Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier: 53AjZd1hw1sqdrCAPUJZM+KJuUqusKQNpAG6g8kxYA4=
Subject key identifier: CC:01:96:21:DF:F0:0E:56:A6:AE:B1:C8:FC:D1:B7:32:6C:65:89:19
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 01A177DE849A5F9CAA019616767CE66EDF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number: 15BE
Signing time: Mon 26 Oct 2026 11:00:33 +0000
Manifest this update: Mon 26 Oct 2026 11:00:33 +0000
Manifest next update: Tue 27 Oct 2026 11:00:33 +0000
Files and hashes: 1: 1zyWlwCVdN8MJ6qZjzYjBqnYAnw.roa (hash: toIU7uuVTY27+ajqkukCV0TuJOjX95XqjEeyJC7634I=)
2: FWkdYZB50BZtY6MGGDmkndrWg3c.roa (hash: SQCMpUUiMycQSLKgpqFr+kJ+h1QWi8a8jp6nB7Ve8EM=)
3: GVceVduBArktwOU6Mf55EriDNYs.roa (hash: z3ZJmc8CfjiYd8eml2YwxfFrpvhkb3YDOmwe9VvElx0=)
4: P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa (hash: LbJcliWjxyfMysePIZ1L8MSr6AjLJjCi6E5I0PKLL9w=)
5: TaOkTEEE00uDuFBt0oukno2-oJM.roa (hash: L5MTfRyQyNuoejsnRiY40yBhfPSdHTRkPlZoOi8bsGw=)
6: ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa (hash: FmLB19l/QiUZ+HMpkAjjIF13qdNaGpMhZk/VbgzVjic=)
7: iK4oje7PnSRo9xAmtm698XYmzcU.roa (hash: N+soR0rvwyPizipAou2vD3c8sm67wSVa/ObW3Qfle0Y=)
8: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: pC8hs997RCk42F9SuoRVC+cmx0pSXMl6JI8rYX0SEoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:84:9a:5f:9c:aa:01:96:16:76:7c:e6:6e:df:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Oct 26 11:00:33 2026 GMT
Not After : Oct 27 11:00:33 2026 GMT
Subject: CN=cc019621dff00e56a6aeb1c8fcd1b7326c658919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:4f:1d:a3:b7:9e:0e:b1:0c:51:08:6e:c9:
cf:8b:a9:d8:53:21:57:b4:43:21:67:fc:ab:b2:f9:
46:fb:20:56:57:16:5f:9e:ef:9f:0f:ad:18:1a:d5:
82:ea:ec:dd:5b:44:ac:4d:d2:d7:89:f1:6b:fa:9c:
4c:d4:c5:e1:32:b7:8d:d0:a2:85:d2:d2:d9:e7:a8:
9a:9f:77:b7:13:09:c4:11:6f:f5:e7:ec:b7:e0:c6:
5e:68:dc:e6:3b:7c:8d:ff:1c:6c:72:ce:64:65:84:
48:ee:fa:fa:bf:f9:44:67:0c:67:df:91:88:0b:4d:
6f:c1:3d:b5:19:56:ed:68:84:39:5d:d6:a5:df:b8:
c1:b2:4d:1f:f0:3e:77:82:f5:39:a6:61:a3:a8:f8:
06:5c:c9:20:88:4e:90:ef:44:74:39:74:85:99:07:
d1:38:f6:2d:d6:df:28:18:54:19:c7:16:2c:79:54:
78:19:34:53:0e:47:af:11:5c:d1:6e:81:83:73:7e:
01:02:72:43:ab:d6:a5:f5:33:25:ed:7e:0c:7f:33:
1e:ec:c1:cc:dd:3a:a3:02:39:93:d9:e4:be:dc:7e:
35:e8:0e:81:db:1a:41:62:4b:55:b9:a2:fa:4a:a7:
e4:bc:6b:f3:fd:9d:5b:52:bc:bf:8d:23:20:68:fc:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:96:21:DF:F0:0E:56:A6:AE:B1:C8:FC:D1:B7:32:6C:65:89:19
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f5:df:f3:8c:77:c9:4d:56:a6:83:78:a2:e2:53:d7:d2:a4:
c4:77:43:79:c1:08:ef:c3:db:88:21:83:64:d9:87:d4:49:20:
7f:a6:df:03:d8:51:1d:7a:ce:04:fa:e5:4b:6b:96:94:76:5b:
e4:45:32:7f:12:a5:ad:4c:13:3a:44:64:39:c4:5b:6b:5e:6c:
8e:71:90:0d:f1:d1:9d:89:95:f3:74:8f:9a:f3:51:f3:26:d9:
1b:20:90:0a:7a:5b:72:16:7a:ec:79:f4:29:e0:f1:db:e4:89:
6f:5c:ac:ff:9d:bd:7e:0d:73:b3:a3:5f:4a:f8:c3:71:72:e7:
96:e6:a3:12:c6:ce:d3:e2:ec:d9:19:0b:1f:4c:9c:0f:9e:6a:
ef:a8:b3:7c:67:0d:f7:52:b5:9a:d6:49:60:41:ab:cf:aa:fa:
fd:64:b7:84:56:b1:ce:89:aa:65:fa:5b:96:f8:5c:13:65:1b:
09:47:24:8a:e4:b3:e1:43:b8:1c:10:ea:78:6b:05:90:b9:0f:
8a:cd:6f:d3:9f:92:02:bb:3d:03:f1:64:c7:3e:fd:5e:f9:83:
c7:75:19:26:f1:bb:9f:bc:97:9a:a4:5f:a2:3a:0c:fb:35:4c:
5e:00:d6:da:ca:23:0e:f7:d7:f4:f9:d4:3e:5f:7f:63:7d:48:
65:fe:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:16 2026 by rpki-client