Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: JnaCd5wpglS2wFwpFPmKVuPQKfrN+Z07UF7JjcAd95s=
Subject key identifier: A0:B5:5B:DE:D5:48:2D:07:FB:C0:DA:D1:E2:3C:32:75:42:3B:A3:A5
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 01A15B1EA961781AAD835616493D31CC8A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 21:01:38 +0000
Manifest this update: Tue 20 Oct 2026 21:01:38 +0000
Manifest next update: Wed 21 Oct 2026 21:01:38 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: qvYk8/ce8LJy1BSbhnFXDAEwgi3L4rgx9GBk89Af4PI=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:a9:61:78:1a:ad:83:56:16:49:3d:31:cc:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Oct 20 21:01:38 2026 GMT
Not After : Oct 21 21:01:38 2026 GMT
Subject: CN=a0b55bded5482d07fbc0dad1e23c3275423ba3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:52:d7:2d:31:9b:3c:18:50:d8:95:2d:a5:96:
3a:f5:8f:af:8d:93:41:ea:68:3e:49:cf:5b:9f:25:
de:49:e0:d1:a2:9d:64:9d:92:33:d9:20:64:e1:d3:
f0:53:24:b4:6f:ac:a2:c6:22:be:65:c5:5e:ca:5d:
69:c6:37:7c:32:12:4e:70:62:4c:c6:2d:ee:f8:93:
b8:b1:7f:d7:b9:d6:36:56:0d:13:fe:b6:a3:01:aa:
4a:7b:2a:c4:90:4d:52:40:fa:7a:62:fe:33:d1:06:
d5:59:63:47:1f:48:39:6d:66:ba:df:da:d5:88:15:
c5:7e:a8:34:24:76:57:0c:a8:f0:d0:73:8d:4e:88:
5d:8f:52:0d:d7:6e:e6:9f:44:1f:d0:c2:aa:56:e4:
b8:3b:e4:5e:bb:ed:7a:3e:14:72:9a:0b:af:ca:5d:
b6:30:9d:71:32:1e:87:75:9c:75:f2:12:07:51:50:
1a:ba:f3:6a:21:c3:b7:98:1b:6a:05:a6:9a:da:22:
d2:33:72:68:08:54:31:33:86:92:d3:c8:df:e4:82:
fe:d8:54:e3:eb:9f:71:1b:46:cd:c7:c8:ee:d7:1f:
1e:87:33:68:44:51:b2:b8:3b:c5:b0:1c:a5:03:2e:
9b:5e:af:50:a0:2f:be:94:38:ec:cf:a4:2f:53:48:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:5B:DE:D5:48:2D:07:FB:C0:DA:D1:E2:3C:32:75:42:3B:A3:A5
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:bd:91:59:1d:82:34:41:64:f2:75:d6:7b:0c:f8:46:aa:11:
26:61:08:11:47:37:15:62:91:55:d5:ac:19:f8:b8:97:38:6c:
b9:fa:05:17:d1:58:86:31:61:25:a2:c2:05:e2:3e:c5:da:f9:
8f:c0:b5:b1:3b:7c:cc:b7:21:68:2b:77:15:31:24:f9:57:6d:
95:98:21:2b:b2:b8:a8:18:49:37:b3:e1:8e:5b:bc:68:20:23:
f6:78:24:33:d9:ca:e7:72:e7:a3:33:54:d7:b6:94:d4:dc:3e:
ca:b1:22:bf:b3:e9:4c:30:c5:bc:7d:1f:91:55:63:72:40:bd:
83:fe:06:00:31:10:e3:51:a8:b5:f8:ea:bf:34:b5:de:cc:12:
45:b1:1a:50:f4:cd:4e:f7:24:ef:98:43:8c:1b:e6:a3:0d:9c:
80:a3:38:17:ed:00:80:fe:d3:47:dd:ea:07:95:0f:d9:51:4f:
a8:15:cd:25:ee:40:6c:47:cd:d1:df:aa:4c:83:99:ef:28:b0:
a9:4a:7e:d4:4b:01:b5:78:75:17:d0:2d:b5:f2:24:e6:1e:3c:
7d:b4:7f:cb:20:13:bb:3e:08:97:17:0e:30:fe:bc:05:b0:2e:
38:10:42:54:93:05:16:16:74:f3:a3:04:00:ba:51:f9:15:f6:
a2:06:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:19:18 2026 by rpki-client