Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
File: ncIAmtRoV1bPSFCSRpxi4JndoKI.mft (raw, json)
Hash identifier: MsjM6BO4sCrGye0RtVB7IGcj9uffyAxOWeCCx5Fq67M=
Subject key identifier: 60:35:1C:8C:EB:9C:18:BE:C3:10:C6:E7:1A:0F:8A:CA:14:BB:D0:42
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 01A16D92623E9389861B61D9032219ADD76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
Manifest number: 016F
Signing time: Sat 24 Oct 2026 11:01:12 +0000
Manifest this update: Sat 24 Oct 2026 11:01:12 +0000
Manifest next update: Sun 25 Oct 2026 11:01:12 +0000
Files and hashes: 1: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (hash: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=)
2: ncIAmtRoV1bPSFCSRpxi4JndoKI.crl (hash: Sny4KqeDd78r9SAHYxWl5ZGuhVzOIGTQ2zunqVU112s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:92:62:3e:93:89:86:1b:61:d9:03:22:19:ad:d7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Oct 24 11:01:12 2026 GMT
Not After : Oct 25 11:01:12 2026 GMT
Subject: CN=60351c8ceb9c18bec310c6e71a0f8aca14bbd042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:6b:80:50:23:5b:c8:ab:91:6a:3d:01:cc:
62:63:28:52:40:87:ad:f6:66:5e:ed:65:ae:e3:50:
16:6c:04:a7:ea:b9:7a:3c:01:f7:7a:09:46:06:53:
79:29:04:9f:f6:0c:06:4b:ff:58:49:7d:7a:8e:53:
86:4e:56:7d:bc:3c:d6:4b:1a:42:71:cf:a5:e1:b5:
e1:78:b2:f5:49:4a:0b:d3:35:f6:d0:31:99:a9:4a:
8b:ab:50:a1:4a:98:ba:bf:c8:b9:37:5b:92:56:9c:
1c:be:d0:3f:30:77:ea:58:d8:e1:ec:20:af:40:50:
84:af:78:87:4f:e6:9f:ba:91:e8:d7:88:cf:61:18:
97:5c:c1:e4:eb:51:83:05:e9:9d:fa:bd:e1:6e:b4:
4f:0b:a5:9b:56:70:20:4f:72:63:82:54:c9:7e:bd:
c8:c3:d4:fd:7c:6c:fc:e2:7a:97:a2:6e:52:3d:7f:
8e:b0:03:45:60:7f:49:e1:22:f5:61:bb:2b:2c:63:
05:7c:bf:e8:bb:04:74:48:47:74:4a:31:ef:28:98:
8a:32:39:0b:6a:91:b4:e4:60:e3:4b:81:e2:91:47:
50:61:11:65:8f:65:1a:91:d0:03:75:f3:01:77:47:
91:04:02:f0:a9:98:b4:b8:90:01:92:1a:c4:c1:1f:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:1C:8C:EB:9C:18:BE:C3:10:C6:E7:1A:0F:8A:CA:14:BB:D0:42
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:12:d8:e5:a8:51:c2:64:b5:55:04:02:35:ea:a3:69:6f:
9c:90:6c:ff:2d:1a:ed:3c:19:ee:ef:09:24:4b:db:4f:c0:89:
b4:44:44:dc:ae:7b:1c:44:b4:35:16:93:76:47:b9:35:ec:a4:
99:81:c4:72:f4:03:b2:fd:fa:23:cf:ff:c9:7c:d8:3f:51:38:
99:95:ab:96:e6:a3:6b:b1:14:43:7e:e9:03:90:14:53:dc:cc:
08:f9:4a:98:a7:08:c2:83:60:5b:21:70:31:98:d9:37:49:64:
78:ca:c5:7f:bb:00:a2:b8:49:84:80:ef:c8:f2:36:a9:9e:42:
1d:85:aa:b2:95:ff:23:28:f9:77:d8:61:ef:c1:3e:51:4b:08:
9a:23:0a:9c:b7:37:38:cf:cb:77:cd:26:f7:04:b7:43:38:9b:
d0:11:90:2e:fe:46:80:8f:52:b5:bb:c4:e8:2d:c9:bf:48:c7:
7f:3a:40:27:ea:03:8a:d4:1e:58:65:6a:5c:a5:9a:7b:e8:e5:
38:1c:5f:0f:76:ef:88:6e:99:b9:a0:6b:c4:29:f1:5e:cc:d5:
76:90:21:21:e7:6b:2f:91:8f:45:6e:a4:f7:c3:73:23:e1:9d:
a5:7d:1d:97:db:b3:33:63:9f:53:0d:16:05:67:cf:56:f0:72:
b6:62:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:36 2026 by rpki-client