Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: /WWaM0ThY0SHnkuQD2roOytDM8NhLi+PwepnBOLQKcc=
Subject key identifier: AE:18:F3:03:A6:21:5D:12:2A:9E:83:13:4A:57:BF:F4:83:FF:64:DB
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 01A17D3C72898B2DCCF25E9A624E82CA3AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 06C8
Signing time: Tue 27 Oct 2026 12:01:15 +0000
Manifest this update: Tue 27 Oct 2026 12:01:15 +0000
Manifest next update: Wed 28 Oct 2026 12:01:15 +0000
Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: NCIObHXHHp8CnS9noAXz+sdE17ItL+x1Lmr9p0dCK3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:72:89:8b:2d:cc:f2:5e:9a:62:4e:82:ca:3a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Oct 27 12:01:15 2026 GMT
Not After : Oct 28 12:01:15 2026 GMT
Subject: CN=ae18f303a6215d122a9e83134a57bff483ff64db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:dc:84:3f:5c:64:25:a4:c6:94:81:75:93:
10:0c:fc:eb:fd:7f:4d:79:75:7d:6e:79:1d:d2:c1:
c8:ea:51:45:61:39:b3:98:dd:c7:f7:ac:49:82:0e:
5f:35:8d:55:55:8f:72:0f:a3:7d:d0:f2:78:41:40:
07:b1:8a:e4:a0:6d:59:6b:b8:e5:81:8c:89:ac:13:
1c:34:ed:5f:76:90:6d:5a:2c:c1:c1:68:cd:7c:3a:
1c:d9:0f:59:c1:17:36:74:d5:57:68:81:a3:b7:d3:
67:96:23:32:6b:d1:fa:78:c4:c6:53:45:a2:53:24:
f9:d4:68:09:32:68:b1:8d:03:ce:b0:f0:39:79:4e:
a3:cc:ff:47:90:5e:42:11:9b:40:49:cd:52:87:ae:
3b:ea:5b:85:e9:ed:ae:92:08:06:bd:ba:0d:9c:cf:
4e:82:c6:36:ef:a0:50:67:54:87:c2:c1:87:7b:60:
6e:79:a1:6e:a0:15:f1:a0:90:ad:7a:64:6a:9c:a8:
d4:65:eb:36:d1:81:e1:21:42:ab:87:67:5d:20:23:
86:c0:7f:bb:c1:23:b0:53:fa:ee:1e:71:d9:1c:c0:
c5:fb:d8:92:bc:6f:b6:c5:22:36:51:05:58:e1:34:
f7:e4:fa:32:c5:7d:a3:9a:dd:f5:15:89:b0:ff:3a:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:F3:03:A6:21:5D:12:2A:9E:83:13:4A:57:BF:F4:83:FF:64:DB
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:82:3c:8b:7e:81:58:75:fd:b2:cb:0f:b5:57:d3:0d:e7:
5f:29:ad:55:2b:60:32:e5:91:16:9e:20:8e:02:49:96:f4:59:
23:76:b8:fa:9e:80:64:70:b7:49:f3:e4:e6:72:58:64:12:8c:
de:61:45:a9:99:52:23:22:c4:08:8f:5d:d1:fb:ab:58:ab:0b:
45:4a:82:ed:67:5c:32:bf:86:9d:ae:22:f2:00:08:85:19:2e:
06:ed:81:4c:fe:3c:1f:28:48:f6:5f:6d:c8:ab:fe:99:02:d1:
9a:c5:f9:f3:81:c8:dd:62:b1:6f:d7:96:3b:29:5b:77:89:47:
54:4d:3d:3c:0d:90:02:6a:53:f2:eb:15:76:7e:9d:15:df:6e:
34:1c:0e:06:43:b8:aa:34:f4:78:2e:9a:6c:91:1f:f3:22:58:
99:2c:c8:65:18:30:a2:6c:01:83:f4:ee:c3:a3:8e:69:5c:f1:
3d:ba:a0:89:a4:a5:8c:10:73:a3:51:f5:af:19:40:80:5b:9d:
ba:42:a1:36:44:7b:d8:5c:dd:05:f8:6a:70:e5:cb:d3:63:90:
05:db:d8:d6:70:c5:c4:b6:2d:c5:7c:39:3b:93:4f:93:52:01:
b6:94:17:64:00:3a:8f:2b:cb:1d:b2:18:19:15:40:e5:7f:4a:
c9:4f:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:12 2026 by rpki-client