Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: GDVZKqyoTTqH02riDUEtH5U5bwK0zGQ3UebBm9jixrk=
Subject key identifier: A6:25:30:48:55:49:61:45:82:E7:62:AB:95:39:89:A0:AE:E8:74:A0
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 01A08BD6263473D047048FFF1C36E6CC2D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 111C
Signing time: Thu 10 Sep 2026 15:01:02 +0000
Manifest this update: Thu 10 Sep 2026 15:01:02 +0000
Manifest next update: Fri 11 Sep 2026 15:01:02 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: Vb+Ka5nOqRx5NJWLpqrqwdJPheQ2iK/M0A+L6slfUaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:26:34:73:d0:47:04:8f:ff:1c:36:e6:cc:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Sep 10 15:01:02 2026 GMT
Not After : Sep 11 15:01:02 2026 GMT
Subject: CN=a62530485549614582e762ab953989a0aee874a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:5e:57:29:3a:3b:e0:79:0b:3f:76:70:ba:
35:8c:8c:05:00:f4:c1:d7:e3:31:65:42:eb:7d:6c:
44:ed:f0:2d:f3:b9:90:ce:53:e8:67:cc:97:e4:20:
d7:3d:9d:04:ff:95:4e:b6:51:a2:80:c1:21:e9:d9:
11:cb:2d:44:a2:92:b4:be:1c:58:c9:d8:3a:9c:ea:
f4:e7:da:83:20:ad:1d:1c:e4:07:53:70:df:e1:01:
37:3c:8a:23:6e:29:b3:21:01:4e:ae:ed:71:48:be:
26:a3:19:9b:01:57:74:71:57:8e:0b:c3:4d:35:28:
82:79:8d:12:2c:ed:84:62:f1:63:f5:50:ef:83:de:
c2:e1:bd:67:91:26:e9:e6:76:ae:86:92:7e:92:02:
2a:9c:80:c2:de:a2:ea:10:95:e8:80:7c:cf:fd:d3:
48:96:1e:a6:92:df:44:6f:6c:6b:6a:c7:a1:9d:72:
00:ee:bc:98:1a:9c:1e:15:e3:74:6e:63:f0:36:8d:
07:2b:7e:37:d3:0f:4d:96:af:43:d1:e0:aa:0d:d7:
fe:fa:d8:99:09:15:93:2a:c6:1b:23:1b:f5:e2:74:
60:53:8f:a9:dc:16:c4:31:93:c6:af:22:4f:76:d6:
62:16:fc:cf:f5:98:be:40:d7:43:8d:be:3d:17:db:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:25:30:48:55:49:61:45:82:E7:62:AB:95:39:89:A0:AE:E8:74:A0
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:63:76:b3:6d:e2:d5:88:55:9e:5f:60:79:97:b9:25:f4:
33:f8:10:52:a6:7b:90:20:6c:44:1b:8b:5e:8c:d0:5f:47:b2:
a6:48:61:56:e3:23:f0:fb:aa:5a:eb:0b:fd:54:b7:56:b5:87:
6b:17:0d:a1:84:c8:5a:8c:14:75:2b:0d:96:43:a7:de:f2:5b:
90:5d:8e:cc:dc:a7:e3:da:82:4b:df:1b:05:59:a7:40:79:06:
8d:be:68:93:3c:b6:fe:33:5c:65:52:6f:d6:90:a2:f6:b7:13:
d2:b7:f3:7d:b6:15:b3:4d:7d:92:8d:c0:80:ca:d4:30:d6:e8:
a7:2f:68:fc:b3:b7:cf:30:cc:45:b8:3d:aa:40:68:78:16:21:
18:5f:2c:6a:f7:cf:92:2f:6e:11:30:92:fc:68:61:bd:e9:14:
d7:ad:9d:51:49:dc:ef:e2:e8:f4:f8:49:15:d3:26:8f:06:38:
f9:d4:c9:ef:75:af:05:d5:14:92:49:94:8a:e5:64:ac:e8:60:
a5:de:04:b6:02:59:fc:31:52:e7:4a:43:25:38:04:50:6f:1d:
c1:d5:fb:d4:7a:d3:3e:a4:16:13:79:a1:79:be:18:cc:b9:45:
2f:e8:28:63:dd:f8:6e:39:17:bd:0f:f9:00:72:73:6a:80:1b:
cc:83:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:59 2026 by rpki-client