Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
File: nTHCM8vSZtsCYgud65DQjkFpLmc.mft (raw, json)
Hash identifier: ucFBCCdvzRWA8lkB57n2OszpEvXow3GagNktwHmnqvI=
Subject key identifier: FB:B7:44:82:2C:54:52:B4:3E:6A:CC:08:69:A6:59:E7:89:E8:53:C0
Authority key identifier: 9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
Certificate issuer: /CN=9d31c233cbd266db02620b9deb90d08e41692e67
Certificate serial: 01A0B7D26ECB84B6191616744AD204F3602A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
Manifest number: 113F
Signing time: Sat 19 Sep 2026 04:00:16 +0000
Manifest this update: Sat 19 Sep 2026 04:00:16 +0000
Manifest next update: Sun 20 Sep 2026 04:00:16 +0000
Files and hashes: 1: 3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa (hash: RwQ/Qy1kKylc45gWPZOazTOGnIJ82QduJgu3sQQqwXY=)
2: nTHCM8vSZtsCYgud65DQjkFpLmc.crl (hash: ERnqae7X8M1VFNCsZqpUoUdLNrHVprFHZiUiwBTDR+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d2:6e:cb:84:b6:19:16:16:74:4a:d2:04:f3:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d31c233cbd266db02620b9deb90d08e41692e67
Validity
Not Before: Sep 19 04:00:16 2026 GMT
Not After : Sep 20 04:00:16 2026 GMT
Subject: CN=fbb744822c5452b43e6acc0869a659e789e853c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:24:a6:b8:02:27:4f:46:6e:73:42:08:f1:
0d:8c:55:39:7d:9a:bc:32:f6:40:cd:6c:f3:87:ee:
30:b6:81:96:78:b0:0e:4a:23:4d:6b:2b:10:b2:fd:
f0:17:9c:8c:75:0c:57:83:28:ac:f7:68:05:9c:17:
05:8b:d7:38:86:2d:e9:08:ad:21:15:15:b7:cd:c1:
fb:86:0a:1f:86:39:07:6e:4b:73:9c:ef:21:ff:a2:
93:78:20:66:8b:f1:12:de:59:91:81:90:e0:42:6f:
bc:a9:d7:3e:9d:c0:32:8f:5e:a3:25:34:d1:ef:8c:
d3:f1:84:3c:6e:de:6f:f9:6c:ef:c8:58:09:e1:83:
1b:b8:b7:57:a2:87:d8:be:44:c3:81:b1:60:5c:62:
99:a0:f4:19:e7:a4:58:13:3d:db:4a:34:f2:17:6b:
03:36:f6:d9:14:42:c8:9c:13:7f:cc:6b:18:61:e1:
43:4c:ac:da:c4:38:91:b9:d2:d7:ea:4c:c8:15:ec:
01:35:68:38:b5:f3:5f:21:3b:79:42:bd:a9:af:e4:
32:dc:57:01:a0:f1:71:80:bb:1d:e9:9e:16:8a:08:
03:ab:54:18:b0:b8:11:04:c1:78:61:59:ae:1b:38:
c4:ab:ce:d4:77:fa:ac:1b:f4:96:d1:6d:02:82:db:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B7:44:82:2C:54:52:B4:3E:6A:CC:08:69:A6:59:E7:89:E8:53:C0
X509v3 Authority Key Identifier:
keyid:9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2d:a2:62:79:93:78:6f:a7:8a:1d:df:07:04:9a:24:bf:83:
0a:67:84:f6:a9:23:9d:8c:e6:8a:f2:cd:0f:b1:5a:34:32:8e:
2c:e7:6f:21:dd:a9:77:17:9f:8a:b2:69:e6:c8:d1:74:92:70:
40:31:70:0b:94:11:fe:c5:28:93:bd:a1:e7:fb:85:35:b3:35:
90:62:a8:00:8c:c0:0f:42:48:7b:33:f0:11:f0:a4:64:45:01:
25:8e:b2:75:be:b9:8a:ca:1a:57:09:d4:b9:3e:62:fd:ae:ed:
58:f7:7a:ff:fd:64:e9:b9:c5:7c:22:92:d4:11:a0:a1:ff:9a:
2a:a3:c3:0d:a4:2f:e9:c7:79:c2:77:67:38:12:79:6a:01:39:
3f:34:4d:cf:d2:a3:28:15:56:0f:c1:a2:6c:aa:d9:fa:37:f3:
87:87:62:d0:11:7a:08:03:3e:f7:d4:88:87:e3:03:5c:84:61:
1f:29:b6:c2:5f:d8:bd:5f:07:c6:6c:0c:27:05:f2:5e:02:db:
11:e8:8e:7e:16:c4:13:91:f9:f8:71:6a:e9:06:9a:72:1a:83:
08:69:01:b6:3a:ae:7d:b0:6e:a4:50:54:3b:d6:b6:58:79:61:
24:18:fc:60:fa:71:3e:da:7c:74:03:dc:cd:79:16:4c:3f:91:
53:ca:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:04:20 2026 by rpki-client