Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: YqrKuP0NXWChPxnBEyKOJBWik2iYuBhJEqe6K40sHuI=
Subject key identifier: 5C:51:A0:0F:8A:27:2B:93:18:F4:EE:DD:CD:A6:27:6B:36:77:5A:31
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 01A172B8B173C8C0226A4FFAA3BCED9535D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 116B
Signing time: Sun 25 Oct 2026 11:01:08 +0000
Manifest this update: Sun 25 Oct 2026 11:01:08 +0000
Manifest next update: Mon 26 Oct 2026 11:01:08 +0000
Files and hashes: 1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: /3zLHeR7BIWj15rJK9xibTJC3KtG57a845bKO2505q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:b1:73:c8:c0:22:6a:4f:fa:a3:bc:ed:95:35:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Oct 25 11:01:08 2026 GMT
Not After : Oct 26 11:01:08 2026 GMT
Subject: CN=5c51a00f8a272b9318f4eeddcda6276b36775a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:3a:69:c9:88:e0:45:9c:49:da:63:92:61:
ca:a4:9f:ea:5d:19:3d:e0:5c:7f:c3:79:69:59:f5:
76:9b:9e:58:7d:40:8d:4a:5f:19:c6:f9:7f:ce:ea:
b3:a0:43:44:75:fa:a3:3d:c3:51:56:c6:47:b5:69:
e7:c2:bc:4d:5c:a3:65:d9:fc:05:00:76:c0:f5:e7:
89:c4:7c:67:d2:2e:7b:dc:1d:17:29:ec:80:4b:64:
05:58:04:fd:15:1a:47:18:96:0d:d7:cc:36:64:d7:
15:41:c0:49:6e:3d:0f:83:98:4b:e9:ec:aa:f1:41:
a4:a7:85:50:6b:b8:b3:78:57:0d:58:14:65:fd:06:
5b:b0:83:e9:a8:01:2f:23:ed:d2:bf:bd:70:15:22:
58:e3:45:cc:63:37:ef:b0:43:67:d9:f2:dc:80:ea:
0f:59:a9:2e:3b:08:99:30:3d:b1:4a:06:16:43:35:
9a:46:d6:68:d5:d9:cd:4f:66:e5:38:4f:b3:18:5d:
00:c5:82:02:4f:67:af:8c:f2:9f:64:69:0d:ab:81:
fa:fa:9e:ff:d1:45:7b:0b:d8:19:84:75:e0:49:7f:
64:48:21:e9:44:66:42:dd:27:35:63:ca:f3:26:a5:
6c:2b:cd:5c:93:c8:a8:e2:b2:c7:f0:b0:fa:4d:ec:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:A0:0F:8A:27:2B:93:18:F4:EE:DD:CD:A6:27:6B:36:77:5A:31
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b8:ef:71:8b:26:b3:04:37:06:b6:ab:77:81:f8:75:6b:21:
46:14:31:d2:8d:ac:84:4a:c3:ab:fc:5c:ae:02:0d:8a:e8:b7:
76:75:31:a4:5f:6c:d2:a1:3f:72:d3:60:1e:e2:a0:3b:94:d4:
22:1a:29:de:64:ed:cd:d0:e4:25:82:d7:14:ba:69:31:9f:7a:
09:f7:85:a8:28:00:cd:50:49:3f:88:26:98:53:04:63:12:08:
9f:5b:7d:ee:62:11:8f:c1:75:14:7e:71:18:90:cf:fc:b8:85:
b4:c8:eb:d2:97:58:4b:e2:e6:25:5c:ab:83:8a:e0:89:d8:f3:
b5:1b:42:99:af:b5:ad:97:e6:e5:c4:d0:ab:90:ac:76:47:fa:
e8:d5:71:12:dc:26:ea:1c:f4:31:ea:e5:74:3f:0a:db:38:a6:
fe:0c:4b:ba:94:70:ba:17:12:c7:1d:68:d6:b2:2e:1a:ee:fb:
38:af:f8:1b:0a:39:27:e5:87:a2:35:7a:75:c8:7d:9e:fc:86:
60:32:bc:98:7b:68:ea:71:51:10:f1:ad:1e:96:20:f5:e5:43:
64:dc:bc:0c:cd:92:86:71:ab:56:b1:be:63:1b:17:a1:74:47:
9b:1a:51:3b:9f:26:ba:1b:30:fb:7e:ba:d5:82:c5:b9:79:f2:
18:88:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:55:14 2026 by rpki-client