Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier: J4cbMGt4ezeTwVuYmogr0v9RrbnQ1inkmwgZNHtfWj4=
Subject key identifier: D2:4B:CF:5B:F7:4A:B3:9B:D7:40:F1:93:68:F4:54:14:2F:57:8C:95
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 01A1197466F72449FFC21CD6524D6402B3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number: 1A72
Signing time: Thu 08 Oct 2026 03:00:21 +0000
Manifest this update: Thu 08 Oct 2026 03:00:21 +0000
Manifest next update: Fri 09 Oct 2026 03:00:21 +0000
Files and hashes: 1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: 8t6L6aEYDfrC2JEkuk9OR6dRSpqx0/oOI/FDctzAlp0=)
7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:66:f7:24:49:ff:c2:1c:d6:52:4d:64:02:b3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Oct 8 03:00:21 2026 GMT
Not After : Oct 9 03:00:21 2026 GMT
Subject: CN=d24bcf5bf74ab39bd740f19368f454142f578c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:18:fb:dd:a7:d4:2f:5e:49:07:cf:66:d4:
5e:3e:f0:ef:2a:37:09:61:f4:7c:4d:c1:01:a7:d2:
c1:98:fa:95:f9:a2:dd:c6:fd:07:3c:84:4f:a9:b0:
27:0c:12:22:38:df:bb:1c:27:7d:f1:d7:69:33:e8:
39:b1:c5:e3:cd:22:48:a6:19:f5:ad:09:d3:0a:b2:
43:27:df:ac:07:2b:e6:53:5d:c6:a0:30:2a:d1:4d:
f0:26:30:46:8f:30:b8:31:e8:1f:28:95:5b:ae:75:
74:6c:d5:5c:ba:a3:33:02:19:b7:2b:31:5a:fa:cb:
5b:58:4c:38:4e:61:a8:02:8d:4d:f9:cb:cb:74:3d:
1a:55:4f:cd:e0:b2:b9:ca:ab:4f:ee:d7:af:43:94:
a0:fe:04:da:f9:dc:1a:c8:b5:63:d6:45:71:1c:8e:
5a:09:79:e6:83:3c:9b:c8:8a:6b:bb:4a:4e:82:32:
d8:64:78:21:cd:5a:ec:e0:83:2a:77:19:ff:af:77:
0f:3b:bf:22:72:f3:a9:ed:c5:6a:d1:eb:56:65:3d:
6b:e4:89:73:98:8f:3f:1d:50:7d:f5:4e:a5:35:d7:
16:6c:aa:fb:dd:c6:64:c4:5e:57:3a:90:2b:39:9d:
24:7c:7e:8a:3a:6e:af:2b:ac:c0:ed:b3:b0:90:3e:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4B:CF:5B:F7:4A:B3:9B:D7:40:F1:93:68:F4:54:14:2F:57:8C:95
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:68:47:f4:d1:ed:ad:47:e5:90:9f:56:00:f4:f0:01:3a:08:
11:90:8d:c3:4b:6c:80:a9:db:db:b2:f1:39:99:c3:90:8c:cf:
54:40:b3:58:5a:d0:5e:bf:4a:92:29:55:20:00:ab:2b:ea:4c:
af:98:67:73:59:df:cd:f2:f0:ea:f1:c3:36:63:4d:2f:06:d5:
ee:0b:ce:eb:18:f5:cf:1a:3b:8f:8e:df:c4:ac:35:e2:91:27:
26:7b:a5:51:f1:cf:db:30:da:bf:e6:88:0b:b8:39:a3:62:6e:
23:d7:f2:6d:9a:c7:a1:97:13:76:e7:a5:b6:40:6e:ce:66:f4:
ab:fb:a5:a2:2d:8b:63:e2:5d:29:e4:ec:70:92:15:63:72:53:
96:d1:ab:8e:ca:05:46:fb:d6:91:51:cc:8e:05:d9:43:4e:c6:
86:de:cd:ac:c4:bf:ae:8b:7f:bc:c2:dc:8f:f3:98:39:9b:c1:
b9:91:5a:9a:4a:13:0f:db:a4:9c:f4:f0:4a:a5:0f:86:c3:00:
e6:38:14:06:af:29:68:24:12:76:96:9c:95:6e:b1:56:d5:1c:
ed:52:8b:b1:b8:7a:86:14:03:4f:d4:1d:8b:e6:6b:2f:11:d8:
16:85:1c:79:2a:c6:ff:19:14:ec:12:8e:10:fb:15:c6:f8:ce:
be:e8:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:55 2026 by rpki-client