Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: HURxTA9cf128RejLP+Z02WpQKdzglsFfczO0kWWlcCk=
Subject key identifier: 59:FF:04:31:C8:7F:A9:D4:BC:42:FB:B0:FB:EF:8D:BD:38:A8:01:02
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 01A0F042FAE7010CE801610CBDF323F49759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1A87
Signing time: Wed 30 Sep 2026 03:01:56 +0000
Manifest this update: Wed 30 Sep 2026 03:01:56 +0000
Manifest next update: Thu 01 Oct 2026 03:01:56 +0000
Files and hashes: 1: 1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa (hash: RPgG1SJlqfEsV732+LedUmH+jks8p7lo8I/jwtQGL9I=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: ZInQvdk69r1L1cvRr41ffvleLsMLI4zhSRiW7YGEJ8M=)
3: crwkgLLFi1G5PStFW-NTuVWRboI.roa (hash: DbnKu1FnYU/F077cUpyCX4xEr0gw1CrOBRGG+CxkZak=)
4: zKnIccT3hpq7mrgNoTixXX9HFi4.asa (hash: K8JZzx6Z1h1UR7j3IPl+w/Mcd6HooSedU1r9W9OQlkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:fa:e7:01:0c:e8:01:61:0c:bd:f3:23:f4:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Sep 30 03:01:56 2026 GMT
Not After : Oct 1 03:01:56 2026 GMT
Subject: CN=59ff0431c87fa9d4bc42fbb0fbef8dbd38a80102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:4d:7d:a2:fe:2e:9b:f8:ca:bd:10:8f:6d:
a5:f1:7e:e9:ba:dd:e1:17:75:67:f5:eb:6e:c1:d5:
70:f0:a8:35:5c:8f:51:5e:33:c3:82:f1:a6:0f:0d:
b7:f0:c8:e6:e4:fa:20:53:d5:ab:d7:a6:fa:a9:6d:
64:ba:8a:b3:0c:04:73:e1:bc:19:fd:e3:17:72:9f:
48:78:99:bc:e6:b6:1d:53:83:af:ef:d4:64:18:1d:
b2:18:05:7d:ec:dd:b6:e8:c4:22:da:cc:99:53:2c:
85:cd:9a:e6:2b:a7:dd:14:fc:ce:f7:08:0a:95:07:
18:6d:a2:a1:d8:8e:c3:9f:73:eb:f9:9b:1f:fd:6a:
ea:5e:b7:a4:88:f5:18:ce:d2:8f:13:34:50:7e:ba:
62:11:63:63:12:7c:67:71:1d:a5:f8:10:3e:e1:93:
e7:ca:e5:e3:93:e4:28:b1:8d:27:f6:a4:30:60:1c:
28:60:15:49:4f:73:a1:18:38:e0:33:23:59:3e:95:
56:7d:26:b4:44:5f:a5:9a:46:7f:d9:ca:33:f7:58:
9d:52:38:da:7f:e3:4d:29:50:ee:58:ff:5e:34:19:
13:1d:3e:e3:e6:ce:e6:67:fb:a1:8e:7e:57:fc:95:
28:a7:67:ff:d1:4f:72:88:c2:86:21:a3:5c:bc:de:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FF:04:31:C8:7F:A9:D4:BC:42:FB:B0:FB:EF:8D:BD:38:A8:01:02
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:eb:7f:f1:f7:83:92:70:90:c4:12:73:2a:a2:fc:1c:c7:
ef:f6:5e:cd:ec:23:74:cc:b7:96:53:25:05:6c:c2:3e:a0:1a:
a1:e5:53:ba:28:d7:dc:18:f7:0e:a3:3e:70:c9:ab:9f:0c:b8:
79:77:2e:75:cc:75:3c:80:22:2d:ff:8b:29:3e:45:f2:4b:55:
eb:27:76:5f:b6:c6:b0:ca:20:e8:c8:63:f9:6d:fd:0d:17:c7:
eb:ea:ac:fd:ee:8b:e6:0d:54:5e:6b:89:a4:fe:83:c0:d1:b2:
24:18:e7:03:76:f1:be:f2:e3:e4:28:7a:45:71:ce:f7:f0:e5:
61:08:1d:fe:ae:9b:88:fd:36:10:5f:d5:74:56:fc:97:f8:f4:
6f:62:1c:b5:7b:cd:8c:6d:1a:9a:1c:3d:96:55:47:53:81:2b:
75:51:fa:5c:fb:d0:8d:30:50:d1:87:fa:c1:5d:f9:31:b0:d7:
5f:88:5a:b6:78:2c:71:60:20:88:e8:b0:49:cb:c9:a5:41:8d:
75:57:86:69:98:26:73:ad:85:b3:53:f1:e6:4c:d5:e4:f9:5b:
37:af:4d:4a:20:df:fb:a4:28:b6:8f:36:f0:35:6d:fd:ca:75:
53:98:ad:2b:34:1e:2b:13:2c:4d:cd:fd:b0:db:bb:32:45:e4:
3d:65:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:42:54 2026 by rpki-client