Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: mbo/T7omEynpz0qJxpu4gYXdwa4vbkVaXWj9QLWASXE=
Subject key identifier: 41:B7:6F:80:B1:87:02:E8:F6:B0:72:18:EB:27:57:49:57:48:8E:75
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 01A08A555077B9E9FF555EB608C3BC76FA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 07BD
Signing time: Thu 10 Sep 2026 08:00:41 +0000
Manifest this update: Thu 10 Sep 2026 08:00:41 +0000
Manifest next update: Fri 11 Sep 2026 08:00:41 +0000
Files and hashes: 1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: dTawAAwoY+MTEMuioED0jRf/13/19pLQfRmwiHT4Lhw=)
3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
4: cWvOdIg2noCYJK67b7smFIMMw4g.roa (hash: jiBllTk0LDqmGqzBfF6DX67GW5ceJzuLTPIl+rqWXac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:50:77:b9:e9:ff:55:5e:b6:08:c3:bc:76:fa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Sep 10 08:00:41 2026 GMT
Not After : Sep 11 08:00:41 2026 GMT
Subject: CN=41b76f80b18702e8f6b07218eb27574957488e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:25:e4:91:5f:bf:77:35:8e:e7:08:ca:37:
43:9b:25:68:79:2d:6e:67:ad:c8:37:86:ca:a0:56:
0e:bd:e4:64:a7:36:8c:9f:e5:de:78:13:34:8b:0b:
d0:5e:55:50:4f:db:40:02:ab:fd:80:20:88:69:ab:
3a:7c:4f:0a:7b:89:88:22:b3:25:66:29:d2:1c:62:
37:5b:c7:aa:36:b7:89:c2:cb:e6:f2:d0:e7:c0:2f:
87:87:26:82:9d:36:7f:2d:81:90:e5:b1:f3:ec:bb:
60:f6:11:98:fb:7a:00:ab:0d:94:58:a8:3e:64:b1:
a8:40:8f:81:1d:71:22:76:79:00:43:19:9e:78:e9:
64:33:3d:b4:2a:ae:4b:a0:16:1f:fc:fe:1e:87:8e:
d9:2b:76:10:13:c9:cd:f3:d2:2a:93:d3:8b:13:d1:
0f:bd:ad:b9:da:4b:31:75:05:fc:83:ab:be:01:04:
60:d1:4b:66:a6:4e:31:74:e3:42:3e:fd:2a:c2:68:
19:65:7a:d5:40:e2:56:e6:89:a6:60:cd:63:91:43:
62:51:29:a9:39:8a:5e:60:f0:1a:24:32:17:3a:b7:
b0:81:d5:81:a6:66:5c:ad:a8:82:93:39:3e:c3:a9:
34:6d:7b:54:21:b5:81:48:d3:1d:62:de:27:3c:5b:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:6F:80:B1:87:02:E8:F6:B0:72:18:EB:27:57:49:57:48:8E:75
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:9c:36:29:42:d5:ab:2c:cd:78:67:cc:c5:0f:9d:ad:ba:e1:
6a:70:34:a0:6a:3f:30:4a:79:a0:57:1b:16:0f:a1:72:b6:f4:
fa:12:4a:f3:2c:61:bd:5a:3c:36:d2:8a:0c:a9:77:b0:2f:d0:
12:34:d1:08:7e:6d:02:25:74:96:86:d3:98:87:92:63:6c:b9:
93:a8:cb:f8:6b:52:4c:4f:01:59:44:07:6d:1e:09:e3:bb:e2:
ce:10:ab:c7:a2:b8:b4:68:8c:a9:f3:58:67:c8:8d:60:59:34:
dc:a9:0a:df:ac:f8:46:bb:e6:00:f5:38:f3:de:a8:57:98:7f:
4f:57:eb:c5:63:9a:0f:31:51:fa:68:b3:3e:e8:8e:e3:40:68:
a9:44:51:1a:1e:0d:2a:21:3f:8f:73:ef:5c:b6:8a:ba:60:e5:
c0:b9:e4:a2:e0:04:bd:87:dd:cb:ba:7f:20:02:e0:e0:0a:c7:
b2:40:f4:3f:05:9a:3d:31:a2:00:b6:95:ac:98:97:37:5d:49:
c7:7f:1a:98:d9:81:20:31:6c:8a:30:db:1f:c2:02:89:be:68:
77:46:b8:aa:a0:56:66:ff:9f:50:32:60:da:9b:5d:8e:df:a3:
2a:43:15:f3:a2:1a:f0:12:01:74:f4:25:6a:e5:8e:05:33:83:
ed:b1:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:47:53 2026 by rpki-client