Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: eGodZniU4pcY5vVsBQXH2q+030/iCCT+gp1WJgrRzSw=
Subject key identifier: BA:A4:6C:6A:21:AD:EE:15:9A:C2:B9:AF:E9:B6:4E:CD:21:4C:38:99
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 01A08C0CBBFCD82B7F7F0223C5AC4E9A6233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 07FA
Signing time: Thu 10 Sep 2026 16:00:39 +0000
Manifest this update: Thu 10 Sep 2026 16:00:39 +0000
Manifest next update: Fri 11 Sep 2026 16:00:39 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: +kYBB9Se6nvMmA1TTF9Q6vYLZy81s5WX50TH7slrG1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:bb:fc:d8:2b:7f:7f:02:23:c5:ac:4e:9a:62:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Sep 10 16:00:39 2026 GMT
Not After : Sep 11 16:00:39 2026 GMT
Subject: CN=baa46c6a21adee159ac2b9afe9b64ecd214c3899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:85:af:85:1f:59:1a:e1:ac:c6:21:b5:10:
91:48:a3:92:9a:b5:24:95:83:ef:35:f2:ba:7c:3f:
b3:ea:45:be:1d:22:6a:61:71:0b:84:53:7b:82:4b:
40:f1:56:ed:f9:eb:e4:8e:fc:e3:77:34:e2:ec:5c:
66:ce:c0:78:25:98:38:7d:f3:da:1a:d5:5d:4e:85:
e9:52:6d:dd:7a:9c:ff:b9:40:83:74:a8:32:ae:04:
5a:3a:b8:45:fc:a2:30:13:53:5f:df:8a:6c:81:fd:
86:cb:6d:7c:d0:df:48:b0:ab:ff:bb:39:95:fd:f9:
42:3b:f6:36:39:5b:a0:7c:fe:22:55:60:ea:f3:97:
5e:b5:b6:09:98:20:dd:6f:aa:82:a7:fe:94:bf:f6:
58:0a:2b:56:4c:57:74:95:14:bf:02:54:2a:84:c3:
b9:9e:26:fa:8d:cf:0b:13:37:eb:ec:67:3c:69:5a:
5b:0c:a0:6e:9c:22:29:e3:ac:aa:99:dc:bc:c0:fe:
25:bc:5c:eb:83:05:af:8b:6c:da:99:38:39:8a:21:
de:bc:f7:31:e7:1c:5a:fd:d6:eb:42:fd:f6:3d:c3:
6b:e0:93:31:4f:f3:30:0a:4c:48:5d:aa:f8:b2:85:
a7:31:bf:1b:34:db:75:01:21:06:05:76:36:df:55:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:6C:6A:21:AD:EE:15:9A:C2:B9:AF:E9:B6:4E:CD:21:4C:38:99
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:87:9f:4d:de:a3:e4:a1:d6:7c:67:b2:95:81:ba:bb:06:
74:7d:41:05:5b:4d:25:10:92:8d:9e:a6:03:b8:54:49:ba:e2:
0e:2c:03:a5:9c:84:0b:52:cc:13:66:d4:2e:f9:07:b7:b0:b0:
3f:6e:d2:6f:7d:c4:06:18:2a:5d:3b:66:22:81:17:b1:57:b0:
fc:00:c2:9c:6b:5b:87:9a:4f:ed:c3:c8:80:63:91:e7:e4:b4:
1b:eb:eb:ee:78:6c:12:ac:ec:25:78:09:f0:ce:9a:d5:92:ec:
4e:b8:b3:17:d0:73:ca:91:c8:9b:e9:e5:d0:f8:88:3c:91:c3:
d3:49:9d:fd:09:63:ba:f0:10:11:9c:fa:9b:b7:38:bb:98:3e:
df:27:8c:a8:8a:c8:45:16:47:7f:a5:14:d1:36:e4:e7:ce:0d:
86:5e:48:97:53:fd:9d:bf:c2:1a:2f:09:80:2f:5c:d1:c4:c6:
87:49:76:51:06:74:ff:f0:dc:a6:3d:b7:2a:47:4c:af:03:3c:
68:00:4f:8b:d1:47:a4:db:fa:96:a7:9e:e1:9c:42:80:98:fa:
e6:54:1b:7c:2a:30:df:d3:72:e0:eb:c3:3f:5e:5d:80:6e:e9:
da:18:27:a2:ca:eb:d5:b1:6c:db:95:b2:14:f7:f3:5e:0a:2a:
93:66:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:34 2026 by rpki-client