Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: 004Bp2NscuSixC4Qo6AkpVC/H0wVaZ0f3uMmMM2pe8g=
Subject key identifier: C1:3B:17:73:F2:57:19:23:AD:22:4C:29:F1:EB:F5:41:2A:D2:60:64
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 01A174DDD49F45B3A870A63BA3A164D779BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 08D4
Signing time: Sun 25 Oct 2026 21:00:57 +0000
Manifest this update: Sun 25 Oct 2026 21:00:57 +0000
Manifest next update: Mon 26 Oct 2026 21:00:57 +0000
Files and hashes: 1: 1ovuqMEKOUDFqdLbNMY8RT3kcPw.roa (hash: 0/QGsYA3mfkzz2c2pHN7gqXXkXjWV9Xlg3Nj4LJ+NnI=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: XQ1Qs5vMuHX5Wxzstjt/hgAz7Fw/9v6fdgYYVZ3W9eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:d4:9f:45:b3:a8:70:a6:3b:a3:a1:64:d7:79:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Oct 25 21:00:57 2026 GMT
Not After : Oct 26 21:00:57 2026 GMT
Subject: CN=c13b1773f2571923ad224c29f1ebf5412ad26064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:6a:ab:43:ac:fb:36:16:ff:46:21:6c:08:
82:0a:9a:6c:01:ed:1e:a4:f4:42:57:28:83:9a:8a:
23:9a:65:ce:8b:0a:10:fb:4c:5a:3e:ec:c9:0f:b5:
42:6c:69:7a:c5:9d:e3:8e:91:5f:42:0a:81:45:ed:
dc:bf:1b:21:83:33:a2:12:85:50:79:ed:5a:b2:80:
3f:b0:bb:41:78:2b:e1:cb:6a:81:e3:ee:64:1b:84:
67:a8:74:5c:0b:16:db:89:c3:b3:db:03:13:02:51:
3e:fe:28:f7:61:74:52:33:30:5e:fc:7c:f3:61:2c:
99:91:90:63:1a:a7:2c:5b:56:1c:f4:30:07:e6:42:
8b:32:56:d0:a5:03:f4:46:86:07:76:f8:86:1e:0c:
5a:70:bd:d4:87:e0:f4:e3:e4:4f:05:25:5e:a8:0b:
36:74:0f:90:61:97:c8:bd:8d:85:62:f4:75:7c:2e:
dc:54:f9:73:aa:78:9a:23:98:ca:ec:71:ca:a5:60:
bc:08:02:c2:35:b4:05:c0:a4:a5:15:bb:3a:5a:af:
f3:3e:48:56:63:10:ea:17:6e:d8:86:95:c0:7e:24:
10:df:1a:05:9a:82:23:3a:5b:08:cf:ff:69:fd:5c:
65:ae:64:76:db:52:ef:4e:15:43:80:3e:0f:14:72:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:17:73:F2:57:19:23:AD:22:4C:29:F1:EB:F5:41:2A:D2:60:64
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cd:5e:84:36:ae:57:af:85:8a:8c:fe:00:6e:c1:2b:14:c3:
df:bd:c1:7c:8b:19:6c:6c:64:5a:9f:bb:42:47:4f:f3:8f:9a:
23:51:4d:ae:ad:4a:b1:83:2c:db:d1:73:f1:13:62:8e:50:0c:
80:69:60:9d:b1:fa:49:0d:97:1f:5e:09:50:9e:83:ea:a5:6c:
40:2f:50:47:f6:7a:f1:25:6d:80:08:bd:3c:09:ec:03:0f:77:
5c:4b:71:ff:08:4c:7a:85:f5:49:91:43:00:11:3f:64:03:5e:
82:0d:20:f5:9b:83:e4:89:98:8c:3f:97:fd:5b:c4:c7:f8:d5:
c9:43:27:be:97:ab:5c:93:ab:e1:31:b3:f1:ab:9f:a5:d9:03:
8f:4f:dd:30:e2:47:ed:55:23:48:22:c9:ff:3f:7f:5c:8a:58:
92:e3:c7:b2:6b:60:73:b5:a8:36:7a:09:aa:f5:9f:a6:99:c6:
f1:13:b7:49:36:4f:47:ea:af:51:4c:9d:55:46:1a:74:c0:ee:
3e:bf:87:9b:5d:06:45:a3:d3:bc:41:da:95:03:78:79:a6:e1:
27:ff:cb:34:9d:fa:7b:1b:70:ee:32:36:e7:23:15:2e:52:8f:
23:aa:ac:b4:29:f3:31:82:bd:8a:56:1c:32:5e:f7:55:5e:da:
a4:ce:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:40 2026 by rpki-client