Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: drFXXUIMxLNR3whjUxDCjrR9RdVn66DkhiDjpcBoJCg=
Subject key identifier: 24:E9:82:17:CC:CA:3B:58:5F:FB:D8:9C:31:E7:5B:97:15:32:DD:68
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 01A181BDCFECD8284EDE4A8B45265870C38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:02 +0000
Manifest this update: Wed 28 Oct 2026 09:01:02 +0000
Manifest next update: Thu 29 Oct 2026 09:01:02 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: ConKjicOsPtPoT5fdaHaN933UnsMq20zZLPanQJCbmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:cf:ec:d8:28:4e:de:4a:8b:45:26:58:70:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Oct 28 09:01:02 2026 GMT
Not After : Oct 29 09:01:02 2026 GMT
Subject: CN=24e98217ccca3b585ffbd89c31e75b971532dd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:4a:9d:e2:59:d0:11:61:99:ab:ae:8c:e7:
1d:13:be:35:fc:23:44:e2:2f:fc:f4:92:f7:fd:96:
05:27:1f:ac:d8:85:9e:e5:3e:41:15:e0:77:bb:a0:
59:aa:99:3e:10:82:9b:db:1b:87:23:55:73:fb:42:
3c:10:e1:3a:6a:8c:75:15:4b:de:b5:86:98:21:7e:
01:ea:ec:64:36:34:2f:af:3c:65:e8:c3:e3:80:e0:
43:bd:6a:e3:d3:e0:28:46:5c:6e:d0:55:c9:b4:81:
3a:43:ac:92:bb:94:19:04:6f:c2:43:f8:f0:21:f8:
84:cb:f4:e0:02:2d:4c:ec:9b:b5:59:c7:29:95:80:
13:2f:b0:d2:1e:80:1c:82:0c:54:76:b6:00:8a:cb:
2a:b3:cf:b9:e1:c9:16:1a:da:86:fc:0c:a5:4d:7e:
cb:32:e9:1f:40:31:d9:39:4c:40:c1:a9:1d:48:d3:
15:c4:99:aa:fe:19:31:6f:32:80:6d:ae:3a:62:27:
aa:55:8a:da:b5:8a:37:70:3e:23:1d:bb:77:5a:87:
fb:ea:e4:86:e4:8c:17:ff:ea:6a:5c:d6:17:98:83:
cf:5f:d9:c6:45:2a:8d:05:17:78:88:55:17:7a:99:
1d:3c:23:7e:12:51:3a:27:0b:08:05:ed:c5:ed:0d:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:82:17:CC:CA:3B:58:5F:FB:D8:9C:31:E7:5B:97:15:32:DD:68
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:da:9d:5a:d9:a6:59:b9:c3:fe:95:06:6c:c7:64:b9:65:5d:
75:cd:39:36:f7:5e:79:b5:92:f7:0f:9c:d8:97:2d:9a:48:10:
5f:35:9b:9b:67:24:d3:e3:6c:32:bd:4b:97:94:ad:11:75:19:
67:8b:a5:7c:15:da:0b:cd:b0:33:1d:2d:c8:67:be:0b:b4:f9:
3f:a2:3a:3a:3e:08:08:cb:cd:15:52:61:56:2a:46:41:98:75:
81:9b:d5:48:b5:19:40:c9:71:fc:cf:77:c7:a0:3a:c3:70:e6:
9f:e5:a8:9f:68:70:37:34:45:74:d7:a5:69:ae:c8:4c:20:b9:
4d:d9:88:9e:73:8a:6b:5d:c3:78:16:b3:ea:29:c6:c3:07:1b:
35:35:53:30:93:11:84:2c:57:c8:3f:d5:c7:83:a2:d5:cc:eb:
89:bd:22:cb:36:7e:0b:d2:ed:51:76:7c:6f:d8:83:1a:1a:71:
e4:be:a5:f6:14:66:9a:a7:89:c7:fb:b3:0f:1c:f3:26:e1:d4:
64:31:ba:5e:90:02:cf:2d:6c:cf:ff:ad:04:79:d6:93:7c:5e:
fb:35:3d:f4:4f:20:62:87:94:1d:4e:2c:90:59:42:b1:94:61:
f9:c2:7f:38:89:59:1a:61:99:88:86:0c:27:14:ab:3f:db:3b:
e7:6d:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:41:15 2026 by rpki-client