Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: vo9JejJwztd6Bifd2/RbVYhGA7/D9uNcXzcKAaUdsbk=
Subject key identifier: E0:09:7E:7E:3D:ED:8F:E2:09:1B:B2:6A:83:6F:27:05:4A:8A:4A:91
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01A1938CD098DCB0F05EBCC52EE7FB850127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0E04
Signing time: Sat 31 Oct 2026 20:00:41 +0000
Manifest this update: Sat 31 Oct 2026 20:00:41 +0000
Manifest next update: Sun 01 Nov 2026 20:00:41 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: 2M1NzMIxoKRU27kdv4QCqW3QODKeR2wPYc9Fe3Q1eCY=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8c:d0:98:dc:b0:f0:5e:bc:c5:2e:e7:fb:85:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Oct 31 20:00:41 2026 GMT
Not After : Nov 1 20:00:41 2026 GMT
Subject: CN=e0097e7e3ded8fe2091bb26a836f27054a8a4a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:2b:01:f5:f5:d2:03:2b:9f:b2:46:b3:15:
92:c4:3d:c2:9a:9b:b2:c6:4f:6a:34:b4:7f:62:51:
88:6f:e3:e8:df:92:9e:ca:83:fd:1e:49:34:e4:d2:
af:b6:67:1e:42:6e:5f:9a:8f:48:72:bb:a2:81:aa:
6c:ec:89:64:84:52:df:f6:ca:8f:f2:e8:f1:88:c8:
08:66:09:26:0b:01:d0:5b:6c:f5:eb:11:ba:10:f2:
02:39:bf:3e:db:06:ef:5b:15:78:f3:cf:1b:33:72:
64:8c:74:3b:a1:62:e0:31:1d:20:84:53:f0:e4:e5:
57:c6:49:eb:6f:1f:55:15:c4:1c:c1:94:81:69:7a:
36:bc:de:d4:2c:17:88:fb:44:df:3b:b6:98:83:9e:
10:d0:42:ad:eb:24:5c:9c:ff:ba:fa:40:55:26:70:
ef:74:fc:fa:d5:6e:f6:c0:6e:84:b5:2e:a9:55:a6:
d7:0d:b1:2e:9e:58:c7:6e:51:6b:5c:3d:5e:d6:3e:
b4:b7:9e:43:a8:23:29:5f:88:55:1c:95:b7:3e:4b:
bd:6f:d4:28:83:cb:26:a9:32:4a:ac:a4:df:bd:40:
46:72:02:11:ad:76:e8:3a:d1:c3:e4:88:a2:8f:ac:
c7:d5:ce:f2:b9:63:07:09:e9:6f:34:a6:24:16:48:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:7E:7E:3D:ED:8F:E2:09:1B:B2:6A:83:6F:27:05:4A:8A:4A:91
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:95:27:30:6c:67:f8:30:cf:38:59:b5:9f:6f:61:37:ae:3c:
b7:42:0e:b3:85:d8:54:8f:57:f4:10:15:34:43:5b:a3:98:8b:
60:31:33:f4:31:b7:8e:71:7e:4b:54:d3:61:f1:c1:7a:0c:31:
f9:da:32:8f:70:e8:84:60:b3:79:5e:4e:90:02:3a:e7:7a:8c:
d1:d1:fd:34:e9:59:34:27:d4:fc:4d:7e:80:60:c8:e2:92:19:
30:d4:ab:5b:2e:19:b0:9b:8e:65:0e:6c:e1:6d:46:c8:8e:98:
82:a0:4d:82:10:6a:24:c3:bc:20:11:89:90:9d:a2:42:d0:25:
a0:20:74:18:41:03:ed:f6:b6:5a:c8:8e:7a:e9:06:09:0e:83:
27:82:f2:60:d6:31:13:d1:91:8c:1b:3b:93:a8:9e:f4:48:cc:
a3:87:1c:b7:20:7b:f1:0d:a3:fb:de:da:23:68:a3:10:9e:8a:
d9:53:ae:c3:93:f9:a6:ef:58:79:39:fe:ca:9e:8b:3e:00:25:
e9:e3:62:41:9e:de:9a:20:2f:06:e9:0e:c5:06:5e:71:c7:58:
3f:4d:da:91:8a:4f:89:dd:bf:be:72:e6:6a:4e:64:3b:75:d3:
24:7b:b2:27:c5:7c:ba:b9:de:a9:f7:f6:08:7f:b8:73:fd:50:
53:04:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:49 2026 by rpki-client