Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: lHCdgSJCw+bFMVrILhr7Lhy1Ni+7EOnu7A1S7kBM6M0=
Subject key identifier: 4E:D0:0A:83:47:38:20:7C:DA:A0:89:17:27:CE:20:1F:BD:F8:E7:7F
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 01A17CCED501922992E7CFB51BF76F7CCE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 14CF
Signing time: Tue 27 Oct 2026 10:01:31 +0000
Manifest this update: Tue 27 Oct 2026 10:01:31 +0000
Manifest next update: Wed 28 Oct 2026 10:01:31 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: G1+JR9AXBGwktusDNaIhX8uUMJKgLLKabwE+K60pHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:d5:01:92:29:92:e7:cf:b5:1b:f7:6f:7c:ce:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Oct 27 10:01:31 2026 GMT
Not After : Oct 28 10:01:31 2026 GMT
Subject: CN=4ed00a834738207cdaa0891727ce201fbdf8e77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:3d:ec:8d:36:71:0d:d2:4f:34:d3:a9:91:
40:f3:4d:fe:d4:77:2a:32:bf:19:44:2c:32:dd:c4:
f5:cf:d7:f2:8a:60:9a:46:a4:d5:06:64:86:21:42:
f5:d0:1e:2b:3c:7c:bc:88:4d:9f:1d:47:5f:92:02:
dc:1d:4e:49:5a:71:3d:50:0d:69:13:6d:f0:0d:19:
06:bb:ca:a2:bf:b0:d9:14:50:95:cb:06:d8:1a:59:
51:be:9b:bd:2c:ab:da:ed:b5:7b:55:6c:85:6d:4e:
cd:61:f2:5b:90:33:e2:8e:2d:ca:5f:cd:55:fb:fc:
95:51:39:c1:a7:70:e3:c3:01:05:82:e4:10:2b:17:
9d:d9:7d:0f:35:a6:10:87:b7:6a:bf:fc:f9:48:5c:
92:3f:41:bb:18:c0:a1:0f:f5:6b:c6:3c:ca:80:7e:
b5:07:9f:18:96:b4:27:2e:89:a8:c2:d9:1f:15:e6:
7f:86:27:de:bd:45:34:4d:e5:b2:fd:a8:f9:47:fa:
4b:cd:e9:9d:90:39:ba:fa:5f:73:f4:84:dc:e4:b2:
3f:ef:cb:e1:4a:2d:51:ee:a6:cc:fd:4b:3c:d2:b3:
d6:e6:7f:19:bd:5d:9f:a7:68:08:a3:a0:c4:1e:f7:
54:79:6d:ba:20:6d:aa:91:f8:4d:62:a4:20:f3:31:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:0A:83:47:38:20:7C:DA:A0:89:17:27:CE:20:1F:BD:F8:E7:7F
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:c8:9d:82:a7:db:1b:a6:72:8d:01:03:29:c4:aa:1a:66:
69:cd:bc:bc:08:58:d6:97:02:e1:f0:10:51:c1:af:a8:e9:ef:
ba:6a:a6:0a:2b:b7:a9:6c:aa:3e:bd:2e:f8:4b:d2:19:41:61:
c5:e9:ec:18:a2:4a:70:20:1d:60:c1:47:c6:23:94:f5:56:61:
02:18:99:30:7a:b0:78:ce:67:1b:45:25:63:f9:54:96:30:e0:
4b:71:e0:90:6e:de:55:06:d1:a6:ff:31:36:af:dd:16:f6:a6:
08:e1:e3:a6:06:58:14:1e:24:20:41:26:da:58:3e:84:11:e9:
b0:20:c3:26:cf:99:9a:7f:9d:29:e6:b8:80:3d:ed:ac:97:5c:
96:76:51:d4:31:d2:00:50:8a:ba:f9:47:30:1d:21:db:59:77:
8b:e1:70:5d:cc:cc:1f:cd:5e:ba:a8:e7:7d:cc:99:ca:d0:eb:
a9:87:9a:9d:8b:6a:b5:3f:d1:00:93:06:b7:f0:6d:c7:5c:fd:
25:91:91:f4:31:c8:87:41:26:e7:2d:8a:c1:46:5b:01:e8:c4:
ad:69:eb:69:d6:03:8f:39:18:5f:65:55:ff:f6:d8:de:fc:76:
82:87:55:9e:ea:a1:bd:bb:0a:9c:ab:61:f1:88:b8:74:5f:8a:
bb:77:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:05 2026 by rpki-client