Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: GH4eDUcRxPwA6mQMXc/Wsr+AYzL+Vv6uF6u4HZYVA3I=
Subject key identifier: 79:68:1E:51:9C:C0:62:5F:A3:5D:18:3B:E6:D5:4F:83:9E:85:55:3B
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 01A0FFEC873A7DCAB7416783ECCA81556635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0836
Signing time: Sat 03 Oct 2026 04:01:26 +0000
Manifest this update: Sat 03 Oct 2026 04:01:26 +0000
Manifest next update: Sun 04 Oct 2026 04:01:26 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: x8IY8UVFUJucLC9eiTkVT4goq2137YiTC2tDO31YrF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:ec:87:3a:7d:ca:b7:41:67:83:ec:ca:81:55:66:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Oct 3 04:01:26 2026 GMT
Not After : Oct 4 04:01:26 2026 GMT
Subject: CN=79681e519cc0625fa35d183be6d54f839e85553b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:d3:1d:af:c5:de:1d:39:f8:f9:22:2e:09:
3d:4f:5e:49:db:d5:43:83:10:e9:80:8c:9a:fd:07:
82:5c:b5:c6:b3:b5:46:dd:5f:f1:fc:78:89:e7:ae:
0c:a8:f2:94:5b:89:da:50:17:06:43:51:3f:8f:eb:
e6:06:79:c1:b4:0e:bd:ea:a0:18:6c:1a:2e:92:de:
ff:cb:59:e5:ee:e0:3e:06:4d:11:3f:ec:59:3e:b4:
55:d6:d7:33:e6:dd:81:0d:13:66:43:9b:4b:37:cf:
95:e6:7c:f3:b1:b8:e2:b9:72:42:32:a7:82:a9:00:
ab:f4:30:59:3a:c6:94:28:45:37:2a:9e:99:94:6e:
17:7b:fc:59:04:97:78:32:7f:92:61:0d:a5:36:4c:
fb:1b:1a:da:d0:39:6b:6f:ef:94:5f:5d:89:f7:6a:
8a:35:38:4d:4b:76:9e:25:10:19:bf:25:bf:37:7f:
47:fe:4b:d0:07:49:5a:71:56:6e:1e:de:53:db:55:
c3:5f:cb:ed:92:74:d5:4f:c5:f3:ed:f3:c6:8d:53:
8c:0b:06:f5:2d:83:3c:8e:c2:84:15:47:c4:31:28:
76:59:cd:74:44:6b:03:8a:0a:8e:ec:a4:cd:12:f6:
36:2c:83:cf:10:c3:04:dd:e5:c3:aa:d2:93:1a:97:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:1E:51:9C:C0:62:5F:A3:5D:18:3B:E6:D5:4F:83:9E:85:55:3B
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:af:e3:b8:17:5f:fc:a0:f7:28:53:f4:5d:66:8b:65:3c:
74:7f:48:a3:dc:57:2a:d9:d0:1c:54:67:19:ed:58:5b:66:07:
8f:42:82:72:98:3a:ca:95:42:8a:ce:09:97:0f:3d:c0:6e:74:
9e:b6:66:ef:54:fb:32:65:7b:0e:72:89:c9:17:7a:9c:4f:8e:
24:17:40:ab:d4:52:31:a7:33:b7:5e:af:74:e5:f6:b7:e7:73:
99:bb:e4:56:56:3b:e2:db:71:59:db:5a:4e:16:6b:74:59:52:
80:e2:97:3a:44:30:e5:ce:02:51:8d:db:58:72:40:f4:1d:8c:
e5:06:5f:ae:bc:d5:02:0f:2a:7a:89:b9:ed:bc:08:5c:c6:70:
a3:dc:b4:a0:e6:61:dc:66:c2:88:ec:23:85:6a:72:b2:89:b3:
64:d6:7f:22:74:0a:26:e7:c2:38:1b:fc:ba:b0:1d:cd:6a:d5:
eb:dd:51:0a:da:94:6d:54:da:d5:1e:ed:7b:f1:01:ce:16:ed:
e7:c4:63:dd:39:df:ab:d8:3f:7a:de:2a:ed:99:ba:c9:ee:a7:
5f:62:75:c8:83:ab:df:4b:7c:d0:d2:11:fd:98:44:72:3c:d8:
b2:fb:b7:a1:06:68:64:52:95:6c:f5:44:36:f5:69:7c:09:f3:
65:a5:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:08:09 2026 by rpki-client