Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: i+GhJHrL/CdVyn1Mty9j1Rvx/sJ7xsV5EWQj3CXEskU=
Subject key identifier: 56:0E:1B:BE:62:77:AB:52:F6:C4:83:F2:2A:59:C8:08:82:8F:04:99
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01A08CE87822E23DC61DC877CAA928C9E175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0D7C
Signing time: Thu 10 Sep 2026 20:00:40 +0000
Manifest this update: Thu 10 Sep 2026 20:00:40 +0000
Manifest next update: Fri 11 Sep 2026 20:00:40 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: NYcD5awqEzQt1gdbriQA5P5CX7pLc62ttCjUbCrPbOg=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:78:22:e2:3d:c6:1d:c8:77:ca:a9:28:c9:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Sep 10 20:00:40 2026 GMT
Not After : Sep 11 20:00:40 2026 GMT
Subject: CN=560e1bbe6277ab52f6c483f22a59c808828f0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:a5:41:1f:b1:4e:bc:65:b2:f7:7a:5e:07:
a5:47:4a:78:27:58:a0:f2:2d:0b:25:b1:f6:ba:1a:
1b:1e:67:45:e1:c0:d9:5c:85:ff:3d:ca:dc:46:7d:
38:df:38:3f:f3:1a:76:cf:93:34:fc:bc:cf:10:b1:
5a:e3:0d:ac:aa:f1:03:64:6a:3a:9b:42:d7:69:ed:
5f:a7:a2:07:a9:39:25:66:4e:ea:b8:f3:3e:78:8f:
61:01:d1:3b:66:51:de:bc:b4:ab:7e:e3:5f:83:44:
9d:b2:67:72:07:56:55:a7:f4:65:93:18:a5:41:c4:
b1:47:80:d8:d8:91:78:48:ed:ca:74:42:07:cc:26:
5f:05:d9:d0:59:80:5c:31:de:05:1a:ef:17:20:a3:
08:ec:c8:e1:20:34:55:43:15:19:14:2d:2e:99:cc:
e5:a3:fb:a1:ef:86:84:ec:6d:59:10:9e:6a:d1:7b:
d5:fc:a6:1a:24:aa:3e:b6:c1:79:16:d1:8e:40:6e:
d3:ff:52:b7:d4:a6:22:ca:9c:2a:20:6e:54:93:e8:
a5:23:0d:18:2b:ad:86:0f:de:a3:d4:92:3d:af:2d:
3f:63:cf:ef:91:0a:41:78:7d:46:48:90:f2:9d:d5:
d5:e4:12:d1:0f:69:d5:4a:25:cc:9a:2f:3d:1e:0f:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:1B:BE:62:77:AB:52:F6:C4:83:F2:2A:59:C8:08:82:8F:04:99
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:31:d1:7d:19:72:2f:39:5a:15:29:06:0b:b3:92:65:be:26:
47:1b:f6:8b:84:2d:2f:9c:1a:2b:f6:b1:4d:f5:75:bb:17:ab:
39:f3:ab:8f:6b:68:b6:f8:f8:e3:e0:b5:ac:f7:d6:c8:71:dd:
8d:6e:ee:44:bf:04:9a:5f:e8:51:ce:fe:3d:ed:3e:38:ed:0b:
8a:85:9a:0f:0d:0c:76:5e:d1:06:fb:55:b6:2e:4b:34:14:53:
6e:ab:3c:9c:f6:9d:8c:1c:83:73:25:42:51:e0:a4:28:b3:aa:
31:cf:58:c0:b0:a7:b3:5b:96:2c:6f:72:e8:91:ca:e5:ad:d3:
de:9b:cb:59:12:b0:ee:0c:e7:56:ef:77:c7:fc:01:0a:03:b1:
d9:aa:3c:e3:70:ad:19:57:96:58:c2:23:58:5c:f5:e2:88:4a:
41:a0:4e:62:35:10:74:53:b1:01:08:01:fd:ec:db:91:f7:50:
a1:8e:2c:55:01:7c:4f:e0:48:bf:53:a8:c8:03:4f:38:7b:1e:
fd:ea:c2:7d:9f:52:2b:7b:e2:20:ab:90:c5:42:69:11:19:bc:
60:c3:69:42:4d:a7:78:2a:12:15:c7:d0:2b:f2:f1:ca:42:e5:
b5:17:a0:a8:dd:fc:82:13:b1:ac:79:15:a8:9d:47:7d:31:a1:
b7:6a:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:12 2026 by rpki-client