Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File: nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier: SoS5SJdnN6u3wWSESmUaOa/PN4EvNg3w7MwcAg6F0Yc=
Subject key identifier: AE:BE:36:D1:CE:F7:3F:EE:FD:15:E2:E3:5D:AF:8B:A7:C4:10:EA:10
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 01A1599D9E72EBF218CE36045C07E222FD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 14:01:04 +0000
Manifest this update: Tue 20 Oct 2026 14:01:04 +0000
Manifest next update: Wed 21 Oct 2026 14:01:04 +0000
Files and hashes: 1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: e9kuTeIoIxOeaGqNxITNQGeiATlrygzOKc1U63dzDJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9d:9e:72:eb:f2:18:ce:36:04:5c:07:e2:22:fd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Oct 20 14:01:04 2026 GMT
Not After : Oct 21 14:01:04 2026 GMT
Subject: CN=aebe36d1cef73feefd15e2e35daf8ba7c410ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:26:13:95:a5:88:5b:96:c2:bd:11:50:aa:
09:87:bb:48:57:83:f9:f0:73:a3:fb:64:b4:e9:be:
12:f1:9e:b9:e7:1d:e1:96:a8:8b:36:3e:ec:f6:a9:
b8:7e:56:ee:88:ee:92:97:e1:71:d6:ad:90:61:fb:
49:53:d5:a0:82:70:06:0b:79:6c:67:54:99:f7:ea:
61:81:9a:ba:47:c8:4c:1c:5e:f6:66:80:47:a1:13:
e7:4e:28:54:8c:7f:13:bd:a3:9b:db:b0:ea:da:47:
d7:04:a9:a2:44:ea:52:3a:50:36:e2:0a:b9:fc:f2:
85:6d:1c:78:a8:f1:03:f1:fe:04:d6:ce:9b:44:2e:
65:e2:a5:39:0b:1c:ed:2a:60:20:95:ac:0d:d6:a8:
a5:93:af:91:2d:b2:bb:a4:64:8e:d1:3b:31:10:34:
a4:d5:17:1b:3f:75:2b:40:72:81:3c:59:2c:b3:35:
da:90:28:de:d2:26:7d:27:34:3e:5e:03:e2:f6:2a:
dd:e6:30:3c:7d:6e:ce:6a:2d:f7:d8:af:c5:1e:c7:
1c:66:27:2b:68:ba:61:b9:cd:34:26:e2:8a:27:97:
db:a1:ee:8b:fe:86:79:b4:45:64:6b:ed:8b:f3:ae:
0b:ff:2e:31:4e:0a:98:a4:d0:9d:21:3b:8c:75:b3:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:36:D1:CE:F7:3F:EE:FD:15:E2:E3:5D:AF:8B:A7:C4:10:EA:10
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:98:32:2e:e6:94:05:13:66:35:76:cd:c4:66:cd:f2:2e:78:
cf:c5:1a:a9:03:50:8a:b1:a9:a1:c8:25:dd:9d:39:d5:60:3e:
8d:6a:fd:49:0b:73:ff:18:c7:2a:22:70:0f:b5:14:01:65:66:
83:dc:6e:45:3b:e7:89:c2:59:cf:d7:58:6e:ad:84:eb:e1:6e:
2d:54:c3:f6:26:06:13:8e:22:fe:72:85:d6:e4:0e:20:63:ce:
b2:cd:4b:42:b4:51:82:42:ef:a7:25:57:66:93:c7:fc:27:a1:
8c:57:64:8b:f4:a2:e0:2e:93:9e:23:43:39:89:45:fb:3e:24:
b9:c6:58:d4:bc:a0:55:98:2d:e4:89:f0:32:c8:ab:cb:68:21:
60:31:2d:33:08:aa:4e:b5:a1:ac:2a:c6:29:a4:20:67:6b:df:
cf:60:a0:a0:32:ea:8d:d9:5a:f7:c5:42:79:be:4c:2d:9a:19:
43:03:d8:4a:cd:65:78:45:7f:dd:8f:01:85:42:4c:d2:a0:3d:
d8:08:c9:f7:ec:90:4e:66:9c:b1:14:70:4b:e0:0a:09:15:e1:
93:e5:ef:e0:78:52:4e:48:c6:fd:ab:53:25:72:1b:d1:71:d9:
e4:ef:e1:4c:82:3c:24:06:cd:6a:f0:ed:66:03:60:41:80:73:
46:e1:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:33 2026 by rpki-client