Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier: DDUj8j8G6/+LJPET0biMtxq68jigqI2bVugr1PE6gPo=
Subject key identifier: F0:24:57:FD:41:0D:33:75:37:F6:E9:BA:97:2A:56:56:4C:60:6D:CC
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A16AFF4EC017DE9F1916F85A55B5002E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number: 020A
Signing time: Fri 23 Oct 2026 23:01:18 +0000
Manifest this update: Fri 23 Oct 2026 23:01:18 +0000
Manifest next update: Sat 24 Oct 2026 23:01:18 +0000
Files and hashes: 1: 5Usz36CmKbFtCm4B1BqoYq4inVk.roa (hash: bK/JE++LlwMTK/apyLk8d0x70UMhmYLDd4W7NbjjySw=)
2: AmSIHyBV1dG41RsCsIKqIJFFqEU.roa (hash: 7wzXnnnuA5PhbYX0dhAhOPSQoJoekD6xhZVC1AoXN9k=)
3: IoID25YMHzy5rGEknb3wQAVRHUs.roa (hash: xjFXrUDyDmwMICYOMxUGhitt6oRwwFy1kBO+XV0ISs4=)
4: NNK9R7yF6XrFwMG8nuM3r4JWCV4.roa (hash: 9ZUvYzRXn0Klpg5dQm6gHdmQvA0GHc1xDFASadUC4cY=)
5: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: rofXzqO5qNk3b+EJp25J0p+8jA6Pl51r+U6/Yto0Cnw=)
6: bujSkN739cVx0DJAFCsFlXBvcGs.roa (hash: EnaDOXi2+w6yujurrNpAuRbunV4mXkAKnBOegobNcoE=)
7: nRBo528tP43KmAQk4RnVYbDzWU0.roa (hash: ERhWqSONU8VMSUZjvA4OcBhlxRgbgXHAnBJ/a2qEElc=)
8: ykoL6Yw1_hgazdwSxBD8-ctDSFk.roa (hash: YqQ9BDswI1/tllb0ynCRch8xMH2OE551/Vqt20k8iIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:ff:4e:c0:17:de:9f:19:16:f8:5a:55:b5:00:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Oct 23 23:01:18 2026 GMT
Not After : Oct 24 23:01:18 2026 GMT
Subject: CN=f02457fd410d337537f6e9ba972a56564c606dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:6a:17:dd:c6:61:90:57:04:22:d8:fb:3f:
85:3c:3d:8e:08:6b:9e:68:73:ed:24:80:96:df:e4:
35:04:15:bf:66:bb:ec:b4:d3:bb:40:af:9e:9f:7b:
25:7a:6c:e4:ec:c4:6a:78:77:80:38:25:cd:93:a6:
03:86:20:04:8d:1a:a4:1b:62:60:49:31:ac:ed:c4:
0f:73:15:97:c1:9c:23:cd:50:a0:f9:93:e9:56:d1:
67:89:32:75:e9:2f:fa:e9:e5:e2:de:b5:28:09:04:
19:e7:a4:a0:73:0c:f2:d5:75:35:76:1b:98:fe:f5:
a1:93:d6:02:bc:f6:19:e4:6c:39:eb:81:58:41:f0:
34:c8:0f:01:77:ee:60:09:1c:c2:1b:5d:ff:a0:33:
7e:da:e0:e8:0d:41:f3:5e:2e:35:bc:a1:3d:ce:ed:
75:e3:8d:b2:7b:20:de:a7:cd:67:cc:5c:6d:a7:80:
6f:e7:f3:cf:17:06:87:74:cb:c7:9e:ed:07:e1:48:
1a:d5:22:5e:ee:c5:08:8e:93:a4:e5:5e:26:66:c0:
46:02:dc:c4:fa:ff:20:c7:5d:3c:38:fb:35:fd:b3:
4d:a8:c1:59:3f:4e:e0:1f:a0:68:30:71:7e:50:5c:
e6:f4:0b:ec:4e:6a:65:2d:09:3a:97:2d:7c:f8:30:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:24:57:FD:41:0D:33:75:37:F6:E9:BA:97:2A:56:56:4C:60:6D:CC
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:89:34:e7:de:a2:74:47:eb:30:a8:59:9d:fb:98:b3:13:
c5:c1:07:62:bc:03:a4:28:66:3c:ab:0e:92:24:9a:00:f9:3a:
04:04:6d:cc:e5:0e:d0:6e:9e:c7:32:5c:d0:47:0a:ad:6f:b9:
4c:72:6d:71:fd:e3:7b:f3:fb:96:8b:f0:a6:59:a6:7e:92:09:
3e:99:33:db:c2:d7:9d:ae:48:e7:36:43:36:f2:94:bd:11:3a:
af:4a:98:e1:ab:94:3c:11:8f:79:34:fc:07:17:bf:d3:ac:77:
6b:4f:8a:6d:df:a2:1e:48:12:36:f0:3e:ba:1a:9e:2e:73:c6:
1c:ac:d2:8d:dd:aa:6b:4a:2f:db:57:a4:81:05:64:a9:54:e3:
34:34:53:9e:d8:ff:62:1d:ea:3a:57:46:5c:5d:7e:cf:2d:38:
db:4c:9d:a6:ff:9e:fd:f4:47:4c:db:84:01:a5:55:57:75:cb:
4b:97:ee:36:c8:41:f6:66:46:cb:56:b7:d6:ee:04:5a:1c:56:
4d:2d:b3:c9:62:f3:d8:85:fe:c9:62:98:f2:ac:a2:3e:73:f6:
33:b4:b8:29:be:f5:9b:87:74:93:79:a7:6f:8f:29:46:65:80:
fe:27:b9:3f:c9:d3:24:b8:b7:f0:d6:bd:14:fd:cc:8c:30:5f:
d1:7b:c7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:47:01 2026 by rpki-client