Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: yjYEbbEY1llb1rHm+MtFeAZCj3rj6Z8Vz/qJIC92n2M=
Subject key identifier: C9:16:92:46:00:7B:35:E2:30:3F:5D:AA:28:75:4F:29:49:3D:0F:F9
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 01A174A6E6362A017D9F22692CC9100EB374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 098F
Signing time: Sun 25 Oct 2026 20:00:57 +0000
Manifest this update: Sun 25 Oct 2026 20:00:57 +0000
Manifest next update: Mon 26 Oct 2026 20:00:57 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: nTmcdOHR2c9skXvcGNDcdOKP23XUtmNQq//tD1Ipz2E=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:e6:36:2a:01:7d:9f:22:69:2c:c9:10:0e:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Oct 25 20:00:57 2026 GMT
Not After : Oct 26 20:00:57 2026 GMT
Subject: CN=c9169246007b35e2303f5daa28754f29493d0ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:03:c0:6b:8c:fa:02:82:b7:7c:26:94:bd:
d4:33:15:93:98:2b:27:64:da:8e:50:80:ba:d9:dd:
5c:09:ea:3d:94:26:f0:fc:f5:7d:95:1a:b8:04:6e:
eb:73:99:1c:b0:c3:b3:10:63:6d:58:8e:0d:27:73:
79:70:c5:84:00:19:96:60:50:af:10:c4:7e:61:4c:
6c:37:84:f0:ed:28:37:d4:9f:a9:bc:a2:2f:04:ee:
a2:e5:84:7c:0b:c7:0c:3c:82:39:80:a3:ef:0c:b4:
ef:e5:33:7b:52:00:02:e5:55:8e:eb:19:b8:f3:b3:
e4:06:29:34:6c:2b:92:e6:c7:f0:01:18:fd:51:af:
a1:29:47:fe:31:9c:c9:40:9c:83:d4:36:38:df:cf:
0e:ba:ee:03:ae:9e:16:db:ae:18:d6:dc:99:9a:8b:
1c:16:06:0c:89:fe:b7:0a:95:03:3c:44:e0:35:73:
00:08:fb:98:75:cf:22:38:87:08:28:14:62:e1:e3:
a7:ea:20:41:54:1d:26:20:e3:76:14:f4:ac:a9:76:
20:f2:b3:ec:5f:39:22:30:c3:71:df:b8:8f:2e:42:
18:73:2d:4d:91:7a:cd:39:6e:1f:03:14:00:06:14:
39:61:58:68:91:18:22:f4:fd:84:16:61:1d:3c:47:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:92:46:00:7B:35:E2:30:3F:5D:AA:28:75:4F:29:49:3D:0F:F9
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:2f:b0:5a:48:e2:30:93:69:bb:84:bf:3d:94:90:c3:28:
1f:1d:b0:3d:4d:d4:23:00:55:15:34:a9:8f:5c:8f:14:47:d6:
29:32:07:9d:9a:f3:90:c6:5a:00:48:10:ee:c4:0c:e1:97:bd:
50:03:d2:91:99:68:eb:d8:6c:1d:e8:89:e4:1e:1a:4a:9f:c0:
48:ea:c9:7b:2b:3b:e3:df:1a:a8:ef:c9:89:07:44:de:b5:c7:
ae:82:c5:1f:cd:ac:df:8b:9a:33:86:30:d3:e4:2a:0f:bc:19:
86:50:38:6b:49:cc:ec:fb:2f:48:a3:87:77:2d:35:ac:c1:f7:
59:82:19:21:6a:5b:bd:bf:f4:a7:da:b1:ff:be:4f:8a:a7:a9:
8d:e6:dc:60:9a:3f:bb:58:db:c6:36:f4:3e:4b:ec:35:68:85:
a4:3a:66:8b:88:c3:22:3a:73:1e:02:83:d6:29:a0:82:9c:af:
cd:b4:e5:06:75:99:4c:f0:8b:02:b6:db:0d:3f:70:d5:b3:c1:
f4:a8:ef:cc:06:28:78:34:31:be:13:e8:7a:47:70:e4:c5:4d:
e0:b8:91:5f:da:51:c9:a2:6b:9b:30:f2:a0:7c:6d:08:53:81:
f3:f4:64:64:bb:e6:c7:36:ce:5e:58:ef:94:bb:b1:5c:ca:39:
08:dc:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:24 2026 by rpki-client