Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: es5A20QKcRc0KQcQjmaO1yiWg4C1wNQTmnPVo6S93Vc=
Subject key identifier: DC:B9:6F:3B:5D:07:DE:B0:B5:76:C2:93:D3:99:B6:F5:37:06:82:64
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 01A18150571DCD41C413BCD860ACBD65A41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0879
Signing time: Wed 28 Oct 2026 07:01:28 +0000
Manifest this update: Wed 28 Oct 2026 07:01:28 +0000
Manifest next update: Thu 29 Oct 2026 07:01:28 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: jwoAOqVq3q5LwMVFo0HezT5sx0TmR1G2ZDBmmLCi2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:57:1d:cd:41:c4:13:bc:d8:60:ac:bd:65:a4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Oct 28 07:01:28 2026 GMT
Not After : Oct 29 07:01:28 2026 GMT
Subject: CN=dcb96f3b5d07deb0b576c293d399b6f537068264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:b3:f3:e5:d5:a0:e7:95:51:b4:de:c5:11:
1d:e3:6c:22:74:c3:09:da:a5:70:f5:6b:fb:61:81:
ab:ba:80:e2:1e:28:5e:e4:fb:5f:a4:4d:ee:cb:99:
ce:ef:92:77:da:5b:61:e1:74:6b:bd:11:c9:5d:65:
6b:93:c8:fa:3e:32:51:34:55:3f:ef:d6:53:30:a0:
c1:94:13:10:c0:7d:bb:86:a0:a7:ba:31:1b:5c:29:
56:57:e5:7c:97:b2:97:20:73:ab:ee:fe:47:79:59:
89:7b:be:92:28:1c:93:2c:4a:f7:30:8d:19:b8:94:
7e:93:f2:52:82:48:e4:08:5e:c5:c2:4b:a1:32:cc:
4b:1e:3b:cd:09:47:62:b5:1b:2d:4d:81:ef:c6:71:
3d:74:49:7a:0c:10:2b:4f:22:7a:fe:27:c3:6d:40:
8b:b1:60:86:3c:a8:d2:f0:87:05:84:c2:a4:39:37:
84:db:a8:72:91:d4:4d:49:0e:b3:28:4f:c9:58:32:
4e:4e:2f:b3:44:37:50:6d:f1:11:e2:4d:69:16:fb:
37:cd:8b:c3:45:28:53:bf:87:33:b6:c7:57:35:fa:
45:c6:c2:2d:44:0e:17:78:53:5a:02:b6:19:f9:91:
f8:74:6e:48:ce:e0:fa:f2:83:b5:26:30:f4:53:a8:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:6F:3B:5D:07:DE:B0:B5:76:C2:93:D3:99:B6:F5:37:06:82:64
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:aa:a6:f2:cd:eb:dc:46:a1:8b:79:dd:d1:9a:16:14:5d:
b2:4a:9e:c9:14:eb:76:3e:cb:8b:dd:70:2b:39:8d:13:0d:ae:
ac:7f:4d:ca:73:13:19:ee:35:4f:9f:84:f6:f0:18:51:f1:ba:
08:37:6b:5f:4a:b7:bc:e0:ab:af:8f:be:de:6a:f8:4f:ad:03:
05:d1:50:3f:9e:9d:09:c2:95:9e:cd:e0:9a:50:53:57:0c:2f:
b0:6e:52:62:ec:2c:38:d0:8f:c9:0e:7a:58:ee:31:eb:a5:59:
c4:05:cb:b7:8c:79:c8:e8:7c:66:d5:e7:f3:b6:a8:90:46:81:
92:22:ca:f4:98:16:c1:f9:64:92:f8:e1:a3:eb:64:20:86:aa:
cd:fd:75:1c:30:93:af:fd:fc:3e:39:86:ef:eb:8d:38:74:a0:
a9:9f:dd:3d:b0:57:e5:05:28:5d:aa:fb:34:d0:94:67:da:aa:
20:00:b0:50:8d:18:25:2c:17:cd:f5:02:31:8f:e7:5f:c0:12:
fe:41:cd:34:a3:ff:40:1c:97:5d:14:00:21:16:7c:ab:c1:8b:
fc:e4:3d:bc:ae:61:cf:3f:59:32:87:0c:9a:c6:6a:39:79:44:
f0:d1:0e:e9:26:3e:b6:fa:68:ce:3f:9d:49:00:e2:99:82:53:
09:21:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:51 2026 by rpki-client