Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File: nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier: KSWZIs/HBezla6TLKJQfJBVRIeEUaizAiZeYO5uVNJ4=
Subject key identifier: A6:F8:5A:AA:CC:36:DB:44:52:59:7A:32:11:CE:18:D0:57:9C:EB:E9
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 01A0EE1CDF7C0B1F708F8E6A5F4A9C12F8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 17:01:04 +0000
Manifest this update: Tue 29 Sep 2026 17:01:04 +0000
Manifest next update: Wed 30 Sep 2026 17:01:04 +0000
Files and hashes: 1: 1-eiJaBH2kYrPZhQkGjIEcyrY7IM.roa (hash: gzeqOddWkamgLifKoDiz8pUqA/+BC13d2Fw5TMWD4jQ=)
2: Zq98Iidw2cw0Zo72hXFz8p4vmU0.roa (hash: QzQp2VEgOsKH9qFSE3tdbQaitBr0SbkYp6vIsvTA6fc=)
3: m2iSJFXrSMffknc75dt6nX4q_Ew.roa (hash: PpUMfeh4JgwhVE55OoPUjweIHDdfcBKVjcHcumEVNd8=)
4: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: rhmcgXA1JNgG8HXmx63hnOGO7IJ5sKq5/XNiwZ5pEdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1c:df:7c:0b:1f:70:8f:8e:6a:5f:4a:9c:12:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Sep 29 17:01:04 2026 GMT
Not After : Sep 30 17:01:04 2026 GMT
Subject: CN=a6f85aaacc36db4452597a3211ce18d0579cebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:52:25:86:40:2f:ef:ff:5b:cf:41:52:4e:
b5:a1:e8:98:32:db:7d:af:7b:04:19:4c:d9:57:7d:
20:fd:f1:de:b4:c3:d9:d8:f9:cd:83:05:9a:81:89:
ad:70:ae:fb:65:15:b1:d0:f2:e9:4b:b0:33:d7:b7:
08:cc:7d:a6:2c:ec:cc:07:2d:1c:d9:cc:45:d3:2f:
fb:eb:3f:d5:81:be:56:a5:0b:e8:92:36:4d:af:5c:
85:a3:74:16:39:49:f5:13:72:6f:9f:bf:99:d0:3b:
de:64:2c:f7:40:51:a9:67:ef:be:ec:dc:58:5d:c0:
50:84:6d:f6:31:51:01:c2:3c:6e:36:c6:6a:63:cf:
28:72:bb:42:c8:77:7b:b5:ec:16:e6:32:34:79:59:
a9:8c:3f:a7:46:12:d4:c5:94:60:71:73:c5:e4:45:
04:1c:78:e8:a2:28:bf:02:6d:dc:7e:f8:19:fc:b5:
32:5d:78:b2:cd:b6:b7:8d:2e:12:49:6d:4b:f9:35:
a1:10:93:77:ac:02:a6:53:c5:dd:09:0d:e4:f3:e3:
ae:eb:25:dc:b5:64:03:82:19:9c:89:6e:be:36:63:
a0:27:d4:2e:f4:38:36:f0:ac:47:5d:a7:d2:5d:13:
06:d3:69:56:f8:44:b9:84:d7:fe:8a:87:f6:7e:25:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:5A:AA:CC:36:DB:44:52:59:7A:32:11:CE:18:D0:57:9C:EB:E9
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:bf:e3:e9:ab:ef:08:a0:17:99:91:a6:98:e2:99:40:8c:
f3:11:83:6f:ce:44:6c:8f:3e:5e:38:d3:98:97:d8:7f:82:ab:
79:8a:48:9d:cc:e2:97:4f:be:e8:50:f1:8f:94:4e:82:51:f2:
4a:c5:1a:86:3c:07:b4:37:1e:67:c9:f5:0b:c6:ec:87:c7:0b:
75:3f:69:d7:25:f1:3c:d3:c8:c4:03:8f:0d:2d:cb:d9:30:ee:
83:74:bb:1d:d0:57:a0:bd:55:b1:b2:0a:27:5e:32:aa:38:72:
7b:14:b5:2c:1c:0f:46:d9:f2:60:7c:d4:49:ce:39:c8:3f:11:
f0:53:d3:a0:9a:2d:67:bf:7e:2f:76:3f:38:d8:c3:4c:9e:4e:
cf:5f:86:8a:89:06:47:e1:fd:8c:4d:ed:6f:a2:ac:6d:7e:0b:
5f:8c:a3:9d:76:b1:5f:db:2b:0c:cb:e6:e9:26:38:16:a0:d1:
31:93:3e:29:5f:8b:82:eb:10:ab:bb:8a:ae:10:0a:5b:6d:96:
1c:f6:18:18:63:66:09:5a:6d:3e:84:86:f1:2e:07:ec:6b:63:
e9:15:07:cd:f5:e7:75:61:7d:d9:20:95:dc:81:eb:5c:26:6f:
ef:16:f0:d7:13:39:c9:9b:b2:1d:c6:25:c4:ce:22:0a:22:55:
e0:13:ae:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:04 2026 by rpki-client