Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: i4eGInG2xMzel/kqbicVI7e3mQzZZXA5jrhvLSaTI7c=
Subject key identifier: 01:02:C7:5F:57:54:0F:6A:80:72:01:4C:E4:28:1F:7F:44:65:C0:D1
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01A17C6035497675D7E02461B34C7AE6B95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 06B8
Signing time: Tue 27 Oct 2026 08:00:42 +0000
Manifest this update: Tue 27 Oct 2026 08:00:42 +0000
Manifest next update: Wed 28 Oct 2026 08:00:42 +0000
Files and hashes: 1: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (hash: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=)
2: k93jL6Kim6Rcq-gwqx6Gkl2ZvG4.asa (hash: k4/W9s1RlCLwJuDp9QGRSuIAh2OWfth6OK19Yy0jxHI=)
3: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: udPwsJHxQ+1DEMgzfktafArkC2FmsjcWOS9eWMivAyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:35:49:76:75:d7:e0:24:61:b3:4c:7a:e6:b9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Oct 27 08:00:42 2026 GMT
Not After : Oct 28 08:00:42 2026 GMT
Subject: CN=0102c75f57540f6a8072014ce4281f7f4465c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:73:a0:79:30:8b:93:c5:7f:cc:c6:ec:2e:
d6:46:b9:90:44:70:37:28:22:b0:64:52:83:12:61:
e1:ba:50:f7:80:a6:4a:af:06:0a:b8:01:38:dc:e8:
bc:e2:15:e3:37:e3:42:d7:d0:b7:65:0b:eb:f5:59:
d6:63:13:0e:4d:f7:d9:38:07:18:9e:08:a0:ee:39:
f4:44:51:32:ab:11:e3:d9:6e:a5:36:51:e5:c8:5f:
cb:c9:9e:e0:bc:96:14:0e:0a:e2:47:b8:b1:80:ad:
aa:67:f7:14:c4:41:95:13:cf:42:a1:eb:0c:e1:f1:
96:e5:58:b8:7f:81:6f:fc:4d:11:9a:c0:04:59:11:
0b:c2:99:1f:09:0b:32:9f:7c:bc:f4:62:b0:f8:99:
bb:31:28:01:0c:6e:42:84:39:d1:8f:0e:37:b0:2e:
44:66:f8:4c:c3:aa:50:ce:07:0f:94:c2:f8:19:15:
af:db:72:0f:79:a9:ea:eb:56:5a:54:19:70:40:1b:
b6:62:f9:c6:f7:3e:4e:52:a9:5d:ea:35:32:98:83:
fe:ef:67:58:0c:60:b4:78:4a:21:54:34:e3:a8:66:
82:82:45:5c:93:9f:95:47:af:32:1a:f3:1c:0a:ec:
f7:74:fa:32:4b:bb:19:ee:86:13:bc:72:79:0a:a1:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:C7:5F:57:54:0F:6A:80:72:01:4C:E4:28:1F:7F:44:65:C0:D1
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:91:25:06:42:97:8a:31:aa:73:6c:0f:2f:15:5e:d4:51:d1:
05:31:24:0f:ce:5c:f8:2a:fc:a2:09:bb:d0:65:dc:0a:83:61:
82:8b:65:c7:02:fb:3b:ed:77:1f:42:0c:c0:72:23:39:ca:b4:
61:15:22:51:b0:0b:aa:59:d0:8c:4b:1a:c7:b6:06:4f:cd:de:
77:19:96:68:ab:a9:47:c4:e9:c7:f0:16:fc:d2:03:25:ec:ef:
3f:6b:5c:43:23:c5:5e:7c:84:8d:d9:67:c0:e0:4f:a0:c1:64:
5e:0d:1d:ef:25:99:16:c4:8d:81:fc:49:d6:98:1a:02:3f:97:
04:59:f8:ac:ae:7b:bc:74:91:05:e6:e2:5f:4c:7c:a2:58:03:
7f:39:13:79:36:53:34:96:e2:10:0a:19:de:7c:39:b0:8f:01:
af:df:c3:87:09:46:4c:6a:23:95:24:0d:ce:a6:fa:ce:fb:c0:
cf:42:e1:40:c4:03:ed:e3:f7:80:2b:04:21:5a:4f:30:c2:59:
27:00:ad:c3:4e:69:18:09:85:bf:8f:49:f8:57:c9:e5:58:e9:
99:06:1a:07:98:60:b6:e5:09:aa:f1:ea:fb:62:9b:ca:86:98:
2a:34:3e:b3:da:1e:81:5f:12:38:35:09:0d:a9:60:71:af:e2:
10:ae:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:10:08 2026 by rpki-client