Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: zGQaBJu0vGhUubPGyg4S8fCsbaObLa2zwr6VU9RlA2A=
Subject key identifier: BE:37:E5:F9:40:61:72:15:97:9E:60:62:75:FF:7B:29:AD:88:CA:6C
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01A06C14C4021A6383856FCD4D6D21AF3032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1986
Signing time: Fri 04 Sep 2026 11:01:35 +0000
Manifest this update: Fri 04 Sep 2026 11:01:35 +0000
Manifest next update: Sat 05 Sep 2026 11:01:35 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: oiJj76Ws7t90vq2Xx50fWqSMzYkuSaJVkR9silYLjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:14:c4:02:1a:63:83:85:6f:cd:4d:6d:21:af:30:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Sep 4 11:01:35 2026 GMT
Not After : Sep 5 11:01:35 2026 GMT
Subject: CN=be37e5f940617215979e606275ff7b29ad88ca6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:98:c7:47:9f:ab:16:16:d6:b4:09:1e:96:
27:30:0c:d9:ea:26:63:33:18:cf:0f:74:8b:93:9b:
ac:62:3b:b9:8c:d7:dc:74:4a:ed:b6:13:4d:d0:1b:
75:98:9c:ed:5c:00:52:23:69:61:3c:01:43:7c:3e:
79:d2:95:ba:3e:cb:4e:0c:d7:10:71:13:83:e3:7d:
26:f2:86:06:12:7e:61:d1:40:53:19:da:88:c1:70:
c9:bd:25:ef:ff:e6:16:14:67:0d:93:ea:f1:e0:26:
5e:96:1d:90:48:40:a4:ff:51:d2:bd:15:67:16:ed:
26:7f:98:cf:7c:54:79:82:38:a1:cb:ed:6a:1a:9a:
b5:ed:9f:eb:5f:bb:5c:a0:3b:30:87:7f:56:77:40:
d0:04:12:d0:e1:ec:a8:53:25:e7:32:a7:dc:5d:ca:
69:01:6a:85:10:0e:1a:eb:85:ce:1f:37:c9:ca:ff:
69:3e:8a:8b:e6:3c:27:93:04:71:1a:c1:98:35:0c:
62:eb:03:f4:83:e3:3a:16:93:e9:45:76:cb:a6:e0:
26:4a:4d:bf:fb:41:9e:ab:1f:c5:a0:cc:31:3d:0a:
96:b3:e4:a4:5d:a9:d7:ed:a3:02:f0:78:cf:e5:ad:
da:be:35:0d:ef:06:f6:e3:39:ed:1f:17:8e:69:21:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:E5:F9:40:61:72:15:97:9E:60:62:75:FF:7B:29:AD:88:CA:6C
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:e8:f0:6b:f7:e2:ed:c4:85:d3:54:3b:d2:2d:95:7e:bc:
5f:e1:93:fb:4f:de:77:04:90:2a:5c:d8:72:00:e2:6e:a8:4f:
6d:38:aa:21:14:d9:60:65:dc:c0:3d:6f:15:cb:e6:91:0b:3b:
85:73:19:ee:d8:b4:82:d9:4b:b7:4d:9f:d9:2a:26:27:cf:44:
8b:b1:ae:25:89:b1:54:28:0f:d4:1a:cb:7c:06:45:29:c9:08:
ab:e9:05:d6:05:8f:e7:9a:e6:16:8d:d7:9f:f9:0f:e5:1f:19:
e6:99:dc:ea:96:ae:94:73:e9:ea:53:c8:dd:15:bb:a8:32:bd:
92:5c:0b:c3:18:71:3d:b2:67:a3:e2:81:8f:d6:27:b5:83:a9:
80:8a:9b:a4:25:51:b4:7d:fc:82:f1:f9:7d:d4:52:04:67:21:
c0:39:aa:44:0e:10:01:93:9b:7f:97:6c:37:84:9c:ee:bd:be:
15:4d:e7:49:0c:a4:14:d5:0a:ba:e2:ae:d5:9e:d4:c2:b4:6d:
79:81:a8:89:23:e6:7a:99:f6:6c:d9:3e:40:e9:52:97:5c:a8:
91:45:68:0c:67:ba:a9:21:f9:7a:96:06:1e:3b:29:c8:59:f8:
9b:55:69:44:dc:41:ba:5e:14:77:7f:40:7d:2a:7d:74:ee:95:
4d:e1:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:00 2026 by rpki-client