Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.mft
File: nxoOJhz29KhtypfxLONsdmYhIqw.mft (raw, json)
Hash identifier: 1ZwwdYB3+9Bnq8C9PUBufd3HEZZGwByqj/YlQ7sO9hI=
Subject key identifier: 22:38:0D:A6:6D:86:D0:B1:88:68:EA:FC:C4:00:4E:CD:B7:6B:71:39
Authority key identifier: 9F:1A:0E:26:1C:F6:F4:A8:6D:CA:97:F1:2C:E3:6C:76:66:21:22:AC
Certificate issuer: /CN=9f1a0e261cf6f4a86dca97f12ce36c76662122ac
Certificate serial: 01A1A309E291B3E2DCADEDD0E415381E1DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.mft
Manifest number: 4E
Signing time: Tue 03 Nov 2026 20:11:36 +0000
Manifest this update: Tue 03 Nov 2026 20:11:36 +0000
Manifest next update: Wed 04 Nov 2026 20:11:36 +0000
Files and hashes: 1: Uqy5I6gNUAaj7vDZBifDuuDE92c.roa (hash: nq/j3wKynpJuyednMGSkYoDC6HwfMHQ1DS8AXytSInQ=)
2: Vkjih5C05UY92yFTp_v40NcGbkA.roa (hash: H1iYfr2VKIfWKsCR9clUwzCDhJAglri38xDMR8ojPmc=)
3: nxoOJhz29KhtypfxLONsdmYhIqw.crl (hash: IrssOaJUO/jkqY8X/99kD3SS+T5RB6kBeq7xboQnZqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 20:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:09:e2:91:b3:e2:dc:ad:ed:d0:e4:15:38:1e:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1a0e261cf6f4a86dca97f12ce36c76662122ac
Validity
Not Before: Nov 3 20:11:36 2026 GMT
Not After : Nov 4 20:11:36 2026 GMT
Subject: CN=22380da66d86d0b18868eafcc4004ecdb76b7139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:c5:7e:cd:fa:21:b7:2c:11:26:a6:4a:df:
eb:4c:de:c3:78:84:ff:45:29:8f:91:40:e9:1c:4c:
98:f7:9f:2b:52:38:91:fa:35:f4:44:6f:56:af:e6:
13:f0:63:fe:8a:f8:ee:84:81:a1:98:b8:e7:54:ad:
7e:ef:97:00:01:7c:74:9c:fd:61:d3:56:bd:13:96:
14:c2:a8:95:76:c1:50:17:d5:d8:65:8c:fd:4e:8e:
52:ca:ec:d4:0f:a2:4f:23:17:0a:cd:40:a2:74:6a:
79:82:c5:cb:ac:27:56:87:e6:37:93:88:96:67:07:
fc:40:fe:4d:45:76:51:49:2b:23:28:4a:72:08:fa:
1a:47:03:4d:26:51:2a:86:96:a7:9b:bb:ec:73:88:
99:c8:8f:14:ec:31:71:2f:b2:04:1b:a3:e9:d9:a9:
63:6e:b6:d9:2d:a4:cc:45:07:8b:47:b2:9d:fe:bc:
18:5f:f5:89:73:c7:31:1f:a4:c4:86:4c:88:d1:05:
ba:a5:53:5a:80:cc:53:37:42:c8:7a:8b:14:68:8f:
e1:8f:4f:13:00:4b:f1:e5:4d:72:98:84:8e:7d:1a:
d3:cf:84:48:0c:2d:f7:67:8f:a1:b9:df:bc:4f:e2:
d5:ab:21:3f:f1:49:b0:9a:8d:95:d7:02:53:cf:47:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:0D:A6:6D:86:D0:B1:88:68:EA:FC:C4:00:4E:CD:B7:6B:71:39
X509v3 Authority Key Identifier:
keyid:9F:1A:0E:26:1C:F6:F4:A8:6D:CA:97:F1:2C:E3:6C:76:66:21:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:fb:44:5f:6a:cd:c4:88:17:f1:f6:a5:fe:56:6d:9e:87:
fb:b4:97:28:b9:50:98:9c:74:98:ae:99:42:f6:61:9f:44:77:
8d:61:c3:24:b8:8b:2c:1e:44:04:75:71:37:22:32:db:64:53:
c4:15:05:a1:57:dd:4e:0f:ae:cf:29:b1:72:80:0e:ff:52:60:
3a:7a:b8:58:66:3c:e5:1f:1d:5c:f2:59:da:ba:84:9a:cb:c6:
2f:01:b5:97:7a:c6:13:a7:51:e2:4c:de:be:18:10:fc:96:c2:
4a:99:07:fc:34:35:48:f3:30:37:ab:1d:4f:4c:ed:f7:10:39:
9b:24:9b:ca:39:f5:cb:15:bb:21:25:23:76:85:25:81:b6:3a:
85:d7:68:6a:7c:39:79:db:9f:19:56:6f:ba:2a:bc:7b:15:88:
89:86:65:1a:d3:47:6a:f5:50:e8:e9:7b:a5:7b:bb:da:d3:91:
23:c2:87:38:fe:b5:8c:c8:d5:28:c7:92:84:a0:52:71:a4:cf:
b4:69:e2:a2:39:53:e1:31:2c:97:02:5a:f5:1b:ce:db:e8:e5:
80:dd:39:49:ee:30:d8:52:8d:6d:44:dc:16:6c:f0:29:d7:89:
3e:94:19:4a:38:34:9e:88:08:06:8a:da:3e:15:95:30:07:3f:
72:0c:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:36:47 2026 by rpki-client