Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: 4929Xbqw+DyxbaiPf7/jKPHPjOwvaolPxmK/tKe2RtM=
Subject key identifier: DB:CD:B3:91:E8:E1:AE:C7:9C:5E:0C:AB:CF:BA:7C:7F:6E:AD:34:46
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 01A17FCF8EC8CAF95A655324F97031E9F3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:11 +0000
Manifest this update: Wed 28 Oct 2026 00:01:11 +0000
Manifest next update: Thu 29 Oct 2026 00:01:11 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: +8zZu84yNO9kzgvAABipTgBHgAM4Ab4aCqvCfEr2yRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:8e:c8:ca:f9:5a:65:53:24:f9:70:31:e9:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Oct 28 00:01:11 2026 GMT
Not After : Oct 29 00:01:11 2026 GMT
Subject: CN=dbcdb391e8e1aec79c5e0cabcfba7c7f6ead3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:c3:9f:30:92:df:7c:77:79:d8:d8:0f:2d:
bb:ec:f6:7f:a8:3b:39:c0:5e:84:21:2f:55:55:28:
25:66:33:42:7b:64:d5:a8:e3:6c:86:c3:f1:02:b3:
b6:9c:dc:64:85:bc:d7:7e:c4:84:63:48:ed:b8:46:
1e:72:88:4f:0c:db:77:2d:f9:2b:cd:62:55:e1:8c:
ee:a5:c8:69:49:fe:c2:d4:6a:34:13:79:cc:53:7b:
ea:61:6d:4e:18:75:2d:61:2f:bc:51:f2:5e:79:55:
3a:e7:28:66:8b:44:c5:7c:0b:a3:7f:39:f4:e9:5c:
fd:1d:75:41:94:f8:01:51:da:d2:61:c0:c7:e7:7b:
34:1f:f6:46:f2:e7:f9:f5:7e:cb:20:b6:5b:0d:24:
e1:af:61:37:c1:ad:34:f2:a7:fc:0d:30:23:4e:98:
36:f3:eb:36:59:5d:8b:69:c1:ae:9d:aa:2e:3b:7f:
ce:e7:8b:74:f4:dc:15:34:73:83:68:2b:ed:66:08:
a7:7f:49:0e:58:a9:93:99:09:61:c6:5b:16:51:3d:
31:cb:70:41:87:f9:c9:6c:29:45:d6:7c:2f:89:93:
f7:ea:36:3e:ab:e3:96:56:bf:8e:0c:11:a1:8c:d3:
72:5a:a0:ed:5b:bc:42:e2:89:88:d4:5d:12:17:3e:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CD:B3:91:E8:E1:AE:C7:9C:5E:0C:AB:CF:BA:7C:7F:6E:AD:34:46
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:66:a8:d6:3f:7d:17:33:41:5b:03:d7:95:dc:85:dd:71:
1d:39:32:79:e9:74:ba:6d:90:96:98:3e:78:b0:40:99:28:9e:
6e:fb:72:a7:ff:65:78:6d:9f:c5:ff:e8:84:59:07:d3:89:f6:
3d:e0:2b:4e:b5:64:92:73:35:29:75:4d:76:6a:6f:24:71:c9:
3d:14:f4:ea:ee:b0:b2:15:bf:79:1d:29:f3:e7:b6:a9:b4:03:
85:e5:f2:b5:5a:1d:10:f1:59:42:9c:9a:a3:5a:33:e5:e4:e5:
b8:0d:14:41:d1:ea:5d:fe:23:d0:25:17:33:d5:0c:27:5a:21:
e9:5d:0c:bc:e0:11:a7:2a:ac:95:79:77:c3:1e:a0:7e:ab:2e:
62:b2:1a:46:ea:b1:ee:fd:82:13:28:2a:ad:40:b6:0c:15:07:
f7:2a:da:35:09:ca:12:9b:56:c0:dd:88:34:7a:c9:76:e5:63:
fb:e2:82:16:e4:a8:cc:a1:1e:7d:e0:45:66:ee:cd:fc:62:83:
46:24:bf:91:87:8d:31:21:64:85:27:b9:28:73:d3:c1:01:a7:
0c:54:5a:59:f4:7f:0a:e0:be:bc:fc:dd:6d:4f:63:dc:a7:ce:
7d:d6:c2:1b:d0:ce:07:a3:8d:b1:94:db:a0:1e:1f:a5:a0:f7:
92:97:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:16:03 2026 by rpki-client