Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
File: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft (raw, json)
Hash identifier: DvGff3TZLvl5MFhy5mWKBQM6ktCMAJg/OSrzc/AHx18=
Subject key identifier: 1B:C6:88:5A:32:09:BC:D5:3B:90:25:94:D7:E7:6A:B3:E3:36:45:CF
Authority key identifier: 9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
Certificate issuer: /CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Certificate serial: 01A0588D8B396C17F857AF4F1EE22D783AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
Manifest number: 5E
Signing time: Mon 31 Aug 2026 16:01:06 +0000
Manifest this update: Mon 31 Aug 2026 16:01:06 +0000
Manifest next update: Tue 01 Sep 2026 16:01:06 +0000
Files and hashes: 1: DOzgdPzODjDX1Ql-hTykAK7psLs.roa (hash: mYengSshg8va1KT9JslIYiakS9Az+FP585Uc0+emJdk=)
2: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl (hash: H5P4Z5P/M5ltTNWalLVsIpJ3851Hb6Rv0P5o3XcbTcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:8d:8b:39:6c:17:f8:57:af:4f:1e:e2:2d:78:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Validity
Not Before: Aug 31 16:01:06 2026 GMT
Not After : Sep 1 16:01:06 2026 GMT
Subject: CN=1bc6885a3209bcd53b902594d7e76ab3e33645cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:96:00:be:f6:cf:b5:95:d8:5a:62:0d:76:
6d:f1:65:99:9f:34:98:c9:69:84:e0:2f:f0:ec:7a:
47:09:5e:26:ae:e8:41:09:58:71:cc:2e:a8:ce:25:
16:d8:1f:ab:5a:73:d9:d9:dc:07:2d:0f:6a:1d:dd:
3f:af:70:33:75:66:29:0c:aa:4a:73:07:bc:e4:51:
79:81:0d:69:9d:3c:54:fd:a5:61:03:81:e8:82:42:
7f:33:9f:bb:0b:f9:cc:9d:ca:cf:4b:6d:37:96:50:
a2:39:53:94:41:f3:b7:e1:30:0d:58:5d:8c:aa:57:
56:5f:10:8c:94:ae:04:76:da:a7:31:03:c2:37:7e:
10:4c:dd:1a:1f:b7:7b:b7:b1:5b:41:47:6b:e8:d8:
cd:70:52:46:68:be:b9:15:0a:61:7c:74:06:ed:c1:
a7:be:8b:59:0f:5b:e6:3a:22:70:40:66:23:f1:e8:
05:10:97:0e:d8:90:1d:fe:03:93:d6:26:33:7c:1d:
6f:95:44:bd:51:ef:3d:f0:d9:eb:6c:10:77:aa:ac:
02:eb:a3:45:5a:a1:ef:0c:b5:59:8d:de:ca:94:cc:
32:4a:cc:df:16:5c:3e:9b:b8:71:7f:f8:1a:d4:f4:
b2:86:12:f8:c0:24:0a:3e:15:7a:0c:32:84:cf:3c:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:88:5A:32:09:BC:D5:3B:90:25:94:D7:E7:6A:B3:E3:36:45:CF
X509v3 Authority Key Identifier:
keyid:9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a1:b4:58:31:f0:79:72:28:81:e0:4a:c9:e8:5e:4b:74:14:
38:cd:1d:2b:61:ad:a5:73:66:f3:c4:2d:0b:4e:ea:19:0e:52:
02:f3:64:84:b4:de:78:27:21:aa:36:c2:de:f8:f1:6c:5f:fd:
79:3c:cd:34:0d:91:b2:e0:d1:01:40:e8:fc:1e:7e:d4:3a:a0:
fe:f3:33:f9:5b:5a:df:42:a4:78:55:f2:27:4b:8c:66:2d:fe:
16:89:56:df:5f:63:06:dc:02:c3:e1:04:45:7c:cc:cd:ef:b4:
7c:d2:b9:47:fe:a3:e7:7d:de:0b:ad:91:c1:05:ae:8f:b6:cb:
94:2a:f5:f2:22:98:1c:d9:33:e3:27:53:02:e6:71:33:18:2d:
06:d1:da:59:e6:aa:b5:9c:99:e4:53:ce:38:c7:fa:b2:89:f9:
91:bd:f0:f3:24:a0:18:f5:85:46:b5:dc:e6:06:f2:72:81:bf:
77:42:2a:7d:35:65:b1:8c:56:15:35:e0:a3:c9:a3:dc:3c:02:
8d:8d:e9:37:a9:53:a0:fa:83:2e:9d:39:b8:c8:83:1f:82:18:
27:7d:3b:5b:6d:33:a2:7a:03:ae:c3:63:d3:f3:a5:5b:ff:b4:
6b:e0:2e:46:15:39:3e:31:dd:c4:2a:bc:70:c4:bb:b3:b9:bc:
ea:a5:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:23 2026 by rpki-client