Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File: nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier: /N3grO5bgHh3dDKnNIHQY71+yaKkGHDInrJZMdhB9R8=
Subject key identifier: 73:29:4B:E8:9D:F0:3E:60:60:74:62:20:32:49:D5:DA:10:34:F3:97
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial: 01A171DCBB86EDE6F77037B295A75B4C6A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number: 1ABF
Signing time: Sun 25 Oct 2026 07:00:53 +0000
Manifest this update: Sun 25 Oct 2026 07:00:53 +0000
Manifest next update: Mon 26 Oct 2026 07:00:53 +0000
Files and hashes: 1: EqP-OwutSropMKZDpJsJICxaOQA.roa (hash: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA=)
2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: aeZY2NMtenRuAJ4/2WSk9dJwLXSMLaNmtVUQxLErHbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:dc:bb:86:ed:e6:f7:70:37:b2:95:a7:5b:4c:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Validity
Not Before: Oct 25 07:00:53 2026 GMT
Not After : Oct 26 07:00:53 2026 GMT
Subject: CN=73294be89df03e60607462203249d5da1034f397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:3f:6b:81:89:d0:88:04:96:03:ea:16:e4:
6e:2e:d6:84:0c:6e:d0:da:ec:1a:2b:86:50:e5:c3:
3c:fc:24:af:26:5b:61:7b:5d:58:36:40:d8:66:5c:
06:3e:39:06:ae:eb:73:84:05:ec:d7:8a:44:af:69:
17:e2:c4:77:fd:7d:17:7f:58:ee:55:38:95:f7:a2:
05:a9:e0:00:af:49:53:23:be:dc:66:c3:ca:d6:56:
8c:06:16:3f:e4:9d:73:fd:35:f0:d3:a1:72:d1:d7:
27:f1:d2:9a:11:02:05:ec:16:e1:39:5a:47:08:ac:
a7:b8:2a:bb:73:99:7a:28:8e:fe:9f:5d:d3:34:3b:
20:a3:82:eb:f0:35:44:e4:f9:cd:08:d1:8d:f0:f9:
48:25:f0:62:29:fc:75:38:74:a0:28:35:f4:7f:51:
17:be:a9:15:f4:b8:3f:8e:84:59:05:1a:2d:d1:06:
d5:2f:63:26:9d:68:d9:c1:1e:06:e1:70:d5:23:35:
3a:c2:7c:b7:4b:43:83:b1:eb:68:9c:b8:d5:04:2d:
4c:1d:e2:fc:34:64:5c:cf:c4:72:37:28:56:04:a4:
2b:6b:24:a5:83:cf:3f:6f:32:84:a4:05:4c:29:5c:
d0:2c:82:1a:17:f7:45:72:ff:f4:fb:a3:b1:62:fd:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:4B:E8:9D:F0:3E:60:60:74:62:20:32:49:D5:DA:10:34:F3:97
X509v3 Authority Key Identifier:
keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:83:72:e8:ae:c9:2a:30:3e:e1:1d:12:b9:2f:a8:1c:b6:f7:
72:f8:ef:a2:bf:4f:9b:86:c6:89:0a:24:8d:68:14:2e:1d:86:
6a:5d:28:5b:3a:3b:56:33:e5:28:67:cc:6d:a6:d2:53:02:9b:
13:c4:9e:04:ec:0e:53:e4:d9:af:03:ce:60:9c:b5:a5:a1:33:
b6:62:ac:fd:ce:15:5e:2e:3a:c9:0d:b9:0a:1d:13:c9:f8:2e:
b7:eb:03:83:63:fd:dd:32:34:2f:8d:e3:8c:dc:67:11:91:98:
9c:0a:b1:e3:a3:fb:48:a4:44:c4:d5:7f:66:42:b5:ee:14:09:
bc:a5:81:f1:7e:81:2e:b6:5a:52:24:6f:cb:fd:76:98:0f:21:
bd:b2:0f:b4:25:7d:ca:9c:3a:a9:84:e7:78:d1:33:99:4d:b3:
50:ae:7f:00:a9:3f:fa:3d:79:c1:97:91:89:21:cd:13:bc:0d:
67:77:9f:df:6f:f9:51:58:ea:dc:3f:70:f1:1a:1d:e5:f6:c3:
30:ce:fb:12:d5:51:a9:27:20:2b:7c:1b:0a:5a:d1:bc:c4:1a:
4b:1d:ab:54:44:eb:05:01:b3:80:f0:d4:d4:f5:45:eb:72:60:
b6:d2:d8:9f:45:6d:bf:50:d2:f5:e3:81:f3:6d:07:c5:d6:23:
22:bd:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:24:07 2026 by rpki-client