Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: BPg3bYuOAsSLU6LcoBBMFvFRhhi8dX9eTQXYZk/qrow=
Subject key identifier: 1E:39:91:50:EF:B2:48:50:87:E6:63:4B:31:C9:5D:88:98:CC:F8:4A
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 01A08B9FA49E2EED22AD2FD5216D37F1A4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 1425
Signing time: Thu 10 Sep 2026 14:01:30 +0000
Manifest this update: Thu 10 Sep 2026 14:01:30 +0000
Manifest next update: Fri 11 Sep 2026 14:01:30 +0000
Files and hashes: 1: GJbpcBM6DeYJcijI_V6UQpsMcLo.roa (hash: JvMmW6CWfWERUpYtBxgQrLJ4+C/bBMbHU6ozU5Y8U6A=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: ERbtwcMc7Y7g1J/a44V4dNUA3VZZOcRACATbaXVG6j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:a4:9e:2e:ed:22:ad:2f:d5:21:6d:37:f1:a4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Sep 10 14:01:30 2026 GMT
Not After : Sep 11 14:01:30 2026 GMT
Subject: CN=1e399150efb2485087e6634b31c95d8898ccf84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:e7:b4:28:01:66:e0:13:f8:71:39:c0:80:
9b:1e:fc:eb:26:f7:ab:94:de:18:9c:06:61:e5:a9:
d0:be:c1:43:e6:60:19:6b:97:77:ee:d6:75:e6:8e:
fa:f6:d4:ca:12:b4:ec:5b:f5:a4:97:14:95:83:3d:
db:b5:78:e9:0c:74:31:b6:b9:87:35:70:65:49:b9:
f3:8b:18:ac:a9:87:b9:2e:a7:6f:90:9c:0a:bf:39:
51:b9:b0:e2:16:71:c9:e0:53:0a:0c:83:24:38:df:
01:83:f4:45:55:5c:8d:70:9c:f0:f1:35:f2:9a:7d:
89:5f:78:a8:e4:0f:21:00:36:b9:a8:42:17:ee:5d:
ec:f1:3c:e5:23:7d:75:38:64:14:6a:d9:d0:38:0d:
e6:83:e3:29:80:f1:ac:55:af:08:5d:6a:bf:8f:3b:
67:c0:2c:3d:c7:1f:71:81:a0:75:ef:fd:94:e7:89:
41:e8:39:9e:33:28:15:db:4f:ab:43:01:e6:36:8b:
56:04:dd:05:4f:bc:04:a6:d7:2b:90:fb:e0:48:50:
e6:c5:21:8b:31:bc:1f:e2:70:50:d3:0d:09:21:13:
e7:0b:f9:43:99:97:b2:3b:5e:0c:62:5b:32:4b:51:
69:f5:ad:ba:1b:91:3a:18:f6:18:e1:1d:e7:2b:30:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:91:50:EF:B2:48:50:87:E6:63:4B:31:C9:5D:88:98:CC:F8:4A
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:c4:f9:ef:42:b8:f6:90:c1:cb:9b:38:2d:4c:52:e0:75:
a0:10:64:25:5a:c3:0f:4b:19:a6:0e:bb:f6:3b:57:a5:16:68:
cd:64:f1:a0:97:c9:52:25:70:96:45:a3:28:93:d3:70:18:64:
9e:e5:d8:18:fa:5e:6d:26:c0:fc:11:62:29:ae:57:5b:2c:9d:
6c:fd:80:02:f9:79:b0:3f:b2:d5:bf:4b:b0:7e:3a:77:e1:13:
e8:99:8e:f8:b3:e2:b9:e1:fc:8a:05:f3:1a:41:38:a4:3c:56:
f7:9d:49:da:c4:b1:fd:03:68:f9:59:fc:e6:1a:a6:5e:ef:5a:
45:2c:69:90:f5:53:7f:1d:a7:af:9e:5a:b3:f3:fc:ca:ad:76:
71:41:a0:ae:99:a4:a8:94:35:ba:c1:e2:59:13:84:b1:cf:93:
37:4d:10:a4:ca:d0:c5:cb:d6:fc:22:3c:cd:70:01:bc:1a:db:
b7:93:f6:5a:d2:2f:91:66:a2:f0:62:bf:ba:85:0c:22:7b:ec:
ad:69:62:57:a7:83:50:f8:a6:6f:e7:c2:28:5f:47:df:cd:69:
e7:9d:15:e8:b7:14:ab:32:8d:af:50:78:5a:b4:e4:00:77:f6:
2b:1f:b9:e0:7f:6b:b6:61:d0:26:9d:98:0b:6a:9e:8d:15:d0:
00:0a:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:37 2026 by rpki-client