Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
File: nRNTyAuINe6erTfvfp9kIQp3O_s.mft (raw, json)
Hash identifier: j6K5hY95NynmVkE+X3nvEXeaDmv2JT4NPkmlfdgpkFw=
Subject key identifier: A7:66:91:7F:CF:D9:42:EA:16:C2:A5:1D:90:0C:1F:BB:2A:53:5A:56
Authority key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
Certificate issuer: /CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Certificate serial: 01A08BD5DC8CF7BE581A8EA0A006F35C410D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
Manifest number: 0351
Signing time: Thu 10 Sep 2026 15:00:43 +0000
Manifest this update: Thu 10 Sep 2026 15:00:43 +0000
Manifest next update: Fri 11 Sep 2026 15:00:43 +0000
Files and hashes: 1: aN1c9Sw0mZJOwIEAY7wKPyQLEEw.roa (hash: 26mq/JieiE08d31P7dbCMptw/12YVOE7/U8mBDr4f0o=)
2: nRNTyAuINe6erTfvfp9kIQp3O_s.crl (hash: yEe4f80/5acoXgdafTYZeGkI4CJA9Ap75hIrhXk8VDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:dc:8c:f7:be:58:1a:8e:a0:a0:06:f3:5c:41:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Validity
Not Before: Sep 10 15:00:43 2026 GMT
Not After : Sep 11 15:00:43 2026 GMT
Subject: CN=a766917fcfd942ea16c2a51d900c1fbb2a535a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:82:21:da:26:17:d8:2c:cf:bc:86:71:34:
c3:db:f3:38:99:67:a8:bc:fe:76:c0:ab:06:ff:a0:
51:65:82:e6:48:17:c3:a9:2f:5d:50:33:d6:d4:3d:
58:b9:5e:2a:1e:ad:d7:1f:b0:19:a5:85:f0:f7:33:
1f:bd:a6:07:24:a8:60:ff:04:ff:03:c7:ba:6b:19:
11:43:1b:b5:7d:8c:d5:c2:20:d2:cf:ab:ab:61:5d:
39:19:d4:59:4b:16:98:42:dc:a6:3f:1b:a8:9c:74:
2b:b2:47:55:98:1d:ae:52:aa:5c:85:42:75:aa:51:
b2:3a:86:ef:e5:49:b6:5d:be:88:9e:a8:1c:0c:1f:
31:99:37:7f:cd:77:92:4f:20:f2:57:a3:a1:22:5a:
f6:c3:52:bd:7f:05:85:1d:fd:69:fd:43:7c:f4:66:
b2:36:2e:3e:ae:43:c6:6e:84:ed:20:93:d6:08:b5:
92:63:f1:cc:b3:ce:cb:7a:bb:b2:9e:3e:dd:58:81:
31:86:58:5f:ef:75:39:40:3f:af:cc:dd:69:52:bc:
07:57:9a:cd:8f:a5:cf:a7:be:6e:b4:ee:0b:12:e4:
fc:a5:68:89:b7:f3:15:5a:9d:22:be:8a:f3:92:04:
64:fa:b2:6c:1f:20:9b:00:66:87:7d:c2:33:fb:3f:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:91:7F:CF:D9:42:EA:16:C2:A5:1D:90:0C:1F:BB:2A:53:5A:56
X509v3 Authority Key Identifier:
keyid:9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d9:7d:ee:d7:fa:7d:43:14:f5:d7:91:d0:3d:a5:b3:7a:b6:
30:b8:0c:87:f5:c5:6b:27:38:13:a6:b8:46:11:b1:76:33:3b:
26:58:41:80:5d:29:85:1d:b9:b4:1a:90:b1:2d:17:3b:19:5a:
8c:c1:34:44:09:5f:12:54:6e:6e:22:87:b3:6e:58:ff:10:9d:
39:4b:17:8c:7b:16:2a:b1:bf:96:66:af:df:e0:1f:5d:81:2f:
72:2e:80:aa:b5:08:f7:7f:a5:17:10:38:49:80:bf:4e:e3:9b:
ad:91:74:d4:73:23:a9:e0:ba:ae:55:50:fc:cd:fd:1e:15:b2:
5e:3e:bf:9c:35:99:4a:b1:15:6f:d9:27:66:62:80:1f:32:8f:
0a:f3:b3:38:3d:fb:dc:9d:47:4b:d0:cd:0e:8f:ad:49:c6:a4:
4c:16:f6:65:1d:fe:26:9d:1b:3b:b7:f2:89:80:1e:70:12:df:
a5:b0:dd:f7:d5:c7:bf:ff:b7:66:98:fb:e4:4f:2e:27:e8:03:
7d:c3:b4:89:6c:8a:f8:e3:b6:aa:75:a2:d9:a4:02:ce:f8:7d:
b4:d1:c9:d9:83:63:7f:ec:6c:51:a7:96:99:67:d1:65:f2:7a:
2d:17:cc:0d:73:7a:a3:8a:33:db:2c:e1:cc:b8:b3:78:df:cf:
29:83:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:08 2026 by rpki-client