Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: i6QRU+U2a3UBfqHevUHEHP/95yXxgFQvYY3HGvHu900=
Subject key identifier: 6D:92:24:73:AE:80:A0:47:18:5F:62:74:42:7A:0B:E8:5D:20:A3:AF
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 01A1551C528B01DCCBEE5C7CB5E1FA66B08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 1AAD
Signing time: Mon 19 Oct 2026 17:01:21 +0000
Manifest this update: Mon 19 Oct 2026 17:01:21 +0000
Manifest next update: Tue 20 Oct 2026 17:01:21 +0000
Files and hashes: 1: XxU53iskn-ghQrysuCl7QV5EIVs.roa (hash: oqxXXhRu60oNNFxZKXkIA3Jy2yC1dlqRqHIbYUOutog=)
2: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: j2KaCO815AVWivH9esMVom0r2Fw39iCEJENLQVYs7xc=)
3: nneKuyGudgnv0PN8n2dZjphyBVE.roa (hash: KIC2+ZKN98r/9K20gCZWzWZI9OqGxcTSO8qEwBBgPA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:52:8b:01:dc:cb:ee:5c:7c:b5:e1:fa:66:b0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Oct 19 17:01:21 2026 GMT
Not After : Oct 20 17:01:21 2026 GMT
Subject: CN=6d922473ae80a047185f6274427a0be85d20a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:2a:d3:bf:ea:94:7b:6f:37:6f:8e:da:ec:
4e:38:4b:4c:27:98:46:16:94:c9:e3:f4:0e:75:88:
3b:01:ae:fc:11:5c:9f:45:a5:a7:c0:fb:68:8d:ff:
51:5a:e1:ca:44:50:82:28:25:c4:14:cd:0f:29:4d:
93:c5:56:8a:c5:ea:d4:38:55:47:08:8b:92:ce:99:
95:d1:24:a7:b7:34:67:07:e8:d2:b0:6c:56:db:f6:
57:6a:ac:3f:3f:e3:d0:d1:7a:29:77:83:f9:a1:ef:
fd:76:50:8b:38:00:f3:74:02:ff:50:e5:27:22:b1:
e4:a4:f8:ba:f3:b5:92:7b:6f:a0:f9:6e:da:ab:17:
a2:43:80:da:4c:f4:d1:66:95:27:2e:8c:0e:6b:28:
4a:34:81:5e:e6:1d:68:f4:97:b7:ac:ce:1c:2d:50:
b8:9d:ea:3f:03:43:fe:59:43:b2:4f:ed:2f:be:60:
30:c3:10:6f:f0:d8:1b:b7:c2:eb:fb:a9:c3:46:35:
8e:18:af:2b:bd:85:21:d5:0c:4f:e2:3f:e2:a6:28:
b4:b4:76:30:8a:7e:79:6d:70:0d:96:74:b3:63:cc:
1f:b0:a9:de:0f:c6:5c:59:9c:bb:fa:11:1c:4c:1e:
a0:20:8b:8b:c6:a7:0a:e9:85:34:2c:9c:f1:20:89:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:92:24:73:AE:80:A0:47:18:5F:62:74:42:7A:0B:E8:5D:20:A3:AF
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:22:da:1d:3f:ff:0f:f6:6f:ac:d4:63:5c:b6:0b:2e:ed:5a:
a4:6b:50:f1:c7:68:b0:e9:62:96:2d:eb:86:0f:6d:1f:a9:0c:
e5:07:78:88:cd:41:e5:4c:6f:b4:8f:e6:9a:c7:0d:f9:2c:51:
9f:56:15:17:46:8c:5e:ee:d5:56:24:54:df:41:f5:ce:fe:3e:
ce:fc:8f:de:af:84:93:18:2b:a0:15:4f:7a:4b:df:9b:82:db:
1a:79:fd:9d:70:00:f8:83:66:de:27:f1:70:15:4b:ab:65:54:
ea:8d:2b:e8:39:ac:91:94:10:2f:94:ff:68:30:74:95:99:44:
df:29:8e:ee:e3:e8:de:b8:f5:94:5f:9e:b9:08:52:a0:4a:21:
82:60:34:f9:ac:56:4d:29:6c:13:2d:b4:83:cb:30:3f:99:3b:
6d:a6:f1:52:65:89:9a:c0:66:37:1b:78:70:09:ba:75:ca:8e:
65:c9:26:29:9f:b9:ff:39:fb:bd:6f:80:40:1a:66:f8:0f:8a:
c1:b1:0c:f9:40:07:e8:0b:3b:b3:0f:9a:a4:a9:38:92:b0:e3:
8a:e5:5c:9b:77:9a:ed:6b:e4:35:3b:57:6c:30:fe:d8:a2:61:
a7:5f:bb:a2:3d:8d:42:d8:69:29:60:06:43:40:52:5a:3e:74:
95:c0:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:26:28 2026 by rpki-client