Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: jJWA9RGqZ+QaIP3cGVfiO1EacgB3EjF3QeSmxIHTyGQ=
Subject key identifier: DA:31:85:0B:EC:1E:02:C3:52:7B:69:12:44:B3:27:AD:6F:43:0C:F7
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 01A12C579BA7620DE5131C0E4F21A9E1F9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 0676
Signing time: Sun 11 Oct 2026 19:01:41 +0000
Manifest this update: Sun 11 Oct 2026 19:01:41 +0000
Manifest next update: Mon 12 Oct 2026 19:01:41 +0000
Files and hashes: 1: 87sPgGS78gNXnDIuF37apaMYRbQ.roa (hash: gwbpEBETTamHMzi2lyqeLf+vpyBZoN6/hFjwP/nt39I=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: khrJUj1oD++n2qyKcwbIDb8+IPYoBLjDpFmtq6ZjaWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:9b:a7:62:0d:e5:13:1c:0e:4f:21:a9:e1:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Oct 11 19:01:41 2026 GMT
Not After : Oct 12 19:01:41 2026 GMT
Subject: CN=da31850bec1e02c3527b691244b327ad6f430cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:0f:e8:ed:36:15:8c:bf:2a:af:f9:d4:f4:
41:b4:68:a5:b8:22:82:13:e9:65:43:9b:88:f5:80:
48:33:a7:75:fd:c1:77:b6:8a:c7:b3:fc:3b:2a:31:
50:a9:ff:85:c2:b6:37:76:c0:62:63:60:f9:39:46:
cd:19:17:bf:54:ac:d0:aa:fc:6c:fc:3c:14:6e:72:
d8:4c:dc:ef:87:d3:d5:03:cf:fa:ce:22:25:2b:19:
f5:e1:85:81:02:0e:31:09:c5:93:68:bc:80:5c:90:
d7:df:ce:04:40:82:d1:70:e3:3f:ac:db:84:cc:72:
f6:49:c6:3f:6d:0a:91:40:a8:91:90:e0:f9:73:75:
ee:71:53:c3:7f:7a:59:11:c9:32:eb:ed:26:a3:2c:
54:d1:2e:56:07:29:85:1a:d9:ee:da:a7:c7:ad:be:
44:27:94:d9:fd:89:31:0d:db:bf:4a:4a:c0:80:81:
13:3e:11:3d:24:51:00:05:4f:86:3f:4a:4c:58:0c:
50:11:ab:76:62:e0:c4:d5:5f:a4:8c:b7:ec:9a:37:
d0:2c:e1:ab:d7:46:18:9b:e5:28:7f:4b:d1:95:b0:
b8:00:a3:1a:01:b2:97:5c:f9:2e:66:07:d0:25:a2:
ea:ed:c0:32:9e:cf:a4:98:58:22:3e:fc:87:d6:86:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:85:0B:EC:1E:02:C3:52:7B:69:12:44:B3:27:AD:6F:43:0C:F7
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:77:6b:26:ae:50:8e:3f:96:b4:0b:b1:16:32:f2:e5:e0:9c:
25:04:98:fc:41:e2:82:93:dd:3b:bd:67:fc:47:0c:28:b4:33:
ff:f6:65:09:d6:03:52:9d:97:19:6a:a7:23:b3:ff:0e:72:8f:
7d:b3:e1:c8:70:89:16:31:84:4b:47:bc:8a:79:d0:c2:7f:cd:
c0:9e:1b:ac:4c:92:13:45:de:5c:f3:1f:e4:6e:90:ca:a0:d8:
1d:e2:4f:15:e0:c1:f6:3f:54:f1:ec:41:62:b2:7a:bf:fc:95:
10:16:fc:a9:72:d9:ee:a2:2a:fb:8c:cd:32:1c:98:78:1b:06:
7e:d5:f6:79:a9:d9:df:ee:09:bc:8a:80:20:b1:2f:2e:65:eb:
f0:5d:c6:ab:7b:d2:79:26:9f:9e:f7:77:b5:d5:68:e1:ef:07:
66:d7:11:12:af:44:67:32:3c:4a:07:5c:55:57:a3:9b:29:c6:
a5:16:d6:03:1f:b9:21:90:f0:f9:38:58:72:f9:8b:35:14:07:
d2:b7:43:c6:8f:1b:9f:59:a3:7b:ed:52:9a:7a:58:75:47:2c:
06:81:1e:dc:3d:e5:67:fe:e8:38:06:7c:af:21:92:5c:a2:8f:
94:cf:b7:0d:0a:eb:27:c6:37:da:5e:6f:d2:bc:45:66:15:a1:
e3:88:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:19:22 2026 by rpki-client