Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: zKtvkyo6fS1qcqV09Rul48rWe8T/hSk8Mr83LOQTlBw=
Subject key identifier: 84:2A:85:99:05:F2:85:E4:EE:43:DC:41:5D:4B:5C:C5:0F:22:47:F4
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 01A08C43B8BB2286D02921A779A0B7900AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 17:00:43 +0000
Manifest this update: Thu 10 Sep 2026 17:00:43 +0000
Manifest next update: Fri 11 Sep 2026 17:00:43 +0000
Files and hashes: 1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: nc4w9kU16TjHOl+nIJ8TJni8g9WTD5v8RhTAlgD3vjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:b8:bb:22:86:d0:29:21:a7:79:a0:b7:90:0a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Sep 10 17:00:43 2026 GMT
Not After : Sep 11 17:00:43 2026 GMT
Subject: CN=842a859905f285e4ee43dc415d4b5cc50f2247f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:e8:0d:96:96:01:9f:6f:b1:64:28:df:95:
fd:17:c1:09:57:fc:6f:14:d1:68:2a:fb:af:c4:f8:
b5:38:e9:d9:51:5d:c6:41:ff:cb:bc:10:1c:8a:9d:
40:a2:71:d4:6f:18:ae:ca:98:ba:cb:4b:51:19:aa:
c1:6e:13:4e:62:e5:22:48:2e:c2:cc:a2:8a:e4:5c:
37:29:ad:ec:4c:23:d3:0e:19:11:96:72:0d:d4:86:
ec:83:80:fc:ce:ae:cc:ac:95:a4:82:e3:46:47:c6:
05:ac:4b:13:22:3b:30:82:85:cf:10:3e:6b:b0:e4:
1f:b9:3d:b3:40:9f:4d:87:e4:54:46:9d:8e:d7:c1:
86:a2:b9:7e:40:06:82:d5:94:f4:48:e4:3c:09:a4:
07:1e:b2:64:98:d2:28:7c:69:87:f5:e9:44:47:a9:
71:93:05:8d:50:70:82:3d:a9:e4:9a:0a:25:59:64:
55:67:17:10:6d:ba:c6:ec:77:c4:d8:60:64:96:37:
84:ee:bd:bd:8f:a3:d9:2e:a3:1b:bc:a6:55:cc:29:
45:2a:13:21:10:29:85:d9:85:8a:cf:90:f3:c8:9c:
2f:6e:94:af:fa:c4:af:31:fd:67:ba:8e:0d:c2:5c:
9a:5c:bb:b6:93:cc:32:44:3e:44:d3:a4:9b:9e:58:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:85:99:05:F2:85:E4:EE:43:DC:41:5D:4B:5C:C5:0F:22:47:F4
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d4:4a:b9:86:bf:6b:57:79:45:66:76:a0:c9:91:ae:87:e8:
60:08:df:7d:10:1c:b0:21:d3:62:7f:cc:21:8b:e4:04:92:b1:
a8:0e:a6:d7:32:94:fc:c7:11:8f:4d:ee:f9:e3:85:9c:0f:51:
fd:97:63:cf:d1:17:a8:0d:e6:70:78:91:05:9e:55:13:b3:68:
cb:69:8b:9e:8a:f9:3b:90:fd:a4:c2:54:14:48:18:22:61:a3:
ba:02:09:f4:6f:9f:97:76:68:5f:4d:a6:2b:25:19:d8:ae:b8:
c7:53:38:9d:0a:c7:2d:8a:fa:27:17:28:24:f9:8b:fa:ed:fd:
79:0f:28:cc:ff:7d:3b:02:02:d1:a1:c2:94:a4:16:b1:3e:b6:
ff:79:b9:76:5b:b8:90:e3:a6:90:45:3b:d1:64:b7:39:ff:0e:
3f:4f:75:00:1f:06:b6:4e:af:d0:23:31:48:67:68:3b:6c:db:
ac:b1:ca:3e:b6:d4:d7:7e:17:85:db:8d:78:39:00:32:7f:7f:
ae:6c:81:a4:a0:8f:b9:2e:5b:aa:ba:9c:fb:c3:30:f2:3d:77:
2f:22:9a:34:7d:b4:6b:2c:0f:ef:09:db:50:49:b6:1f:e4:50:
3d:15:37:3c:96:7f:11:e1:51:57:b2:76:b2:61:2c:74:05:08:
d8:77:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:10:32 2026 by rpki-client