Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: XtKNyx04+d5eb+KJo+TClGlSpk2V7EQv09JKWR2drZQ=
Subject key identifier: 14:B8:B3:30:9C:4C:B9:1E:F2:E4:B0:D6:A0:2C:63:CB:2A:B3:FA:7F
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 01A08B67E69752F5760A9DD5E13FA6C2CCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 066B
Signing time: Thu 10 Sep 2026 13:00:37 +0000
Manifest this update: Thu 10 Sep 2026 13:00:37 +0000
Manifest next update: Fri 11 Sep 2026 13:00:37 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: I8Rj7eZyGOEaqRJLyux6BhXGuqoGBvYHLwmUMBp6LYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:e6:97:52:f5:76:0a:9d:d5:e1:3f:a6:c2:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Sep 10 13:00:37 2026 GMT
Not After : Sep 11 13:00:37 2026 GMT
Subject: CN=14b8b3309c4cb91ef2e4b0d6a02c63cb2ab3fa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:68:b0:bb:9b:97:c5:ad:82:f3:26:15:9e:
d8:83:24:df:d0:3b:49:f7:d6:ba:c8:18:44:af:c1:
e6:b0:d0:dc:9e:df:45:31:dc:71:41:6c:31:32:a2:
7b:8b:71:b7:7f:67:ef:54:e8:35:7b:d4:c9:9f:14:
4e:0d:5c:f6:ae:4e:63:12:08:d7:16:75:aa:1c:30:
23:8e:98:b9:ef:43:27:f6:4d:51:eb:b9:9c:94:c9:
9a:8f:f7:43:4c:5a:c5:85:9f:d8:ef:4c:4b:cb:56:
da:04:c5:3d:25:e9:29:0b:e4:d0:f0:c8:f2:59:9d:
43:d9:78:2f:fa:2a:28:94:0d:d7:72:93:6c:00:b9:
cc:6e:68:81:e7:d2:39:d2:01:64:9f:d4:15:2c:b7:
cc:77:34:3c:02:9c:50:fe:50:44:d8:70:6c:23:06:
25:d2:67:2b:37:51:88:4d:f8:d5:46:5f:02:8c:6a:
8d:d6:5c:2e:18:da:c7:d8:21:79:34:54:e5:fd:59:
98:37:cb:ca:55:5c:b0:60:1b:a9:68:23:a8:b1:a1:
f6:66:f4:ef:11:ef:19:d3:2b:b8:61:82:19:b5:1a:
58:02:86:63:0b:ac:97:18:04:9d:70:25:3b:6a:41:
86:89:40:ac:95:91:63:35:7b:48:33:88:9a:b4:8f:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:B3:30:9C:4C:B9:1E:F2:E4:B0:D6:A0:2C:63:CB:2A:B3:FA:7F
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:cb:7a:69:ee:45:55:e3:42:c8:d4:91:08:f8:99:ee:ea:
62:5a:e3:10:7c:fd:c7:13:22:56:1d:71:24:e1:23:b3:64:0a:
1c:c7:8b:39:82:6a:7a:82:de:e5:bd:55:20:65:3b:d4:e5:9d:
8e:21:c7:fe:c8:ec:a8:d3:b1:34:db:a2:05:07:c6:f9:31:e7:
fc:19:a5:44:c5:f0:28:d9:06:61:1a:89:90:da:97:9c:fe:50:
1c:be:63:8c:e0:f2:89:63:5b:e8:d9:0a:8b:1a:07:34:7e:d4:
ea:ac:20:91:0f:4f:12:96:f3:78:49:3f:bb:13:15:89:60:ae:
b7:22:4e:1b:3d:ed:75:c7:b0:ad:a1:42:80:3c:1f:bb:f9:90:
f4:14:5f:24:84:65:5e:75:44:7c:d5:48:bd:fc:6a:06:9a:4f:
bc:00:4f:13:a5:75:99:be:86:b8:4a:0c:71:62:df:09:ff:2d:
16:7c:70:18:13:3d:be:13:87:af:39:68:bd:fb:3b:13:6a:4b:
cb:a4:8a:7c:5c:28:bf:fa:a9:30:23:96:c3:8a:2a:ca:ac:14:
4a:6b:a1:31:79:b0:79:81:dc:e9:23:a0:1f:ab:37:b5:93:ee:
4e:12:62:bf:0a:d2:0d:f2:b6:46:49:36:68:d7:01:90:a9:80:
29:79:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:04 2026 by rpki-client