Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: oHUnIiORNGhX2rAc1rN0ifOnYjlFbYrk1fTXAo1hxY0=
Subject key identifier: 69:AB:AD:EF:BC:F3:88:91:DB:12:67:6E:8D:C5:29:E7:AD:39:24:E7
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01A1280CAC9E576DF94330BB0F39FE484E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 11CB
Signing time: Sat 10 Oct 2026 23:01:21 +0000
Manifest this update: Sat 10 Oct 2026 23:01:21 +0000
Manifest next update: Sun 11 Oct 2026 23:01:21 +0000
Files and hashes: 1: L1KLoii7mllBm2dQe2-Gj8PsyDI.roa (hash: zs3GHCL4mut8DK7aF4W8FvASTk6ZHfaiz6+KBdL52cY=)
2: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
3: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: xN3/iREsw4WGt2+Fl9r7MxjZTbfAW2CcfiTEM1BP7Q8=)
4: TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (hash: AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:ac:9e:57:6d:f9:43:30:bb:0f:39:fe:48:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 10 23:01:21 2026 GMT
Not After : Oct 11 23:01:21 2026 GMT
Subject: CN=69abadefbcf38891db12676e8dc529e7ad3924e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:ab:e0:89:cd:1b:40:c3:4d:a5:9f:27:1d:
fb:f0:ab:c4:b4:a6:5d:fc:c3:64:33:93:ff:c9:92:
bc:24:9e:3a:46:2f:63:d2:2e:b7:18:50:f6:e6:61:
df:bf:73:a3:49:73:59:ac:3a:65:2d:14:8c:c3:ba:
fd:ea:94:af:b4:df:82:35:a1:00:bb:b5:6e:4e:5a:
e2:a2:70:f5:c2:5a:8a:02:a8:e8:21:cc:cc:66:2b:
c3:7d:ba:4e:c8:b7:f2:7e:44:5b:a8:54:f9:50:8b:
03:27:e2:82:3b:5c:7c:e4:11:c7:2a:90:f5:87:3d:
c9:ca:2d:c5:46:11:92:e1:31:d0:46:be:3b:31:46:
a3:b3:aa:23:8a:ae:a9:5e:ba:ca:ad:7f:c8:64:54:
3d:fd:be:aa:9b:60:f7:58:71:00:d9:fe:10:c7:9a:
7c:cd:da:0d:2d:84:9c:9d:e6:ec:7a:3d:ac:c3:10:
f6:fe:2a:4d:21:8f:6b:0b:6c:88:91:81:de:20:86:
2a:31:0b:8f:fb:32:ba:8a:c1:d5:48:3c:7b:d0:e3:
bc:27:65:b8:1e:db:1b:4a:db:80:0d:b1:eb:6b:7b:
26:45:90:1d:44:4e:22:ac:89:41:ba:22:9a:94:f9:
4f:25:32:9d:16:d1:be:b4:21:40:c0:8b:73:bb:82:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AB:AD:EF:BC:F3:88:91:DB:12:67:6E:8D:C5:29:E7:AD:39:24:E7
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:9f:fb:13:03:3c:36:9e:fc:bf:c6:94:0b:fc:f9:8a:da:
16:6f:d0:a3:1a:0f:ef:f1:e1:6a:07:cd:89:e5:12:77:c2:43:
dc:33:2f:6a:c2:cc:fd:3c:d5:0d:e9:9e:4d:b7:56:92:bf:1d:
fe:4a:7e:d0:93:92:ab:48:7f:f0:02:20:5a:c5:a2:70:08:c7:
ba:92:a6:59:05:50:54:5c:56:0d:4c:83:8d:91:4b:d7:e0:e4:
90:eb:2f:a3:88:db:7a:e7:00:7b:a2:fb:77:34:45:14:18:99:
6e:97:5c:ea:44:74:23:62:ee:99:67:91:b9:9c:b0:a3:ce:f8:
1b:14:e7:f2:89:4f:8b:11:14:55:49:26:bf:9a:22:97:bf:b7:
60:d2:29:d0:d0:3f:04:e5:d2:b2:88:28:c2:f4:e4:0a:7c:47:
f2:23:6f:16:9a:35:28:dc:e7:fe:1f:12:79:b9:5e:d0:24:61:
c0:ef:00:08:9c:5b:44:02:63:1d:b6:ba:ae:1b:0c:f9:65:08:
0a:50:a3:fb:40:d3:c9:ad:57:2f:d6:42:5d:a5:47:97:31:da:
ad:ba:c6:05:6e:de:62:b2:5b:36:ff:e7:02:aa:a4:fe:27:85:
60:f4:19:a5:70:d8:59:d7:6f:4d:19:aa:df:96:3c:5e:dd:5c:
d9:92:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:14:59 2026 by rpki-client