Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: 3JwnjjmTj5CFH55uW7829eJ+xOzXzVsZ9SkfBNtG1bc=
Subject key identifier: 49:A3:33:50:C9:B0:41:A7:05:6C:7C:C8:7D:38:4C:CC:C1:F5:0E:03
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 01A08C7B2FCD1B2F7317A0100110EEEA725C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 18:01:18 +0000
Manifest this update: Thu 10 Sep 2026 18:01:18 +0000
Manifest next update: Fri 11 Sep 2026 18:01:18 +0000
Files and hashes: 1: 0e20Vnm0C5gqevgZraEdYYQvC2k.roa (hash: 6onisxkqwNjHYYcPnOhg1nsEQp++MNFfPSzmz8SXV28=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: NLATyDAdZISUibQBWZTajHOA/yRrytUmZyMRCiVEoCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:2f:cd:1b:2f:73:17:a0:10:01:10:ee:ea:72:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Sep 10 18:01:18 2026 GMT
Not After : Sep 11 18:01:18 2026 GMT
Subject: CN=49a33350c9b041a7056c7cc87d384cccc1f50e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:ab:fd:3b:84:c4:79:f1:85:d5:60:91:64:
b8:81:89:74:d2:c0:f1:3e:f5:d6:27:7b:07:a2:90:
3d:54:83:32:9d:f4:4c:7d:8b:eb:53:77:f1:32:ac:
e6:be:4d:9d:d4:36:3d:2b:33:77:2b:19:86:d9:a5:
b3:e0:90:49:ce:e5:86:fe:e6:24:19:0f:c6:aa:3d:
f7:eb:3e:53:6c:dd:67:71:9b:c4:49:53:8c:b0:5b:
e1:26:9c:4f:92:24:9a:69:9e:cc:56:1a:82:5e:d2:
52:7a:2e:0b:94:53:01:90:e1:95:30:b4:a9:e6:12:
58:4a:3c:8a:1e:52:af:b5:3d:a1:1c:7a:94:4f:ee:
4f:b8:6e:1e:9a:54:58:81:25:3f:1a:e3:88:b6:b5:
22:06:54:0d:6b:ef:46:72:a3:d9:30:2e:85:71:5b:
67:bd:45:67:92:4a:66:8f:8c:f0:f5:c2:3c:da:ad:
02:a3:1a:58:8c:03:13:c4:2b:88:ff:04:8f:7e:31:
ac:fe:d8:a7:23:4e:66:55:9c:5e:41:2c:c3:01:59:
13:60:23:87:87:ae:3a:35:35:3c:0d:f4:14:99:fb:
bf:a9:27:db:d8:c1:89:6d:d0:61:18:ca:55:7d:d4:
ef:af:99:25:3e:12:f5:a5:a0:15:09:ee:41:19:9e:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:33:50:C9:B0:41:A7:05:6C:7C:C8:7D:38:4C:CC:C1:F5:0E:03
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:7a:73:98:95:31:17:57:71:a9:61:78:38:b9:df:c0:39:
ed:1d:b9:6d:94:73:a4:fe:cf:98:df:03:9e:4b:13:89:63:b3:
07:a0:33:44:73:5e:3d:45:7e:df:81:11:4e:18:7c:b4:c1:76:
0f:f3:c5:2f:4d:9d:86:10:c2:66:f5:73:f3:ce:4d:e1:5d:d8:
2e:d8:92:22:04:5b:10:26:a4:4f:8c:8f:94:4b:27:48:36:b6:
7b:34:1b:75:b6:a0:6c:cf:ba:bd:32:3e:98:c9:51:93:7d:95:
fc:4c:8c:a7:6f:29:60:31:4a:f8:08:72:e5:b6:80:cf:04:61:
76:e9:02:16:1d:4f:ae:d3:81:c6:6a:ea:2d:f6:a5:50:49:0a:
f8:bc:68:f0:92:48:ac:54:20:ef:3a:75:f8:63:83:76:b1:de:
b0:25:dc:e2:3a:e7:17:33:37:a7:38:2a:bc:8b:ea:e1:3b:18:
94:cd:9b:eb:72:6c:83:89:04:61:d6:40:69:d7:2e:3d:0d:46:
3b:48:61:a6:03:c6:41:e6:f6:ab:85:54:59:5a:c2:ec:a5:2d:
24:de:d3:30:80:fc:83:06:42:fc:1e:cf:df:79:7f:dc:f7:9b:
f3:3b:31:71:a7:2b:f3:62:7a:2b:c5:7d:57:79:44:a1:92:61:
4a:a4:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:47:48 2026 by rpki-client