
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier: rwkFI4E1TiMkeSLgtSoNWI776RgjEbXgMTT/E1SsPhQ=
Subject key identifier: 95:85:9C:FF:02:8A:28:63:A4:CC:46:16:0A:F7:44:10:B3:83:38:CF
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 01A17D733595281AC7D6EE210ED60396D83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 13:01:04 +0000
Manifest this update: Tue 27 Oct 2026 13:01:04 +0000
Manifest next update: Wed 28 Oct 2026 13:01:04 +0000
Files and hashes: 1: dCyZ9Pf_BM16QCKCTZBWurk5tes.roa (hash: igMWMbqYVYQOf++wz4/c/zhgP+nD+9kvBZJquJqrWeo=)
2: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: pFm8e+5/PpUX/HEdntZxDBoUqNHNEApjiC15pv3nhMY=)
3: nGxIqADkVb_mNggVwJxi_XzzMLg.roa (hash: AeNpYVfAfsiZNoHvge0sBO6h6Hi0L8OmJkT5GmZUJAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:35:95:28:1a:c7:d6:ee:21:0e:d6:03:96:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Oct 27 13:01:04 2026 GMT
Not After : Oct 28 13:01:04 2026 GMT
Subject: CN=95859cff028a2863a4cc46160af74410b38338cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:5a:24:59:65:5a:59:0b:b9:3d:f7:23:7e:
5b:39:ba:d0:5f:13:57:c4:0b:86:ea:87:3f:86:ad:
5b:99:c8:f8:bf:5a:3d:42:ba:73:b9:91:4c:ab:78:
07:ba:69:57:22:70:79:e1:ee:5a:43:73:f8:23:85:
e7:0e:b3:f7:22:b7:dc:6a:97:4b:87:95:86:e6:52:
2f:5e:86:de:a1:f5:48:77:67:e6:32:e2:f7:29:f3:
69:bd:30:50:51:03:ce:89:bd:6f:b7:82:3d:ab:97:
05:2a:ca:68:5e:b9:33:09:2a:ac:3e:6a:62:81:96:
c7:9a:db:ae:26:ac:10:97:c5:d5:81:30:07:ca:e0:
4e:7d:11:94:76:30:7a:c6:30:ef:68:d7:56:35:5d:
ad:b7:5c:34:3e:0c:42:97:0c:6f:42:03:5f:38:52:
b6:cd:e2:86:a9:04:0b:83:ba:32:69:6c:8b:4d:e8:
26:95:6f:5a:9f:ac:1e:77:09:97:5b:14:24:c0:1e:
1e:db:92:18:0d:27:2a:be:ad:a7:b1:1d:12:1e:1e:
55:21:0a:91:d9:a7:bf:6c:5a:36:52:85:ca:89:db:
8e:34:0a:12:77:d6:98:2d:0f:57:df:f6:cd:aa:1e:
9b:4d:f0:c1:20:f9:81:82:2c:97:89:ef:30:d0:a8:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:9C:FF:02:8A:28:63:A4:CC:46:16:0A:F7:44:10:B3:83:38:CF
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c9:ba:23:73:10:83:27:74:fa:8d:5d:b6:0b:6f:d0:65:de:
30:15:dc:d1:2e:4a:d4:e1:a1:c7:b2:fb:ac:e8:57:31:ed:e0:
40:19:80:ad:51:57:29:27:20:51:d0:fc:0b:a5:61:15:93:af:
e7:3c:e7:28:f6:e4:01:37:8b:55:e1:70:06:89:ce:cc:6b:53:
70:6f:0a:f8:ad:52:73:74:48:59:97:ec:cd:e3:09:45:97:ed:
52:a7:4a:11:a7:3f:2e:9d:4d:32:33:53:6d:b3:bb:af:5d:0b:
33:b7:69:3b:4a:4f:43:68:3c:3a:04:83:ce:97:b3:f6:b2:00:
c7:2c:f8:5b:4b:e7:03:95:54:d1:a9:ad:12:d9:ed:5e:9b:24:
f9:4d:10:0b:f4:38:06:aa:ba:0c:f1:60:3e:50:0c:2b:d9:e8:
5f:aa:00:6b:fb:d7:71:83:89:6a:f9:1f:8e:75:6e:03:49:db:
ad:ca:b5:e0:55:57:0c:94:12:97:45:9c:79:37:c6:ea:57:43:
5d:a2:52:7a:dc:77:5f:06:80:0d:74:78:4d:b5:7c:ee:c2:54:
80:04:38:fc:5b:f6:f0:e1:8b:e8:1d:81:5f:96:a0:70:04:a9:
d1:8b:94:b4:ea:55:f6:fa:35:59:08:86:c7:5d:65:94:9a:5b:
c5:07:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:20 2026 by rpki-client