Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: RHb3njBqXJ5LukNZDUE3ECeJMGiqmiJTQDFYAYn6A3Y=
Subject key identifier: 01:F9:B6:67:C5:1A:ED:74:03:55:1F:E0:39:E1:A8:63:1A:90:4D:EC
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 01A11D510DFA13BBE034CF3F1BD8102E11DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 21:00:13 +0000
Manifest this update: Thu 08 Oct 2026 21:00:13 +0000
Manifest next update: Fri 09 Oct 2026 21:00:13 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: 0Rp+T3AfHXQRAQ+nYgTiYIJY/F1+pQsAbp4x1+5mZ2I=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:51:0d:fa:13:bb:e0:34:cf:3f:1b:d8:10:2e:11:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Oct 8 21:00:13 2026 GMT
Not After : Oct 9 21:00:13 2026 GMT
Subject: CN=01f9b667c51aed7403551fe039e1a8631a904dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:9e:52:30:70:c3:a6:19:92:71:e7:08:ca:
b6:a1:09:68:55:c4:e0:98:f5:6f:c7:25:08:49:c7:
53:e2:ba:3c:2c:c9:8a:e3:c2:cf:cf:b0:c9:31:bf:
a4:36:1c:69:d1:0b:69:92:63:d6:62:e6:80:a2:cd:
fe:04:f8:ad:5e:eb:06:70:67:15:37:0a:39:f2:4d:
68:22:6e:a0:ff:de:79:33:9f:a4:aa:99:6e:4d:f6:
d0:4a:d4:b1:81:86:b7:09:89:70:48:29:4e:23:5a:
72:9b:1f:d8:56:8c:4d:34:f5:22:07:e3:48:46:ba:
b0:88:8a:8f:e0:f1:a3:78:28:d9:38:b2:2f:6a:b8:
67:10:ac:f4:3a:9f:5b:19:9f:03:aa:d4:ce:ce:c7:
08:bc:1d:96:1d:19:dd:fc:5c:87:00:5c:19:23:3f:
64:39:22:89:e7:a0:c7:91:f1:67:58:24:94:20:a1:
41:8f:4a:91:23:d7:a4:91:bd:4c:50:0d:80:80:96:
c1:3d:b8:70:3a:06:e7:2b:a3:f3:3a:d3:6b:c7:5f:
79:5c:a7:7a:08:c5:62:90:0e:05:ec:b0:36:90:59:
26:a2:e3:92:08:ab:9f:af:64:d0:03:00:15:e8:fb:
7d:22:3b:e0:9c:de:cd:39:d0:c2:84:8b:40:c7:dd:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:B6:67:C5:1A:ED:74:03:55:1F:E0:39:E1:A8:63:1A:90:4D:EC
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:26:b2:b6:a8:37:4e:21:8f:8f:bb:9c:c8:5a:88:b3:e4:
bd:6c:c1:c8:46:ef:e9:52:f3:c7:69:4a:e7:ee:d8:1c:32:0e:
5d:e6:5e:ad:1e:f5:7f:ae:85:67:f0:b5:27:ee:50:a6:6f:59:
8f:f7:63:e5:a2:f6:f4:60:c6:ab:28:b8:66:85:fd:c3:06:47:
e3:ce:83:00:e2:3c:a8:af:09:7f:68:d0:1f:7d:94:40:92:f8:
06:16:2d:42:8b:cf:59:75:11:16:eb:a6:3e:a1:96:67:0e:8f:
a8:85:1e:cf:59:26:68:65:aa:f6:d6:54:63:84:32:71:d3:3f:
89:52:6c:88:87:a8:ca:79:d7:c1:0c:cb:99:30:01:57:48:1a:
c4:65:66:55:74:00:e6:35:f3:f1:71:e2:86:f8:24:e3:a5:d4:
3a:df:65:dc:90:47:69:55:c7:7e:51:af:17:59:7b:4a:06:b3:
8b:3b:ac:9a:4b:e4:8a:9c:a4:15:2a:23:fb:ef:70:cc:45:d3:
8e:8b:00:75:46:aa:03:3f:84:85:cb:7f:91:8e:96:25:c6:98:
b6:43:50:39:bd:c1:ba:1b:43:10:e3:7c:af:14:5f:23:08:c3:
81:29:17:1f:83:72:dc:cb:60:f8:4b:12:a8:47:7f:21:d8:4d:
90:8f:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:27:15 2026 by rpki-client