Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: J4nigegQHY1dF4uEl/Cw6DGMEWNiKFo8Nwu1rRh8YTw=
Subject key identifier: 85:0E:07:85:E9:5F:DA:F3:03:1D:7C:AC:56:EB:DC:73:D7:28:CD:A9
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 01A0DC4D9BAAAF0729DC28B691976B768E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 15F8
Signing time: Sat 26 Sep 2026 06:01:08 +0000
Manifest this update: Sat 26 Sep 2026 06:01:08 +0000
Manifest next update: Sun 27 Sep 2026 06:01:08 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: jQ7+uoWBXf+tjBMXGIPP3ppui+BU/D4R4oXSbozmsoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:9b:aa:af:07:29:dc:28:b6:91:97:6b:76:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Sep 26 06:01:08 2026 GMT
Not After : Sep 27 06:01:08 2026 GMT
Subject: CN=850e0785e95fdaf3031d7cac56ebdc73d728cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:51:9c:e2:3e:7c:e2:cf:77:67:50:64:a1:
4b:4b:94:a2:6a:91:94:98:73:3d:87:45:e4:c3:1c:
a3:3a:d2:4a:45:40:4f:31:c9:f1:35:6a:a8:ab:17:
d9:5a:05:a9:0e:ee:9c:74:f0:c4:02:1f:d7:1a:88:
f0:3c:cf:c6:0d:9a:db:6a:7f:94:ab:87:45:76:0f:
df:fa:94:2b:8a:c1:93:3f:d3:7e:94:01:52:0b:8f:
ff:08:3b:cf:7f:d3:25:06:5c:b0:95:57:a5:d3:d0:
af:7a:b7:30:5c:d1:72:68:cc:92:6a:59:4f:9a:e4:
71:17:e7:05:68:3d:d6:a7:21:99:20:af:72:df:17:
bf:3f:f3:8a:f1:55:e7:0b:e7:94:02:d2:69:08:0f:
66:7e:5a:1f:7d:63:64:90:81:ff:0f:71:97:4c:12:
37:d4:b7:f7:f8:27:50:79:f6:92:bf:5d:a8:ad:33:
e6:a4:a2:9c:90:0e:52:52:a2:8f:bd:5f:01:a6:d4:
d7:cd:6f:e1:c3:03:27:56:a3:bf:53:d2:42:15:c1:
b3:83:08:f1:00:6c:fb:fe:87:19:5c:ae:b8:08:b3:
e3:18:2d:f2:7d:cd:88:b5:8c:8b:db:b2:5c:cf:ec:
8f:1d:87:6d:32:aa:c1:d6:49:4d:14:ef:ee:54:8f:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0E:07:85:E9:5F:DA:F3:03:1D:7C:AC:56:EB:DC:73:D7:28:CD:A9
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6c:d1:c4:27:9a:db:99:5e:fd:d2:ab:b0:ef:15:fd:db:c3:
68:2a:40:78:be:d7:70:31:05:1b:13:7b:d3:ce:6c:a3:3a:05:
39:d2:18:0c:b6:1c:f0:c5:52:17:4b:9f:ee:53:0b:45:80:0b:
de:89:86:91:4b:fe:4f:36:35:88:56:11:71:c9:19:cb:4d:e4:
5e:7a:e8:e2:d5:af:5f:36:b8:9d:f8:da:2b:b6:26:b4:6a:5b:
41:57:78:28:4d:3e:84:c0:07:9f:24:66:5a:6e:84:ca:2d:33:
79:67:f7:af:9b:e2:27:2c:c0:6f:a7:19:c9:89:04:2d:5d:bc:
99:2d:0b:90:24:a8:46:91:7c:9d:59:40:19:24:6d:ca:33:0a:
92:d9:5e:21:c9:bc:fb:af:2d:ce:7f:06:9e:21:27:4a:43:ad:
ba:db:31:99:4f:cb:3c:c2:53:60:cc:d1:ca:fb:f3:c0:b2:6d:
0c:99:91:33:97:8e:09:6a:59:90:1d:0b:63:cf:66:20:bd:f2:
c3:45:d2:2e:c6:52:ce:e1:78:ff:a5:b5:ca:6e:69:74:74:16:
db:d6:0a:8a:67:1d:9f:2e:bd:d3:27:1b:8e:bc:23:72:1b:02:
82:3a:7e:63:de:3b:68:1a:c8:5d:aa:9c:eb:4b:a1:5f:05:d5:
a4:f9:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:28:18 2026 by rpki-client