Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: kW9gFgE5sB8b9b2bTsWXKtyE76wV/KUhy9lnn5BZ+Yg=
Subject key identifier: EF:87:56:5B:E6:1C:19:DC:3E:16:4E:64:CD:DA:19:8B:7E:55:3B:58
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01A15B8BE266BD8C681C5FE595253C625B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1A02
Signing time: Tue 20 Oct 2026 23:00:56 +0000
Manifest this update: Tue 20 Oct 2026 23:00:56 +0000
Manifest next update: Wed 21 Oct 2026 23:00:56 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: OKFxFcenx4qNKwqfT7pH1eDmalQ3l6L8E4FsLmxUy+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8b:e2:66:bd:8c:68:1c:5f:e5:95:25:3c:62:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Oct 20 23:00:56 2026 GMT
Not After : Oct 21 23:00:56 2026 GMT
Subject: CN=ef87565be61c19dc3e164e64cdda198b7e553b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:7e:66:0b:c4:bc:ef:05:82:af:81:e9:0b:
13:ce:59:b5:ff:ba:ed:94:7b:13:06:0e:be:36:f4:
36:2f:e1:b5:50:c7:bf:f2:5a:c0:6c:78:84:8e:43:
a0:33:80:db:6c:48:28:8e:15:77:87:29:0f:f0:a2:
72:e9:81:20:88:16:1a:cc:de:cf:e3:b5:72:5a:db:
c2:ad:3c:22:e7:f9:73:d9:62:07:1b:e8:8c:a4:99:
5a:5e:24:40:8d:b3:55:58:1d:f0:29:20:f3:b4:19:
2c:b4:bb:de:40:02:80:7f:45:63:d5:81:ac:e4:6e:
7d:b7:ef:ef:f7:84:3b:5f:6e:41:cc:92:65:44:46:
91:7d:c7:9e:3e:48:92:f4:24:dd:29:97:b2:f4:03:
26:02:a3:a7:3a:09:9f:b0:83:04:6a:39:94:17:31:
19:2c:34:4b:dd:19:5b:5c:6b:fb:36:66:eb:80:9b:
fb:6d:b3:42:09:56:28:0d:ef:0c:6c:df:7a:3c:2e:
34:68:e7:3a:1c:0b:f8:0a:e1:14:fc:d1:0a:8c:92:
5f:62:3a:ca:7f:26:09:18:d8:3c:e8:5b:d6:0a:95:
13:dc:8d:68:d0:c6:a6:c5:35:cf:4e:87:9e:4b:64:
35:0f:e9:89:45:42:4b:97:9a:43:c5:69:e1:c0:61:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:56:5B:E6:1C:19:DC:3E:16:4E:64:CD:DA:19:8B:7E:55:3B:58
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:90:5b:ff:e6:81:6b:f9:02:8b:34:24:e5:8c:8b:02:ff:72:
50:96:97:5e:f6:b8:64:6a:90:99:54:83:89:91:c9:65:68:fc:
51:b5:e8:13:9d:9a:38:70:de:cb:a8:ed:8f:9b:c4:e9:9b:2c:
cd:37:22:f1:8f:5b:9b:8a:e2:10:1f:16:81:1f:e4:a7:8d:a3:
cf:49:1d:33:02:f3:74:de:7f:f9:a1:73:7c:f3:63:99:15:2d:
25:e8:cf:e3:f3:07:d8:cf:04:01:69:f7:82:dd:fd:ad:d5:48:
29:81:ee:bb:81:b9:eb:ff:21:69:b2:4b:8c:07:01:78:c3:99:
00:c8:c2:d2:c2:a2:bb:ec:9d:00:8c:4a:34:b3:4f:fc:cf:7f:
1e:60:66:30:a8:fb:bc:a5:4c:ad:eb:73:2b:55:8e:57:c5:cd:
08:10:0f:b6:0f:76:bd:66:3b:f4:f8:6e:12:63:39:c8:47:bd:
50:a5:20:85:b4:ba:b1:b7:a3:79:ad:05:77:5c:95:0f:73:f9:
b5:a8:c1:cc:c5:da:96:ab:5f:ba:ed:25:67:46:31:07:78:57:
cf:87:a0:55:8c:cb:33:c3:fc:19:ff:d0:f3:04:b8:b4:f9:96:
d1:3e:a5:1d:67:c3:21:a2:38:78:96:1a:f5:00:e1:88:aa:bc:
0a:02:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:44:58 2026 by rpki-client