Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: X2iNTK1Ry33FkyegKDYmv+1i5JF7wEpBooBjJUQOHZ0=
Subject key identifier: 5D:99:16:27:80:C0:F1:59:68:CE:A5:17:44:6E:9D:DA:56:C7:B6:E0
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01A0905752B76F6FB07D400E42F3FFA81704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 12:00:36 +0000
Manifest this update: Fri 11 Sep 2026 12:00:36 +0000
Manifest next update: Sat 12 Sep 2026 12:00:36 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: FDF4ViLTAb99Spto9watWMAeE2xBQFIA/wj5oBU55Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:52:b7:6f:6f:b0:7d:40:0e:42:f3:ff:a8:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Sep 11 12:00:36 2026 GMT
Not After : Sep 12 12:00:36 2026 GMT
Subject: CN=5d99162780c0f15968cea517446e9dda56c7b6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:0e:fd:cb:26:93:83:98:5b:f9:63:1d:c7:
29:e4:a0:bd:3f:58:61:88:7a:ec:57:7c:3b:fb:7e:
b2:cf:55:9d:0b:bd:5d:51:87:9e:a2:87:de:15:07:
2f:97:7c:3c:59:9c:3d:d4:5e:27:32:78:5d:78:86:
09:d8:25:6c:26:4a:ba:be:d4:d9:20:01:57:66:4d:
5b:d2:53:20:04:08:56:52:c9:b4:98:e4:57:2f:9d:
25:4d:b8:8f:5e:ea:2d:f4:01:91:31:8f:44:bc:ce:
1d:dd:a6:09:92:42:17:c0:19:d4:be:ed:1d:cf:d8:
cb:12:44:21:70:2e:e9:64:85:6c:a9:ad:07:89:01:
f7:49:b4:df:63:4a:f5:5d:ce:89:e0:f8:38:2d:38:
35:5a:3f:9f:2f:f7:da:68:91:b2:aa:16:33:5f:3f:
75:f4:10:0b:91:0d:05:f0:22:e6:7f:d4:5d:5e:22:
f9:c5:df:f6:d3:3c:e1:11:e2:59:0e:3f:08:b6:df:
6e:ed:fe:fc:13:50:ae:98:a0:dd:96:eb:5d:bc:07:
d5:e5:f4:ea:8c:0a:d1:b3:03:ff:eb:77:25:9e:8f:
7d:c1:20:70:e0:32:8b:47:9c:12:1c:6d:67:0b:ec:
9b:59:03:5d:6b:2a:17:5b:1a:c2:51:73:bb:ad:76:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:16:27:80:C0:F1:59:68:CE:A5:17:44:6E:9D:DA:56:C7:B6:E0
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:ea:8d:3b:d7:3d:95:0e:d5:b9:e3:13:6a:18:14:1c:e5:
76:19:93:ac:1f:b1:7c:49:d3:9d:70:a2:7d:d8:73:fd:65:09:
c2:76:f7:17:d9:00:45:88:fe:3a:c1:81:68:77:c1:92:5b:f8:
6e:b5:3e:7f:26:b9:2b:6e:c7:15:5b:fa:26:bc:2b:2c:d2:70:
68:ce:51:c2:d5:c9:f6:c3:ef:0d:11:85:ae:c3:4f:f6:ba:3f:
58:3d:a4:72:a1:40:87:31:79:2c:7c:61:29:f3:e2:71:2e:f6:
fb:62:51:8a:99:f1:b6:91:04:25:2f:40:75:7d:a5:e8:ac:58:
a0:f5:d6:30:39:79:b1:70:1e:2f:c0:96:c2:33:18:9c:6e:18:
60:d2:7e:f3:d7:2b:d9:96:a2:3c:f2:c0:35:76:c6:53:b9:ae:
a8:23:e5:93:31:32:6c:35:ed:f4:c3:9b:96:60:9b:c4:a6:40:
d4:18:9e:54:eb:7f:7e:47:02:52:5b:18:fb:a4:4d:7f:75:81:
ee:9f:a5:1c:d7:9e:b5:f9:ce:95:da:55:8e:93:ed:d3:68:d8:
3d:42:40:bd:9c:a6:15:50:fc:4e:42:1e:bf:d4:64:e4:d2:e0:
06:2d:2a:40:8e:b3:0b:88:3c:32:6d:28:a8:a6:db:e4:29:ce:
4c:77:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:35:05 2026 by rpki-client