Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: crUatJYAPVQ4ZNw/ULzX57oM87s0oRbYZhOciJN7x8Y=
Subject key identifier: F6:EB:23:27:02:D6:21:62:59:C0:47:4C:3C:F8:23:FF:4C:21:BE:25
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01A1957B397B8433FF96870B79667BA719C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0E05
Signing time: Sun 01 Nov 2026 05:00:43 +0000
Manifest this update: Sun 01 Nov 2026 05:00:43 +0000
Manifest next update: Mon 02 Nov 2026 05:00:43 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: jLEewEQcWHmrEatHSpCDs0VuG4OYuIbRT9o44+D14Go=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:7b:39:7b:84:33:ff:96:87:0b:79:66:7b:a7:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Nov 1 05:00:43 2026 GMT
Not After : Nov 2 05:00:43 2026 GMT
Subject: CN=f6eb232702d6216259c0474c3cf823ff4c21be25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:e2:96:06:ca:1f:00:ca:61:c7:38:a2:a4:
62:5c:7c:99:df:8b:a4:86:46:1b:d8:ae:fa:d5:9b:
f4:8b:20:8a:2f:89:5a:aa:ca:e6:09:9a:f8:c1:3d:
2f:22:b8:01:28:43:33:5d:aa:82:f4:9f:54:10:bd:
0b:90:73:e3:84:19:15:fe:4e:e9:4e:78:85:59:ba:
37:68:a0:b6:4e:be:cb:49:56:32:9f:33:76:1b:d0:
69:e0:47:e8:c1:af:eb:81:d4:73:fd:a0:c4:74:9e:
51:9b:06:c9:e4:6b:69:2b:cc:43:10:c8:b4:63:ae:
65:cf:05:71:95:77:77:cd:be:c1:1b:34:d9:fe:92:
b2:c6:41:08:2d:7f:cb:52:2f:f0:60:77:bc:4e:76:
e2:6b:5f:0b:57:e3:8d:1b:c9:1e:b3:06:4f:38:f7:
ea:c5:ef:e7:d1:1c:f2:44:c1:e1:3a:3c:b9:b5:d1:
c7:a3:31:48:08:4c:06:43:4f:d1:6a:9e:62:b5:79:
dc:1e:5c:1f:fa:b0:d5:a0:75:7f:c9:74:c3:ea:9e:
0a:21:09:a9:20:c9:75:20:b9:46:72:19:43:f2:ff:
05:6d:44:c5:cc:c8:b2:c2:0d:ea:ba:d2:26:c9:c6:
79:35:c7:c8:91:09:61:b7:e7:29:81:a0:b7:8b:85:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EB:23:27:02:D6:21:62:59:C0:47:4C:3C:F8:23:FF:4C:21:BE:25
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:4e:c5:1d:20:a6:37:0f:86:ca:77:d7:74:30:c6:7c:1a:
01:79:72:52:8b:c0:8f:ee:64:e4:df:a7:1c:a2:11:54:51:2f:
73:df:57:a7:62:e3:e3:3d:f7:ee:79:3b:82:43:b8:2a:d9:17:
f1:83:40:9b:57:b1:10:c5:61:c9:e6:08:0b:aa:e3:fe:c6:6b:
e9:3b:88:3c:f6:21:89:32:f5:33:8c:63:3b:dc:21:6c:87:37:
ab:74:d2:77:6b:01:1d:ca:ee:92:26:08:19:e5:c3:ec:ea:cf:
e2:8c:db:a7:89:c9:5b:05:7b:1e:89:e9:39:7f:7f:8d:c5:11:
fb:8b:3d:b9:af:01:09:90:08:5b:db:e5:95:2b:0b:a7:c5:9b:
a5:5a:13:b5:90:3e:9c:ca:56:3f:a6:9f:73:53:2e:20:8a:ca:
d8:60:3e:c3:ec:6e:1a:a5:11:81:b9:fa:a5:a1:91:82:2d:ff:
5a:6c:f2:fd:2d:d7:3a:26:26:95:73:55:69:6b:54:32:1b:c5:
47:68:08:fc:e8:ed:31:fc:bb:0b:23:40:62:88:ad:d4:7f:6d:
7b:15:43:07:08:58:f5:bc:0d:82:19:d9:40:a9:48:ea:1e:c7:
59:7a:7c:34:5f:1f:4b:d0:7c:54:25:94:59:ff:a7:3a:14:3f:
95:02:55:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:02 2026 by rpki-client