Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: tbB2NkA+qohYMLCgsJ55sdM4ZLuze5wHk9RdezhGDlE=
Subject key identifier: DF:1E:22:98:66:73:76:05:FB:83:C9:C3:04:23:9B:9C:51:F9:F0:34
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 01A1818730DB41288C81CDE1B8F3E95A0632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 06BD
Signing time: Wed 28 Oct 2026 08:01:23 +0000
Manifest this update: Wed 28 Oct 2026 08:01:23 +0000
Manifest next update: Thu 29 Oct 2026 08:01:23 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: zfYMgHfbyy1J3blsF24CXBQujn4ml1xrsi/6JfXEF9c=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:30:db:41:28:8c:81:cd:e1:b8:f3:e9:5a:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Oct 28 08:01:23 2026 GMT
Not After : Oct 29 08:01:23 2026 GMT
Subject: CN=df1e229866737605fb83c9c304239b9c51f9f034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:40:f6:6d:ca:09:f3:1b:b7:55:ba:bd:b3:
d0:f6:96:bd:fa:46:31:86:8c:e2:71:6f:3b:09:8a:
81:eb:98:ce:ab:9a:43:25:fc:e7:e0:d2:2c:5e:a4:
bf:71:39:24:9d:2e:9b:92:32:6a:1f:57:42:c2:b5:
1f:ee:b7:09:dd:1a:4b:69:be:b2:89:97:5d:4c:0c:
ac:5c:09:dc:d2:db:ee:0b:bd:ae:b2:63:2c:ba:56:
06:9a:e1:e5:02:68:7b:95:21:01:5c:55:fe:1c:21:
51:fb:83:85:b3:40:2e:70:e3:e2:cb:8a:4b:59:6e:
d3:af:53:78:11:53:7d:41:9e:91:4b:58:e4:b5:a1:
88:ce:cc:07:16:32:87:33:64:0a:07:5c:4e:32:c1:
87:1a:ab:ea:dd:3e:b8:53:fa:bd:30:74:27:e2:9e:
62:8f:62:3b:84:1e:76:0d:71:4c:c9:b9:ca:c8:a8:
a1:83:b5:e7:9e:ed:74:9b:b3:01:4a:72:a8:15:a4:
73:4f:42:17:cf:1a:76:ca:9c:66:c9:b8:12:14:58:
99:f5:cd:5d:27:d0:65:83:56:6f:b6:9c:d6:9e:81:
d5:0b:80:5a:f4:ff:b7:7b:45:d9:26:e4:ff:8e:14:
d4:77:b2:1a:1c:73:4a:49:2b:5d:16:46:05:d6:a9:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:22:98:66:73:76:05:FB:83:C9:C3:04:23:9B:9C:51:F9:F0:34
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:30:46:60:74:eb:3d:23:f0:99:8c:25:d1:f6:2e:41:87:be:
bd:59:7a:98:56:a4:c6:43:7c:13:21:13:d8:0e:38:48:bf:0a:
65:e0:65:ca:39:e7:f7:59:62:b4:8c:db:cf:cd:08:1e:36:86:
c8:93:2e:56:4e:92:14:a5:79:97:1d:f7:11:1b:54:32:66:0a:
89:7f:8f:5d:1f:49:09:04:de:2b:43:52:fb:40:cd:1b:f6:3c:
56:22:f0:25:1f:c8:b8:cc:21:b1:bf:43:45:a2:a9:c6:73:ab:
3f:8f:37:fc:f9:2d:91:1f:87:67:da:61:6e:6b:ec:4d:e7:27:
4c:dc:d1:bf:51:6b:d7:1c:1f:32:f7:88:e8:c0:fb:3d:42:63:
fc:22:bc:1b:14:b1:3a:91:b5:b9:87:72:4a:39:ff:26:27:89:
bb:a8:1e:6c:5e:c7:a5:10:9a:dd:eb:06:f5:31:75:de:98:05:
6a:8b:e4:89:26:16:bf:5d:d6:c1:c5:78:1e:07:33:58:3a:5a:
72:18:de:eb:7e:d2:85:c3:88:e6:d0:31:dc:1a:da:86:72:f4:
9d:aa:0c:5e:8a:10:e8:fa:62:21:f4:2e:68:dd:3b:38:ae:bd:
ee:6c:12:d7:99:5c:3b:2c:50:4d:e5:7c:91:15:9f:87:a7:25:
da:f5:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:45:02 2026 by rpki-client