Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: 1xPxlP8vz85R2NzLeaK8OqQy8vnRoNnfaWkrAKo938g=
Subject key identifier: 84:21:BA:3A:D4:B4:0D:5E:B2:DD:08:56:4E:A1:B2:E9:E6:8A:CF:2F
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 01A11A878C985AC2E261CFADE5A562558597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0D45
Signing time: Thu 08 Oct 2026 08:00:53 +0000
Manifest this update: Thu 08 Oct 2026 08:00:53 +0000
Manifest next update: Fri 09 Oct 2026 08:00:53 +0000
Files and hashes: 1: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (hash: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: cXhLhztxXRcehrqXfqOA+SB0WNoEtCBVZe5IObLWL7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:8c:98:5a:c2:e2:61:cf:ad:e5:a5:62:55:85:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Oct 8 08:00:53 2026 GMT
Not After : Oct 9 08:00:53 2026 GMT
Subject: CN=8421ba3ad4b40d5eb2dd08564ea1b2e9e68acf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:47:04:ef:b5:0c:b9:da:19:e7:c9:01:25:
b1:e1:19:12:a5:31:3a:7a:61:95:a9:e4:b9:ed:4e:
6e:2f:a2:16:3c:f8:79:f4:c9:60:f2:51:b5:0a:12:
ac:8f:2e:41:9e:53:59:f8:73:39:25:17:54:7e:d6:
7c:b5:fe:40:43:6f:53:9c:cc:35:ca:7a:de:ee:66:
58:f3:b7:3d:f4:f4:a6:e2:a8:81:5d:51:0d:4a:1b:
ae:4d:ec:78:02:ec:f9:e6:64:63:14:2c:a0:43:3f:
b2:c8:15:64:c6:72:ac:36:52:b1:36:d7:99:46:4e:
e3:7f:19:c4:c3:2f:c7:1d:27:42:28:ba:56:79:aa:
90:9b:b1:62:2f:83:7b:4a:2e:0b:73:eb:94:86:d9:
93:1c:75:84:0e:aa:2b:4b:b0:61:1a:da:3f:90:0b:
13:01:16:24:fa:e0:d9:86:b6:c5:d8:63:35:98:21:
94:69:00:81:1a:98:9a:1a:93:d0:8a:5f:a6:cf:4f:
56:3e:ef:39:56:6d:96:68:f2:f3:4d:78:9b:8e:5a:
5b:96:82:0b:ab:f2:1d:94:f4:e1:27:5b:e7:b6:ae:
5c:a1:4e:72:ed:79:3e:7a:69:77:09:94:31:10:3c:
3a:1e:7f:53:2b:c8:a4:a3:ca:16:4a:ad:2c:25:2d:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:BA:3A:D4:B4:0D:5E:B2:DD:08:56:4E:A1:B2:E9:E6:8A:CF:2F
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:52:e0:5b:8b:75:55:6d:d7:f1:4d:c1:b3:c1:f7:09:88:
ea:da:a8:03:c2:08:32:f3:b8:13:24:5e:77:05:47:1c:2e:30:
db:08:74:7a:02:44:3f:13:3d:c1:2e:d7:a9:66:ff:45:23:87:
f6:83:ff:53:1c:e1:12:8b:27:0a:16:dd:d9:2a:97:1f:fc:d7:
54:b5:c0:03:66:fc:39:20:e7:bf:68:4f:e2:8f:ef:3b:d9:d5:
ee:3e:21:a0:d6:45:b0:37:65:2e:e7:3c:58:d2:d5:35:16:64:
dd:96:cf:cd:21:6b:3e:fd:ab:c2:51:7a:5b:f8:77:86:07:5b:
85:bd:03:2e:5d:d3:49:19:73:fe:4e:6a:44:45:07:e8:c5:e0:
9d:04:0d:64:3a:b9:f7:7b:35:d5:f6:19:74:40:82:ea:26:bb:
26:b8:fc:59:fe:fb:19:5b:04:88:78:c2:bf:12:2e:b4:2b:94:
1f:af:86:af:bf:08:3b:a0:9d:47:a2:4c:31:af:04:ce:17:d4:
09:77:0e:46:b1:ae:6c:9c:d0:a1:8a:85:95:23:f7:06:18:44:
af:87:6e:ff:87:cc:88:11:e1:7f:19:ad:b2:a6:35:29:ad:25:
01:5f:22:94:d3:7c:c9:65:fa:12:a2:50:8e:66:fb:11:c1:04:
38:61:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:24 2026 by rpki-client