Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File: nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier: vFyvjxoM0Kk442hL0uQWOcLYVRmv+ygZ/4jf/3YK998=
Subject key identifier: 9E:C9:A7:91:5B:69:2A:14:EB:31:85:7A:BC:36:08:08:A9:C1:A7:F1
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer: /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial: 01A172B8C26431E92BD621ED013ACD34DA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number: 0196
Signing time: Sun 25 Oct 2026 11:01:13 +0000
Manifest this update: Sun 25 Oct 2026 11:01:13 +0000
Manifest next update: Mon 26 Oct 2026 11:01:13 +0000
Files and hashes: 1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: 1tXmgIlm7DoWxPz37+4la93PgMRhIpxwCg8eKCpV23I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:c2:64:31:e9:2b:d6:21:ed:01:3a:cd:34:da:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Validity
Not Before: Oct 25 11:01:13 2026 GMT
Not After : Oct 26 11:01:13 2026 GMT
Subject: CN=9ec9a7915b692a14eb31857abc360808a9c1a7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:64:19:a6:83:26:15:0f:06:8c:4c:9d:6d:
a8:0b:0c:13:ff:9d:40:b8:46:18:0b:1a:27:37:0a:
e0:ec:13:91:4c:72:02:44:d3:b9:22:06:38:f3:32:
49:6d:a9:4f:4e:ce:9e:9d:d5:f5:dc:53:a1:90:f0:
ff:8c:65:38:99:11:92:5f:23:38:34:6d:d6:1b:57:
9e:7c:64:14:ab:1b:4c:51:0c:df:d0:9a:9c:60:d5:
cb:d1:8f:7d:ee:6e:fc:18:44:d1:01:31:c1:53:2a:
68:bb:1c:9c:49:1b:08:42:67:e2:c0:12:92:f3:32:
9c:fc:23:91:e7:0b:e5:d9:b8:0e:67:b8:0f:8f:2f:
af:13:99:42:91:49:ff:18:c4:67:cf:8e:eb:d5:b7:
cf:f7:64:38:aa:61:72:96:d3:7d:a9:61:b9:5d:52:
5c:c8:ea:25:70:cd:71:db:af:12:44:10:97:b5:5c:
f4:a2:25:18:b6:4a:d0:6e:c6:9f:ae:33:68:52:79:
1e:59:fc:52:c4:0e:ba:5e:42:da:0d:c0:c5:fc:bf:
c3:9e:42:06:05:e8:d7:20:7b:9e:95:dc:f2:5c:de:
95:3d:d4:1e:67:35:44:6c:75:36:f3:03:71:7f:36:
e5:44:b3:8d:45:23:19:b9:b1:90:dd:41:95:9b:ee:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:A7:91:5B:69:2A:14:EB:31:85:7A:BC:36:08:08:A9:C1:A7:F1
X509v3 Authority Key Identifier:
keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:51:ce:9a:b5:2d:5b:fd:08:f4:eb:09:2f:b3:b5:39:ac:3b:
1a:38:79:d9:2a:76:5d:19:9c:4c:76:73:d8:c0:69:a3:1f:5d:
e8:d8:25:1b:6b:95:05:b2:90:fd:13:4f:d3:8a:f1:43:5f:0b:
82:27:0a:f3:0c:40:4a:eb:bc:65:c6:da:b9:af:6e:f8:2f:51:
41:84:74:8b:dc:63:40:73:2f:6b:f6:b6:40:b4:3a:f7:3a:8b:
5d:89:48:fd:16:00:d6:4d:d0:0c:fb:fe:ce:a4:fa:f1:30:43:
c1:90:1f:58:ac:ac:53:2d:b6:d0:1b:7f:0e:ba:40:76:ba:57:
02:91:a7:67:44:80:6e:75:31:50:d9:83:59:d4:35:e3:8b:d1:
70:09:32:ab:b6:47:d2:28:05:f5:1d:bf:7a:d1:5f:84:42:c4:
71:ab:fc:46:00:86:ff:4a:b0:a5:f6:f7:e2:93:bc:61:0a:57:
8d:48:b9:7c:72:6a:c4:e7:97:1e:d3:69:49:72:64:8a:84:a7:
04:b8:2e:33:ab:4e:bf:0f:5d:aa:38:e7:71:c3:23:73:ea:2b:
d3:c7:31:0b:c2:f4:a6:c9:a6:40:e6:07:48:f7:99:79:a9:27:
32:1d:a0:ad:ed:85:c8:9b:b7:ff:78:42:0a:97:fa:80:de:45:
dd:78:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:13 2026 by rpki-client