:7c:d6:2b:0d:2e:98:a8:9e:00:95:87:
51:23:7d:c3:f0:fe:8e:3e:f0:cb:b5:60:33:24:68:
9b:09:47:78:ba:d0:f8:dc:ef:b9:1f:3b:b6:93:45:
91:b3:ec:1d:61:88:46:26:ae:17:68:7a:f1:7b:1d:
d0:c6:48:05:42:6f:c8:aa:94:f9:cd:0b:01:e1:63:
8d:55:00:6f:aa:78:42:ec:f2:3f:ca:83:59:eb:1d:
b3:83:d3:b3:3c:6e:57:16:b1:ac:ae:ad:c2:89:9f:
d1:a5:38:df:0e:e8:4b:5d:10:5a:f8:56:16:56:3c:
9e:14:4e:44:ee:ad:57:74:74:76:9d:f5:30:9d:74:
f5:62:fb:56:4d:9e:1d:34:77:fb:55:4d:ec:61:9a:
2e:52:6c:f4:ae:1b:e4:06:3b:a9:28:47:7a:81:72:
5e:11:9f:ab:04:f3:0d:8a:b4:6b:64:02:a4:97:8f:
f6:2b:9a:9d:90:ad:8b:a9:af:77:fa:4f:60:e9:ac:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:84:1B:D8:74:C2:52:E9:DF:85:76:E0:64:EE:2F:59:A7:09:84
X509v3 Authority Key Identifier:
keyid:9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:37:87:57:9d:61:4d:cd:fd:a8:ac:a6:6d:82:ec:e8:60:
58:90:9f:43:b0:46:76:a1:49:8b:39:c6:27:f3:8a:86:a1:51:
1b:17:dc:f3:a1:08:5c:12:e2:5b:3a:4e:82:e5:f9:3b:0a:04:
4e:76:31:70:4e:a6:b5:c1:d1:01:a8:3c:92:14:91:d9:81:31:
16:c4:b4:10:05:94:d8:3e:7c:04:0c:79:7d:1a:cb:2f:51:3e:
02:b3:69:a8:09:82:8c:e0:f6:1a:2b:13:7c:02:5e:cc:83:61:
7c:d6:71:88:b9:8a:5d:e0:ff:a8:8a:f3:ba:e0:03:7e:ef:7d:
05:b1:e7:52:dd:8c:43:59:cc:98:3a:29:f7:fd:40:72:b4:7a:
95:a3:9f:9e:08:91:e1:c5:33:37:b5:ce:d3:fe:aa:b3:9f:72:
f4:84:e6:4b:61:a3:9d:f1:ae:f9:38:9d:27:c9:fe:d4:41:d0:
cd:54:87:5c:b2:cd:2e:3d:b4:f7:d0:d6:86:1b:1e:fa:ff:c9:
bd:6c:d8:df:5d:0b:a8:70:12:37:97:ed:57:cc:68:cf:c6:1f:
00:e7:f8:f4:c8:5d:6c:c4:c1:f7:7a:63:05:da:85:2e:93:40:
28:c1:b9:cf:d0:df:2f:8a:d8:e1:0c:e0:c4:f2:4f:6e:e1:4c:
26:30:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:09:17 2026 by rpki-client