Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier: Nsw2JIZEvsJAh+OSvA8gMe30Dx3ZIYjLrhCxo1+n8RM=
Subject key identifier: AD:17:5B:7F:E4:8E:9E:11:E8:FF:B9:F7:CF:5C:AC:5A:73:AF:88:C6
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial: 01A17C97BBE61664FFEF7999316A57D05F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number: 0A4D
Signing time: Tue 27 Oct 2026 09:01:21 +0000
Manifest this update: Tue 27 Oct 2026 09:01:21 +0000
Manifest next update: Wed 28 Oct 2026 09:01:21 +0000
Files and hashes: 1: IVyr9TDbDX_pP70HeSId022KL1g.roa (hash: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc=)
2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: bZvcVuhJwtTe7BjNaSyRpenLutDS5noVmQCI3wSaLQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:bb:e6:16:64:ff:ef:79:99:31:6a:57:d0:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Validity
Not Before: Oct 27 09:01:21 2026 GMT
Not After : Oct 28 09:01:21 2026 GMT
Subject: CN=ad175b7fe48e9e11e8ffb9f7cf5cac5a73af88c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:ab:24:86:91:7c:45:06:88:66:a6:a4:92:
ba:0a:b2:62:d3:30:ad:8b:5e:c0:94:02:22:3a:59:
b7:6b:4f:df:d1:98:6a:f6:f1:86:b9:e1:df:0f:a8:
ad:a6:34:e3:55:da:95:b4:42:2f:38:e1:5b:89:92:
fa:da:4e:78:05:03:28:3a:e8:89:06:50:19:67:d8:
27:f3:84:c1:f5:d1:cb:68:76:6a:ca:a0:59:9b:cc:
da:d7:d2:c5:77:ba:a3:08:e8:69:ec:9b:34:b0:9d:
a1:a3:1b:eb:35:8d:73:95:60:ca:dd:96:26:9b:f5:
c9:ac:bd:6a:13:bf:56:ee:98:37:46:80:31:dc:e7:
bc:fd:fd:97:b3:01:5a:4d:b2:eb:ae:57:9c:9a:98:
20:18:e1:69:77:cd:2d:5c:fa:81:89:6a:20:e2:84:
12:c3:c7:ea:48:05:cf:8d:65:d2:26:c4:40:f0:e3:
10:87:80:13:1e:e7:65:40:65:a8:77:ae:3e:be:90:
39:8d:01:d9:05:9b:0c:23:85:5a:97:ab:cd:d8:55:
89:2e:9c:9c:36:86:43:93:e1:25:5a:ba:c8:be:7c:
36:1e:16:37:61:74:43:ef:26:37:aa:af:5d:e9:80:
dc:89:06:33:0b:57:d7:06:24:4b:f5:3b:68:81:23:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:5B:7F:E4:8E:9E:11:E8:FF:B9:F7:CF:5C:AC:5A:73:AF:88:C6
X509v3 Authority Key Identifier:
keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:85:8e:af:64:27:2f:a4:63:5d:5f:a3:c6:f3:71:67:1f:
c1:e5:0b:ec:9a:34:0c:34:75:3c:d8:95:38:c5:f9:53:35:84:
44:fd:e1:0e:f7:9e:4d:fb:a5:76:70:b2:b8:e2:5a:9f:d9:db:
3c:f3:b3:e8:f0:ed:52:cf:10:f9:17:55:65:05:8e:1d:5c:66:
d2:fb:b9:a1:c4:13:3b:f2:aa:93:0d:ac:a8:c1:6e:9c:5a:51:
66:30:d6:e4:11:1e:ae:ed:e4:59:59:f5:20:ba:54:34:06:93:
60:85:49:89:d1:fa:d1:2e:11:aa:0f:25:77:d4:af:69:3e:5c:
10:68:df:32:4c:56:59:31:21:1d:33:e3:47:ed:29:4d:bd:e0:
8e:d5:28:88:6b:39:78:cd:c0:08:e6:f6:31:f1:c0:a1:77:91:
c1:6a:fe:59:54:ad:b5:b3:0e:62:a6:ad:f5:97:56:14:8f:56:
dd:94:c8:92:16:58:3e:bf:3a:9d:36:84:d5:50:39:ad:59:27:
1a:e5:e9:2d:52:f4:77:8d:96:f8:68:76:cd:9e:5b:03:23:6e:
a7:11:fe:f3:ab:db:b4:6a:05:7f:e0:89:1d:5c:35:ef:ce:32:
35:ea:23:db:07:45:19:b8:08:f8:d9:c7:8b:c6:8e:09:fe:1a:
e7:10:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:32:46 2026 by rpki-client