Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: gJtZAVVlYdbORIz1zYvCq8GkCX8Uat9vIh6+AmKZ4oE=
Subject key identifier: D8:FB:6B:DF:B1:EF:90:93:1A:64:8E:4F:4E:7A:3F:48:BC:2B:45:A4
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 01A0F60DCF2063E37591B73A02D447F7C531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 1446
Signing time: Thu 01 Oct 2026 06:01:35 +0000
Manifest this update: Thu 01 Oct 2026 06:01:35 +0000
Manifest next update: Fri 02 Oct 2026 06:01:35 +0000
Files and hashes: 1: 7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa (hash: tsA7T7uUKe961SLeTegki9U2n20iYLa4g8HfcIi+a4Q=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: kJG9U3tnzzHPoWBAqDJlTYBVmWtp4RtVjPE7Sw5azlY=)
3: O4vFFK6LturH-tOvCL7dvJAVqgc.roa (hash: MtKHjo0OncbkpjKylbUKlu6dZVBHbPPJcw5CArd2U3U=)
4: nIqaEfepRP75O-FDqMsxRqrNlcw.roa (hash: c5Y7MFJKKPQL2NHxR/9fHChMoo5Om7veAWCfhGUpBLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:0d:cf:20:63:e3:75:91:b7:3a:02:d4:47:f7:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Oct 1 06:01:35 2026 GMT
Not After : Oct 2 06:01:35 2026 GMT
Subject: CN=d8fb6bdfb1ef90931a648e4f4e7a3f48bc2b45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:4f:b8:83:a4:f5:a9:d5:c9:b1:43:d4:18:
0b:94:c6:a5:99:00:0e:96:dc:38:11:ab:ff:9a:47:
12:ef:39:1f:43:ad:06:85:a9:b9:ea:2e:67:6c:c1:
41:90:f2:fe:54:8f:a4:38:15:91:30:69:26:cf:f7:
63:92:1e:26:a6:51:7a:eb:7c:e8:e5:c3:3d:72:96:
7a:e6:ba:ee:70:55:30:9f:48:6f:ee:0b:f5:e6:83:
4f:50:71:15:b8:49:e3:6b:32:66:78:33:5e:29:f9:
26:b4:24:6c:6e:e9:3a:de:76:e4:16:21:d7:77:e5:
fa:b5:4b:bc:e5:19:69:68:e6:1a:4a:e1:3c:be:ec:
3b:82:91:25:04:81:3a:e5:b0:da:b1:2c:ce:40:91:
bd:3e:4a:f5:ca:de:bf:22:9f:d5:b0:68:8e:81:ce:
b8:12:dc:7c:0b:5d:8b:22:20:b0:5d:55:24:df:d4:
1b:08:7b:29:22:bb:cc:45:35:07:ea:c8:85:59:e1:
ea:4d:c0:32:b0:78:c0:ab:77:b3:cc:7b:1c:15:70:
51:ca:2b:0f:83:d2:ab:03:7f:52:89:3b:62:fa:90:
47:d5:14:10:25:8a:61:c5:5f:90:73:80:7c:cd:cb:
f5:51:5b:f6:84:6c:85:29:e9:48:b7:af:b6:ed:60:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:6B:DF:B1:EF:90:93:1A:64:8E:4F:4E:7A:3F:48:BC:2B:45:A4
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d4:ca:af:d7:1d:8c:fb:32:ce:aa:a3:af:47:f8:03:51:ce:
88:ef:e2:7e:11:7b:b5:02:9f:49:9f:1a:e6:8f:2c:89:a7:59:
16:16:ff:40:19:02:ed:54:af:b9:4a:81:0c:21:68:16:b7:78:
0e:8b:f6:1f:1b:25:0c:44:73:5a:82:21:a1:e4:2a:66:ce:a0:
bb:d7:1d:2b:30:b6:04:db:fa:58:56:ec:db:e0:13:5f:bb:29:
74:d2:bc:4b:4a:ee:65:55:80:b0:f2:1e:36:22:1f:38:da:82:
66:56:1e:e7:25:e7:38:e7:ff:f4:51:55:2b:0c:ea:e5:22:34:
59:64:bb:2b:6b:86:f0:44:2f:f5:94:8a:ca:a8:50:bf:31:f8:
6c:19:6f:23:e9:41:42:a6:36:28:b1:d9:f9:ba:2b:f8:6c:fd:
0f:99:f8:c8:96:85:1d:d2:8f:d1:75:f2:13:cb:37:70:b9:54:
d7:64:ac:23:c7:ae:d6:9b:f4:9f:e6:3e:42:1e:c6:d5:fe:d5:
6a:be:01:aa:b8:89:8a:bd:6b:a9:dd:84:59:6e:a3:3b:1d:a3:
cd:67:3e:f7:ae:73:47:cb:a6:f6:52:13:0d:29:86:40:6b:5a:
a5:52:31:fe:dc:8c:e1:85:bc:a9:35:0f:e7:3b:8d:8f:14:ff:
93:f1:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:28 2026 by rpki-client