Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: 5DrYt0SfFUTIwEpkQgSEyBJ0RvCkLZ2qPXxWj4mCBLs=
Subject key identifier: EB:90:07:E5:1E:7D:05:D0:EE:91:85:62:99:B6:C3:92:13:62:1B:B6
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 01A08B315419B44A495D65C2EB865FC36703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 11BF
Signing time: Thu 10 Sep 2026 12:01:00 +0000
Manifest this update: Thu 10 Sep 2026 12:01:00 +0000
Manifest next update: Fri 11 Sep 2026 12:01:00 +0000
Files and hashes: 1: 0iXNb0qgTsbED9wLh6tNLm4QiSc.roa (hash: jPsn3OTLHwRfrJ0BbFjL8MkH0Kkclj3eem8yJT/9xno=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: 03hvNdwvH+UT4B//w8VlEhy1bjsE3XfFcfIIbzKEBq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:54:19:b4:4a:49:5d:65:c2:eb:86:5f:c3:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Sep 10 12:01:00 2026 GMT
Not After : Sep 11 12:01:00 2026 GMT
Subject: CN=eb9007e51e7d05d0ee91856299b6c39213621bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:2d:74:1a:64:78:92:b5:e1:12:fb:81:38:
2e:df:fe:c9:4a:c0:e0:f6:5e:cd:3c:c6:19:7d:bc:
dc:92:64:82:46:09:f6:37:01:07:2c:50:6c:33:6c:
b7:10:09:62:c4:55:8b:4d:5c:43:e4:83:8e:5f:cd:
c8:3e:10:a6:e1:6f:b9:86:aa:e8:5a:52:a0:6c:bf:
7d:3f:25:17:38:26:c2:07:7d:d0:2f:72:bb:b0:86:
98:56:fe:a0:27:61:5b:99:a6:4e:a5:06:21:ed:b4:
01:e7:b6:72:88:bd:7e:8b:02:ed:9e:43:f6:a7:95:
d2:44:a1:65:72:3d:29:ea:63:b2:9e:44:eb:49:c7:
68:15:6d:55:43:43:1b:5d:01:b1:6a:98:f6:b5:0e:
0a:43:6b:cb:82:b7:c1:cb:71:11:85:81:9a:f2:74:
0d:a4:70:ce:65:6e:1e:b2:a8:5b:fb:66:04:24:2c:
a3:33:f0:a5:ad:81:a8:51:1f:3a:48:f8:5d:84:1a:
55:77:32:93:16:97:ef:58:ed:68:5e:63:45:23:4f:
21:95:e7:5e:8e:7e:72:8f:a4:b5:30:f2:d9:07:47:
9a:ac:0c:72:25:30:11:cb:4a:ee:6e:69:da:ed:de:
20:de:f6:ff:82:4d:0c:84:d8:cd:85:d3:c4:99:dc:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:07:E5:1E:7D:05:D0:EE:91:85:62:99:B6:C3:92:13:62:1B:B6
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:76:2c:37:1a:1b:76:14:34:52:f5:b3:89:bc:18:28:8f:e7:
00:7e:ea:43:ba:68:d2:cd:b8:9c:19:00:d2:af:13:36:3b:13:
87:94:a3:5a:16:e8:60:e4:1c:d1:b3:b3:8f:3d:1e:f2:b5:9a:
63:2a:94:e3:49:fe:74:ae:91:57:80:78:3b:85:8b:cc:6f:6b:
e0:fb:b1:89:bc:42:5f:39:bd:29:e7:a6:7b:3d:bd:b8:cd:0c:
04:fa:6e:b4:af:90:35:1b:92:fd:f6:cb:4b:28:81:27:74:7a:
c0:5a:05:6f:58:50:fe:cd:5a:a3:20:ce:ef:96:eb:fa:dd:80:
1e:e9:c5:ee:00:43:8c:bc:9e:69:05:17:ec:f2:cb:cb:4e:e8:
43:45:25:21:21:33:cb:7b:6a:60:00:6f:d9:87:e5:a7:68:a8:
c7:8a:f4:1c:e4:06:73:ed:ed:15:d4:78:cb:04:48:4c:77:48:
f6:50:6a:a7:8c:0f:d3:85:ea:66:3d:ac:99:1e:c8:59:c8:24:
9a:1f:62:21:ed:98:b2:f2:90:cf:95:b4:2f:c4:4e:be:b5:5f:
ad:f5:c4:f4:92:b1:b0:1e:aa:4e:cf:09:59:1d:d8:1d:af:78:
99:45:fc:3b:49:77:f5:f4:db:53:c5:5b:6f:58:9c:6f:87:ce:
3c:c6:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:21:43 2026 by rpki-client