Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: lHWfi+zl3v0SCj+WUy+AvJzhaiyZPVQF1jGcs9yCPb8=
Subject key identifier: 42:1B:B9:96:D6:3A:37:85:E8:DA:87:03:2A:44:A7:9A:E1:2A:9E:CE
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 01A08C7BADA9B1A30C2C567815C82AA5F1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:50 +0000
Manifest this update: Thu 10 Sep 2026 18:01:50 +0000
Manifest next update: Fri 11 Sep 2026 18:01:50 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: Se4XcXFYelEQx9lPJjBiMcuPoqj2+Ao0encLymBlv3s=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:ad:a9:b1:a3:0c:2c:56:78:15:c8:2a:a5:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Sep 10 18:01:50 2026 GMT
Not After : Sep 11 18:01:50 2026 GMT
Subject: CN=421bb996d63a3785e8da87032a44a79ae12a9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:16:42:63:02:00:3a:6e:83:16:08:db:28:
89:fe:cf:b6:bb:70:4c:75:fe:48:1e:83:4e:56:ca:
9a:1f:d4:b5:dd:d6:30:2a:6e:8d:53:d9:a4:36:c1:
3e:6f:ed:cb:94:27:26:59:aa:a5:d1:af:ad:e4:8b:
df:f3:4e:dd:d8:ad:50:99:45:0b:c4:92:94:c3:79:
c9:64:72:83:4e:e2:cf:0c:20:e9:99:9c:3a:6d:66:
94:69:4d:ec:69:69:0f:23:c8:ef:12:ef:64:43:7d:
68:b3:95:35:07:0f:96:92:4f:53:ce:a2:3b:29:a3:
2d:c7:5e:3e:62:4f:3e:33:74:e0:9c:fb:1e:4f:b8:
d5:48:f7:c7:0f:b6:68:5a:dd:26:2c:59:4f:b4:1e:
83:7b:b3:a9:f5:6e:ee:d5:79:4d:e7:28:ae:a7:3f:
ae:b9:19:44:a7:9d:b0:0d:d9:ae:6c:02:ff:87:16:
19:1f:1e:d7:5e:31:be:f4:1a:46:e8:e1:2d:7f:a8:
59:08:63:30:2d:14:ad:d9:06:32:37:3d:e9:c6:e4:
82:0c:8b:84:ac:86:71:f4:d6:18:22:2e:71:bf:e5:
14:ec:7b:3a:33:c5:d0:82:a6:e1:81:0d:75:92:b5:
6b:e5:fe:73:04:46:ce:b2:3b:f3:4c:c2:97:47:f5:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:B9:96:D6:3A:37:85:E8:DA:87:03:2A:44:A7:9A:E1:2A:9E:CE
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:71:43:b5:c4:c5:b9:e5:48:d4:ea:30:80:3f:70:f5:af:
65:e8:c1:c7:73:f7:2b:24:f5:64:4d:ad:d7:e0:fa:02:34:14:
49:58:48:9c:ae:51:ed:52:d2:79:47:ed:e8:76:d6:3c:32:07:
7a:58:42:35:3d:28:51:5d:6f:ee:e3:94:29:35:71:b7:af:0b:
96:a5:de:ac:5f:bd:3c:56:97:d8:4f:bb:cd:36:fe:0b:d8:7d:
ca:90:d1:6d:76:88:ff:8c:be:28:d7:17:b2:b1:7f:c3:21:5a:
44:c5:34:44:83:a6:85:35:7e:4a:59:c0:3d:a1:63:6d:97:58:
de:d7:df:03:21:58:70:9b:03:e4:8c:ce:42:df:a7:26:f0:78:
70:03:21:0b:05:00:33:f4:fd:b9:f4:d5:f7:fb:b9:6e:56:a5:
94:6b:f1:31:7d:c0:e8:e6:55:1b:b8:e1:a7:df:83:20:83:5e:
ba:01:e1:ef:c6:10:1f:39:df:f4:50:fb:d1:60:2d:6b:00:c9:
dc:87:48:77:85:6f:da:d6:a1:1c:5b:31:3a:7b:bc:01:9f:4f:
7b:4b:26:51:0b:f6:71:91:bc:d1:38:a8:9e:c9:37:11:b8:28:
fb:67:0c:30:7d:e8:64:d4:0a:24:5d:ff:91:b4:e4:a8:79:48:
e8:18:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:17 2026 by rpki-client