Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: S3FLFSDa4oDifTbcnSO4pMKfWBRsZYduTVRrZDqqwFA=
Subject key identifier: 0B:15:0B:2B:09:A9:22:A8:3F:10:7F:93:87:84:99:78:2A:2F:AA:58
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 01A16156FFD4C9C1AD53A92B66341DB2504B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0A6F
Signing time: Thu 22 Oct 2026 02:00:53 +0000
Manifest this update: Thu 22 Oct 2026 02:00:53 +0000
Manifest next update: Fri 23 Oct 2026 02:00:53 +0000
Files and hashes: 1: GabJ5twvONaV1oDv6R6xRBsqjPI.roa (hash: VboUrV+ncooHpKApDm37rXqvF783TBpkHD8FibYc72I=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: pUhGl6e1g6Y824PmNARzs4zQ/LtT4bJTFpQvn3foJQ0=)
3: WqDYkLVstMonrCj4dC5iBXxan-U.roa (hash: G8VWWDKI9sp/TM5uduS2yPz7BYIgFFNJMWsqqgCcC2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:56:ff:d4:c9:c1:ad:53:a9:2b:66:34:1d:b2:50:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Oct 22 02:00:53 2026 GMT
Not After : Oct 23 02:00:53 2026 GMT
Subject: CN=0b150b2b09a922a83f107f93878499782a2faa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:fe:13:9c:ad:29:6a:4c:8c:fd:54:82:28:
6b:6a:51:49:7a:d6:50:48:1b:77:73:10:86:45:83:
f3:7f:35:65:4f:c9:61:d7:54:fe:b9:71:f2:ea:e2:
8d:ed:3f:6c:c6:82:e8:8f:df:80:56:cb:33:1d:f9:
fa:6b:76:34:02:a0:1d:0c:c5:df:72:1a:a5:33:4e:
e0:61:0a:f9:4d:c1:41:70:50:40:5f:df:96:00:2b:
64:37:ef:7c:c6:da:85:35:16:3f:1e:eb:6f:e9:a1:
1d:04:77:66:8e:45:cc:f9:25:ef:ad:0d:db:ac:02:
95:fb:d6:2c:40:dd:4d:23:e5:46:4b:ab:28:90:1b:
48:9e:68:ea:f2:6b:ea:4f:7f:90:0e:19:c2:6b:fd:
22:4f:89:96:28:39:24:5d:38:e0:fb:82:ed:d3:ef:
fd:ef:12:5f:14:8e:2f:64:ac:06:44:d3:15:81:fb:
e1:cc:fc:10:33:d4:20:ba:64:9b:56:20:5c:a8:ae:
ea:b8:ea:84:48:19:53:d6:fe:55:2a:17:ed:92:78:
ef:b0:29:5c:65:fc:ef:d6:2d:23:74:bd:5e:31:db:
85:1b:7c:ba:a7:b5:c2:eb:c1:d2:9a:a4:3e:0f:63:
f3:2c:79:a7:6e:62:b6:44:23:76:44:0c:09:af:bc:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:0B:2B:09:A9:22:A8:3F:10:7F:93:87:84:99:78:2A:2F:AA:58
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:05:3b:6d:05:73:40:bc:b3:58:c6:2f:db:17:61:16:1c:3c:
f9:9d:84:40:a8:10:84:9f:c0:7c:8a:bd:ff:27:a9:45:a4:c6:
a4:93:14:ec:fd:44:05:39:d1:54:ee:fd:e3:f0:29:28:24:19:
40:d0:88:1e:9a:69:45:55:73:92:7e:50:e7:c1:e9:57:61:d4:
a5:1d:e8:c3:17:3e:48:36:08:22:f0:b8:90:7f:08:8f:2e:f7:
28:53:0a:ab:0a:1a:71:ad:5e:6c:48:c2:e9:a5:9a:fb:67:9e:
f7:5f:c6:ac:1a:c9:11:11:fc:d5:91:1b:f0:df:a6:33:17:4f:
79:3b:f2:26:f8:bc:d0:a8:45:e1:c4:30:33:6d:03:bd:16:8f:
78:e2:9a:f0:20:2a:b2:b6:48:3b:56:b1:e7:eb:ac:d1:e1:88:
33:8b:af:23:c4:80:38:02:f8:22:b4:bf:17:30:1f:93:ed:31:
bb:81:d9:df:9f:84:4c:8d:76:c5:b7:c7:2d:84:51:90:59:b8:
f7:c7:98:e1:4a:fb:ce:b8:95:14:91:5f:ec:05:4d:a0:6c:6e:
6f:1c:15:4c:91:cc:af:64:f6:27:94:eb:ea:25:f4:8e:e3:a2:
e2:11:78:85:78:cd:f6:c0:c2:10:3c:cc:be:20:d1:93:b8:04:
d0:50:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:59:08 2026 by rpki-client