Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: Vd4kEzE6GoAah3CKyYedYSfbB3we1Swh+PBDMyJCq2w=
Subject key identifier: 37:44:CA:C7:AF:B8:7C:26:EA:70:87:1F:05:54:E8:49:23:FE:66:84
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 01A18F0B2547D9997A007B76C16ADF4FF979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 0844
Signing time: Fri 30 Oct 2026 23:00:34 +0000
Manifest this update: Fri 30 Oct 2026 23:00:34 +0000
Manifest next update: Sat 31 Oct 2026 23:00:34 +0000
Files and hashes: 1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: hDqIvLIgJIU8x0RrEQh+xppWz74UFHij9ODxvgAGScA=)
3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
4: cWvOdIg2noCYJK67b7smFIMMw4g.roa (hash: jiBllTk0LDqmGqzBfF6DX67GW5ceJzuLTPIl+rqWXac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:25:47:d9:99:7a:00:7b:76:c1:6a:df:4f:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Oct 30 23:00:34 2026 GMT
Not After : Oct 31 23:00:34 2026 GMT
Subject: CN=3744cac7afb87c26ea70871f0554e84923fe6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:c2:14:14:31:23:43:50:04:f7:00:65:cf:
4e:a3:83:db:53:db:43:2e:06:09:55:ad:f2:f2:40:
50:cf:ae:58:03:ff:4b:1a:e5:cb:0d:a3:28:35:e5:
34:91:c3:26:42:84:57:8d:79:b5:2f:ba:f1:52:c0:
b5:a6:eb:76:0e:83:42:22:b6:46:f6:b6:4d:3c:35:
66:64:c6:8f:94:fa:88:b4:03:92:61:f2:06:0b:2e:
b9:f7:86:b2:87:6a:d0:d4:a1:70:d8:14:36:e6:df:
61:90:13:94:52:40:7f:74:6c:f6:25:ce:0b:f9:4c:
f9:50:e1:a7:6c:29:89:5d:95:36:67:03:81:7a:17:
cb:bf:ae:24:16:ea:2f:55:c9:10:53:ee:c6:ec:8e:
ca:73:08:33:af:55:08:6a:99:6d:93:25:d8:42:30:
46:40:46:88:0d:9c:0b:1c:87:82:cc:b1:70:f1:c4:
a8:55:b0:25:05:e5:0b:7e:03:53:9d:96:76:72:e0:
aa:39:9b:1a:ac:4e:0b:fe:62:cd:44:8f:da:7c:d5:
96:51:f8:02:d4:9f:35:4f:75:01:6b:9e:e0:63:81:
30:70:4f:95:61:d7:ff:83:fb:fc:3f:0e:b9:a3:55:
4d:86:42:35:99:00:80:9a:be:a6:31:34:3a:aa:37:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:CA:C7:AF:B8:7C:26:EA:70:87:1F:05:54:E8:49:23:FE:66:84
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7e:a3:3f:09:7a:b5:b6:fd:51:b3:1f:ee:ba:16:bd:65:43:
97:f3:67:91:23:29:a5:a5:39:98:bf:67:8a:0b:23:fd:c6:2f:
c0:04:63:90:a5:e9:ca:84:18:0a:bd:68:cb:a9:bf:b1:ba:f9:
ef:97:81:10:e4:13:b5:23:3c:83:ad:63:d9:ba:f8:ff:5d:14:
0f:75:20:3b:8a:c0:3d:f4:04:a5:b1:a1:3a:35:43:57:4d:46:
c2:10:16:0e:cf:6d:fa:62:96:b9:67:5a:45:98:4e:8e:0c:6e:
45:68:4a:58:bc:fc:e4:50:ef:33:e2:e8:36:54:d8:86:cd:a1:
be:c9:6b:6a:89:e6:06:a8:ab:d1:d2:73:2b:44:d4:7d:36:ab:
ae:8b:9d:c0:d4:4f:1c:af:3d:5d:b7:4d:eb:f7:ca:8a:bf:7f:
76:6c:f9:67:15:92:b7:d5:6e:7b:7d:ff:4b:af:2e:32:bf:e9:
fe:8f:a0:ac:57:2f:bd:03:23:ca:4d:3f:af:ae:ae:d0:df:13:
05:7a:88:6b:17:91:13:9d:c4:27:b2:fc:d0:89:fa:16:40:79:
37:a3:66:df:fa:ea:24:3c:c0:07:31:9a:f7:86:3e:be:80:71:
50:17:0c:08:dd:51:ec:50:b7:b0:08:0a:0b:46:99:bc:c2:02:
40:aa:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:43 2026 by rpki-client