Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: jUziyr17mWPX1ETpcMANmEINxEt80qCWv6GRqz4Z/Fk=
Subject key identifier: D1:B3:65:BE:63:BE:37:17:28:65:5B:4B:73:7D:95:F0:3E:AA:AB:44
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 01A08B30EF71EE1E9266B53F25EFFDFADABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 085B
Signing time: Thu 10 Sep 2026 12:00:35 +0000
Manifest this update: Thu 10 Sep 2026 12:00:35 +0000
Manifest next update: Fri 11 Sep 2026 12:00:35 +0000
Files and hashes: 1: 1ovuqMEKOUDFqdLbNMY8RT3kcPw.roa (hash: 0/QGsYA3mfkzz2c2pHN7gqXXkXjWV9Xlg3Nj4LJ+NnI=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: PqGQ4dSxzKJ42XsN3W0Y5hD6PGtl7ihZaEF8P1/t0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:ef:71:ee:1e:92:66:b5:3f:25:ef:fd:fa:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Sep 10 12:00:35 2026 GMT
Not After : Sep 11 12:00:35 2026 GMT
Subject: CN=d1b365be63be371728655b4b737d95f03eaaab44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:c5:58:51:8a:11:53:0e:b3:7c:5b:42:e1:
37:d8:53:93:fc:26:ce:6f:4e:76:05:fc:af:a6:06:
0c:37:fd:96:e1:45:76:86:bc:c6:75:fc:6c:e7:84:
86:0a:94:99:ba:4c:2d:e5:a4:d1:ad:54:d7:7d:bc:
55:2f:c2:60:1f:31:42:e3:c8:fd:6d:85:9f:95:e5:
fa:72:94:5a:7d:9f:fe:5c:62:da:7f:45:42:ef:e4:
97:d9:64:48:df:04:df:08:ca:11:b8:d3:5c:cf:ea:
a0:01:b3:6f:fa:e9:a3:0c:76:88:f9:be:de:94:e5:
d8:68:db:8c:0e:df:c0:48:d0:b8:aa:09:20:8a:3a:
29:a4:8b:7d:17:cf:39:14:1b:5c:56:b8:4a:a5:13:
c2:ea:fc:04:72:5b:a6:24:e6:a9:59:01:26:e0:23:
ec:f9:8a:cd:1a:69:da:e6:ed:47:4d:fc:25:32:49:
27:2d:40:60:84:a9:04:4f:82:0c:aa:1e:36:37:c5:
d4:2f:25:fa:27:f4:17:02:f5:ec:34:4a:06:a0:43:
6f:8f:df:94:bc:c2:fb:53:3d:92:fc:a9:57:52:7d:
f1:15:96:46:ec:69:40:20:c4:01:77:f1:a2:f9:00:
99:57:81:6e:58:e4:89:88:49:0e:17:30:e5:19:06:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:65:BE:63:BE:37:17:28:65:5B:4B:73:7D:95:F0:3E:AA:AB:44
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a3:21:cc:82:30:65:77:58:7a:85:24:22:ad:4f:46:70:a5:
e7:81:3a:f7:31:0d:c1:9c:8a:a4:3a:8c:6b:d0:30:cc:0a:e8:
36:75:6e:b6:96:8c:f4:de:bd:25:aa:25:8a:1d:c0:e1:71:7e:
8d:7e:d4:b1:a3:fb:fa:57:7e:07:5f:fd:49:09:b9:82:d5:7b:
64:72:69:b8:41:cf:48:3e:34:9b:7d:b2:da:62:1c:bb:f5:38:
41:ff:66:43:ae:89:1d:16:42:a9:c6:47:37:a9:38:2f:7b:69:
89:1c:b7:ea:42:ab:72:fc:f9:21:be:70:18:dd:29:ff:7e:fa:
a8:22:bd:24:c1:52:03:8d:2b:a5:c4:39:0a:f4:f5:2e:41:6a:
7f:9b:ef:21:90:02:5b:7a:b2:9b:88:fd:55:bb:db:48:b3:4c:
a7:21:35:6c:8d:4d:08:98:e7:79:1c:4d:a3:bc:dc:1f:63:05:
3a:3f:eb:65:86:1d:37:23:f3:55:3a:e9:77:94:5f:6e:31:ef:
61:5f:f8:34:7b:de:9c:0d:e4:f4:a3:a6:af:86:3f:dc:a8:6e:
c5:1d:49:6c:03:9e:43:61:92:d9:94:89:27:91:f3:f5:3d:7f:
92:38:ac:b0:b8:01:1d:4b:ae:81:da:f2:29:87:37:c5:b8:cc:
60:3e:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:09 2026 by rpki-client