Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: d2En17Qe34tUBKoy6Wcz7vPMxL2XhByU80JQhgnpZb8=
Subject key identifier: 54:6A:97:B3:C7:1B:5C:56:C8:11:2D:8C:BE:7C:B5:D9:7D:7D:17:2E
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 01A17FCFBDFA0C467EEFB0483B5D604E28B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 07BF
Signing time: Wed 28 Oct 2026 00:01:23 +0000
Manifest this update: Wed 28 Oct 2026 00:01:23 +0000
Manifest next update: Thu 29 Oct 2026 00:01:23 +0000
Files and hashes: 1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: 7EgOrnjKXnY2NKtfaoCxmVeJZSgSUzh2iq7131odSas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:bd:fa:0c:46:7e:ef:b0:48:3b:5d:60:4e:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Oct 28 00:01:23 2026 GMT
Not After : Oct 29 00:01:23 2026 GMT
Subject: CN=546a97b3c71b5c56c8112d8cbe7cb5d97d7d172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:40:99:04:99:5b:ef:c3:9b:53:5a:75:f4:
5f:f8:0f:76:4f:ae:e1:26:0f:6d:3d:eb:bb:e8:f6:
90:5b:00:6b:0f:4b:30:f2:fc:e0:83:6e:0b:ad:41:
3c:17:13:92:ab:2b:4a:09:5f:77:18:82:29:55:1f:
db:6b:8f:b9:44:6b:b2:46:aa:71:58:08:8b:c9:62:
5a:8a:dd:32:93:63:84:cc:f9:46:cf:37:2c:03:c2:
3c:4b:16:4a:6f:08:82:76:cb:65:01:bf:20:3f:78:
cc:c2:88:c5:c9:3c:63:4d:27:f4:f1:39:52:30:1f:
24:72:12:82:e2:41:c1:28:8c:f6:90:a8:da:1b:d2:
67:96:31:4f:be:a3:64:4b:1d:90:84:a6:4e:51:6a:
72:d0:39:9f:e9:08:1b:4e:60:6a:c3:dd:e2:1d:81:
d2:f6:69:3f:26:75:35:5e:ca:9c:e7:79:65:61:01:
92:be:a8:f5:82:c4:10:c0:83:38:a4:21:77:d7:b7:
f3:af:1d:f1:f0:a2:33:ce:c7:af:50:03:a7:d3:cf:
bc:b3:ef:1f:06:56:63:af:61:b2:b4:36:6c:92:d2:
62:af:e3:15:1d:01:b7:6d:25:72:31:eb:ce:38:e0:
b6:78:bc:26:ae:65:30:63:5a:74:ff:69:14:bf:3b:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6A:97:B3:C7:1B:5C:56:C8:11:2D:8C:BE:7C:B5:D9:7D:7D:17:2E
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b2:12:4d:bb:98:ca:c8:07:2b:3c:3a:75:f1:65:bc:19:84:
f5:7b:48:95:aa:9e:d9:51:2c:31:b7:48:fc:7b:38:4a:5c:fe:
d9:ef:4e:af:aa:cb:bb:85:2f:14:cc:4a:02:ee:9f:b6:56:67:
84:0f:ec:12:84:0d:19:a9:b7:5a:de:bc:ef:f4:e2:eb:dd:24:
8b:a0:0a:5c:f5:a2:96:95:6d:1d:55:b6:9d:a2:9e:79:d9:cb:
72:d6:0b:f5:c7:f2:e7:e5:25:a4:39:29:f8:e6:46:23:80:da:
1e:0a:ef:d4:8a:0b:99:c4:a7:e0:10:f5:3c:0d:d3:eb:69:2a:
6e:2a:20:af:f5:51:88:a8:ae:55:5e:eb:70:32:20:0b:85:c3:
7b:3a:cd:4b:cd:31:75:9b:e8:aa:db:13:d7:91:9e:b9:c1:70:
23:cf:6d:55:b7:67:ca:94:05:44:4e:8b:97:17:32:cf:c7:ed:
71:e0:9e:1d:5f:c1:b6:97:57:a5:01:9b:c8:45:d1:03:fb:ad:
1c:3b:13:ff:3a:b3:02:c1:12:c2:2f:c8:fd:34:f9:bc:96:8e:
ef:36:c0:c0:a5:68:d1:42:05:a1:fe:d4:90:ee:8c:e4:e8:8c:
cd:01:9e:45:20:9b:92:96:5d:2a:30:5a:25:9b:6a:81:d8:99:
51:d1:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:06 2026 by rpki-client