Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: XhZKna+hG9kvHRO/dfkvjRVSeGpOmpve9/MBQ94Qj1I=
Subject key identifier: 46:AE:E9:99:14:15:6D:44:33:4C:14:33:51:57:62:38:8F:F7:77:CC
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 01A16EA4BEC6BA15D9A81BFAE0FB7B1CFAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 0205
Signing time: Sat 24 Oct 2026 16:00:52 +0000
Manifest this update: Sat 24 Oct 2026 16:00:52 +0000
Manifest next update: Sun 25 Oct 2026 16:00:52 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: nFhmczeojMSaKNKz+Ci+PPesGC92OJkPc203m4AL5Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:be:c6:ba:15:d9:a8:1b:fa:e0:fb:7b:1c:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Oct 24 16:00:52 2026 GMT
Not After : Oct 25 16:00:52 2026 GMT
Subject: CN=46aee99914156d44334c1433515762388ff777cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:71:cc:d8:70:23:09:f8:91:95:2c:d4:fe:
5f:08:ed:fc:90:98:32:c9:71:1b:65:ec:d4:4a:2f:
9a:17:e0:c4:ae:7e:17:30:58:63:4a:29:46:4a:2f:
72:ff:58:1a:e9:d2:4b:fc:0f:30:ca:b5:0f:cb:9f:
27:c0:69:10:f5:2a:e7:d6:25:47:22:d8:2b:cf:1b:
07:16:18:05:3a:ef:52:77:0c:31:59:b6:bc:d6:f8:
28:6d:9f:48:d6:40:f8:d3:54:d7:dc:f4:d9:b8:0f:
c7:a5:60:bb:74:56:88:cf:76:a1:4c:9e:b5:4e:c2:
6e:1e:93:84:a2:89:ce:57:97:dc:0e:f1:09:61:fa:
d1:d8:cd:bf:f7:87:85:e7:27:0d:b9:da:cb:5d:66:
21:53:f5:f4:d4:a4:50:e7:38:36:a1:2b:cc:09:39:
fa:28:6f:b4:c2:69:87:b9:77:92:3c:17:a2:63:91:
bb:be:f5:a5:90:75:b9:60:69:e7:d9:c3:f6:f1:da:
58:d2:32:25:2d:2e:60:b4:da:7f:c4:d3:ad:2f:7c:
98:b1:bf:db:b0:48:55:c3:97:91:64:10:97:a8:f2:
d6:ee:61:52:69:1e:07:07:fe:a1:1c:68:e3:87:aa:
64:eb:be:93:0f:af:7f:7d:26:26:83:84:d3:d8:9a:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:E9:99:14:15:6D:44:33:4C:14:33:51:57:62:38:8F:F7:77:CC
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:80:bb:1c:61:f1:5d:0d:16:b3:e6:5b:40:4d:af:55:2e:6a:
94:7c:16:b6:ae:72:9f:6a:f6:03:cf:4e:78:6c:5e:ef:ff:18:
a0:0f:09:d4:1d:68:10:14:24:03:2c:aa:bd:2f:b9:29:9a:74:
57:b9:02:57:03:9d:8b:df:db:15:9f:c2:e1:84:70:ea:e0:d1:
ee:ff:60:51:99:34:44:14:3f:1d:21:e4:50:7c:b0:66:9e:87:
80:f2:56:34:1c:6f:0b:f0:de:43:3e:a9:41:65:70:a3:87:df:
ca:27:48:d0:36:3e:e0:ab:00:c5:0f:1f:16:5f:52:94:c1:35:
b2:c2:63:3d:1c:12:9a:8a:dd:65:1b:85:98:df:03:27:52:7a:
99:cc:71:84:a2:8a:02:eb:08:f9:6b:40:6c:36:e0:38:13:b4:
70:24:15:7a:be:1c:88:d1:d2:c4:27:80:52:03:34:ec:dc:3f:
4e:c1:ed:d3:ef:d0:4f:8e:b9:dd:fd:b1:3c:b5:4c:70:96:58:
c8:6a:f8:06:2f:75:e6:27:25:20:54:1e:b0:a0:48:fe:71:d0:
a6:86:fd:80:ce:8a:62:06:0a:51:da:83:7e:dc:74:58:c4:8e:
9a:5a:15:ba:be:f5:a2:ee:5c:bd:54:eb:e6:01:20:e2:01:af:
52:3c:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:23 2026 by rpki-client