Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
File: nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft (raw, json)
Hash identifier: ZPPh0Vwm1gzCpScHWs6zfx4VMFm0dYSxNH5dymHwasM=
Subject key identifier: 9A:87:27:B8:F9:23:B0:3E:BD:92:3F:E1:02:7A:23:18:7C:27:15:7D
Authority key identifier: 9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
Certificate issuer: /CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Certificate serial: 01A186AD46528000D2F98D128F2A742A68B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
Manifest number: 0138
Signing time: Thu 29 Oct 2026 08:01:04 +0000
Manifest this update: Thu 29 Oct 2026 08:01:04 +0000
Manifest next update: Fri 30 Oct 2026 08:01:04 +0000
Files and hashes: 1: L0tuCjuCLhjPSF5HtdtxLxQpvLk.roa (hash: 9nbYmoJhoa2yk/1ARwX2HbvkSwOAKvIa7oZoUwwmhUA=)
2: nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl (hash: RKqUkReJCc1R0ZJY68S6ikQqv13b5nR/4PDmLIPfSaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:46:52:80:00:d2:f9:8d:12:8f:2a:74:2a:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Validity
Not Before: Oct 29 08:01:04 2026 GMT
Not After : Oct 30 08:01:04 2026 GMT
Subject: CN=9a8727b8f923b03ebd923fe1027a23187c27157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:06:2a:74:37:58:96:8d:83:cc:27:a1:b6:
1e:2f:78:4d:b7:91:67:0a:49:df:21:af:d3:dc:b2:
46:72:5f:53:56:85:38:7a:9e:3f:93:97:bc:49:50:
c8:36:50:53:d0:9b:69:69:c9:d9:1f:e6:ec:12:f9:
cb:59:15:81:33:d3:2e:31:b2:2d:95:ce:d0:c0:96:
db:2d:83:dc:09:45:89:4e:ea:c5:9c:d5:61:6f:d2:
49:e7:b3:ec:dc:15:d5:ca:b1:1b:e1:48:83:17:6d:
3b:9b:ad:85:e3:b8:d3:33:57:13:25:ca:70:52:79:
97:98:3c:0e:f6:43:a1:a0:43:9b:f3:5f:11:9a:c4:
50:4e:ad:d1:b8:ea:63:9d:88:0d:aa:d6:0e:c7:1a:
85:4e:0f:39:6d:d8:4e:ee:25:b6:c0:16:9e:78:c0:
53:ae:06:44:f7:d6:d8:1e:a0:52:ac:88:e5:9c:39:
88:55:79:0e:64:07:cf:ec:b4:56:56:f6:15:89:61:
1e:d7:4d:87:71:1a:0f:d0:b7:ca:f6:29:32:68:bb:
fe:df:9e:7b:69:67:bc:bc:c1:f3:3f:23:c2:45:12:
4e:14:18:12:c4:c3:bf:c6:13:62:30:d0:54:a2:9d:
8c:64:8d:59:bc:c4:1a:0c:0a:9e:33:ab:81:8f:7d:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:27:B8:F9:23:B0:3E:BD:92:3F:E1:02:7A:23:18:7C:27:15:7D
X509v3 Authority Key Identifier:
keyid:9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:74:a4:a2:ba:38:f0:28:f0:58:13:be:ce:e3:24:44:0e:ec:
cc:11:63:b3:7f:78:04:76:89:15:60:3d:51:4a:73:04:ee:9b:
fb:69:03:40:e7:dd:48:97:b7:21:8f:11:7d:a4:a3:84:c0:5b:
04:ee:91:4a:69:5b:d4:77:03:15:fa:dd:e4:b9:97:2c:49:e1:
a8:85:f5:9b:96:66:80:75:53:84:08:dc:61:1f:f4:bf:21:1e:
4b:01:28:ef:f9:01:0b:c9:9f:c3:e4:99:b8:8a:66:e2:2d:be:
63:3d:6a:e9:ae:fb:39:a5:c2:2b:b2:7e:66:2f:5d:c5:46:f5:
c2:0c:3d:8a:ae:70:76:e2:66:b9:c6:17:c6:0d:bf:e6:35:d2:
34:ed:f2:ed:80:f8:c6:45:47:74:bd:7b:4f:eb:8f:00:d5:ab:
70:6c:24:0a:aa:2b:e6:60:02:e2:3c:73:cf:2f:26:1b:28:6b:
12:b1:3f:e6:24:76:d3:54:4e:c7:74:3d:6c:b2:00:a9:ea:16:
61:af:7d:cc:00:25:b2:88:21:28:c0:db:79:97:fd:cd:f7:e2:
84:52:51:04:33:d3:bb:51:62:af:d4:b4:ce:2a:e3:e7:5f:94:
6f:96:70:11:7f:e3:be:4b:22:79:5b:04:57:8c:e6:73:8d:84:
1c:90:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:02:44 2026 by rpki-client