Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: WCWnsN9n95sdehgjCa8zFlkWZv1LNiBJmUPGy9rH4NQ=
Subject key identifier: 62:24:5E:E4:52:DC:E5:59:A5:90:9B:44:49:58:1C:E4:2E:49:20:4E
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01A125429C731EC48020C465F277D2CE60C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 10:01:24 +0000
Manifest this update: Sat 10 Oct 2026 10:01:24 +0000
Manifest next update: Sun 11 Oct 2026 10:01:24 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 405nqNO/P0sb/aRIVKoyah89Q8cJIb7jIP2dKKMAiNk=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:9c:73:1e:c4:80:20:c4:65:f2:77:d2:ce:60:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Oct 10 10:01:24 2026 GMT
Not After : Oct 11 10:01:24 2026 GMT
Subject: CN=62245ee452dce559a5909b4449581ce42e49204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:8f:46:d7:29:9f:4e:aa:3e:0d:f6:54:16:
38:67:8c:8a:e5:3e:d7:e1:c8:1b:92:d4:90:64:8d:
6e:3e:94:67:89:ad:82:8d:6d:b9:e1:d0:4b:4e:ba:
a4:13:94:4c:36:48:db:37:1e:1a:5e:8c:ea:b0:77:
58:c2:ca:6c:f4:fa:3c:bb:a6:a7:df:79:b3:ec:cf:
54:7d:3e:34:3c:96:c4:43:1f:0f:1a:91:64:ed:70:
04:36:dd:57:66:cf:b3:50:cb:d4:db:49:81:90:c0:
e2:09:d9:9e:7a:3a:40:83:65:7c:37:7a:a2:de:37:
a3:14:a3:13:4c:46:f8:02:73:cd:dc:d2:92:69:e9:
f0:14:0a:be:0f:14:dd:47:a0:3d:5e:81:c2:54:64:
e8:cf:b3:3f:75:5a:07:3a:95:54:ed:1e:2a:01:9f:
d5:50:08:ac:66:d0:6e:5a:dd:77:03:a3:28:df:d9:
07:1f:14:1c:c1:ce:f8:f7:5b:b2:92:59:8f:5c:b2:
a9:4c:aa:08:91:10:fd:58:ff:e6:f6:d2:09:99:6a:
93:33:e4:d5:46:4d:8f:9c:6f:20:0f:ba:20:e0:85:
7d:89:10:1d:63:d4:c1:4a:1a:a6:c9:60:49:57:2c:
3d:4f:ba:5c:17:bb:4b:36:eb:9e:53:6f:4f:5d:a5:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:5E:E4:52:DC:E5:59:A5:90:9B:44:49:58:1C:E4:2E:49:20:4E
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8c:a0:38:89:34:08:59:62:0b:77:8b:d4:33:c2:4e:5a:82:
9e:8d:cd:db:02:3d:4d:e2:73:68:27:19:79:b8:91:95:a2:46:
c2:d7:0d:81:59:02:a0:1b:5f:6c:aa:b4:09:e1:4f:d6:1f:35:
b6:bc:8a:f5:c1:60:26:a6:d6:76:21:c8:68:25:51:e4:4f:f0:
45:08:25:46:e2:b3:73:68:8d:47:a4:49:14:17:86:e7:35:cd:
78:36:ec:7d:39:4c:43:a3:5a:fd:24:d5:1e:c8:ab:85:e4:88:
28:3b:6d:51:dc:1d:54:0e:27:be:ba:d5:c9:2e:18:2f:7d:2c:
f4:1c:2e:e9:35:94:02:c9:bb:6f:48:a0:1d:5f:8e:e9:d1:f9:
71:b6:5e:41:df:5c:0e:c7:0f:47:a9:c0:9e:dc:d9:46:72:f3:
66:01:18:d0:e2:bb:b5:c2:78:72:ba:d1:71:79:dd:58:88:66:
df:ad:e6:78:f5:32:b5:85:14:a5:11:14:6d:10:ae:c3:7a:3e:
d3:66:0e:53:5b:74:5a:86:9f:41:d6:db:4e:70:86:cc:23:9c:
5e:38:8d:3c:1f:03:e2:2c:8a:c6:57:a3:7f:49:e6:1a:51:55:
68:46:c6:62:9e:fa:7d:16:25:c9:ca:ee:24:65:6f:b9:01:10:
f3:40:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:39:01 2026 by rpki-client