Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: Na75rXaReNWW11vvP1Be1Z4UzWmS2/XEtBdKM3S582M=
Subject key identifier: 08:13:98:F3:97:1D:D0:4A:0F:CB:8B:5A:21:01:93:4C:81:8A:9B:EF
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 01A17B848642A3A9556DB2236EEEA6EBBE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0876
Signing time: Tue 27 Oct 2026 04:00:44 +0000
Manifest this update: Tue 27 Oct 2026 04:00:44 +0000
Manifest next update: Wed 28 Oct 2026 04:00:44 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: K52cqQISD0y5RZGzxe3N4JRmOyDTHUZUPwbuv2m/cxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:86:42:a3:a9:55:6d:b2:23:6e:ee:a6:eb:be:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Oct 27 04:00:44 2026 GMT
Not After : Oct 28 04:00:44 2026 GMT
Subject: CN=081398f3971dd04a0fcb8b5a2101934c818a9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:82:b8:ea:10:56:45:f2:6b:74:27:99:6d:
73:54:2a:78:2e:3a:db:b7:65:9d:b0:b3:c5:fa:e7:
4b:06:4c:f0:14:0a:a7:9e:7c:70:5b:1c:07:42:e3:
4d:48:2f:1e:c6:56:31:06:7f:ba:f5:e2:a8:19:cc:
4a:0a:b3:46:c1:5a:41:d8:55:20:b5:7d:bd:c8:ce:
55:7e:0b:c8:65:39:f9:ca:b4:d7:d6:35:30:af:82:
57:74:99:41:29:a6:fe:5d:45:b5:f7:e7:9c:59:c6:
39:fc:a3:b2:5d:ad:60:5f:d7:47:98:b0:55:63:5e:
e4:3e:93:aa:7b:eb:e5:51:0d:4b:5a:e7:9f:52:e8:
be:c7:0a:89:8f:56:0a:1c:90:7d:01:dd:9b:a1:63:
a2:fa:c5:2a:8a:54:57:5a:3c:35:6c:39:f6:40:e4:
21:a4:1d:dc:9e:35:ca:9c:46:89:99:76:98:1e:7c:
8b:4a:f5:8b:2f:48:d9:87:32:94:65:5a:7b:f7:c8:
4b:4f:dc:c5:fd:69:f4:e2:f0:8b:74:a0:83:97:2d:
e7:c4:9b:10:95:a6:5b:bd:1a:48:e0:b2:78:42:47:
6f:7d:f9:ff:b3:eb:cb:05:02:84:b7:14:8f:02:42:
7f:3e:90:d5:b1:cf:68:35:39:e4:fc:f1:37:ed:6c:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:98:F3:97:1D:D0:4A:0F:CB:8B:5A:21:01:93:4C:81:8A:9B:EF
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:3f:c9:ab:86:34:b7:ba:c4:66:43:07:38:e8:c9:2b:f7:
b9:b4:1f:4c:1a:3f:1c:27:f8:44:93:36:53:f6:71:d7:4c:8d:
ee:3c:2a:25:9c:ac:18:fb:0b:2f:a3:ab:63:c3:08:ad:ca:91:
fe:1c:f0:6e:6f:58:03:32:35:90:b6:e7:eb:bc:a0:da:28:0d:
04:ad:98:f8:f1:d0:be:2f:25:cd:94:85:8e:13:10:78:f9:99:
51:02:58:61:6b:3f:83:e1:b2:d4:9a:03:e3:26:c5:a1:a6:32:
56:12:49:8a:cf:55:17:e7:0c:9e:cb:ff:0c:33:2d:41:fa:ee:
59:d4:6f:90:c1:e7:55:83:fa:df:0b:80:9c:50:95:d5:57:1d:
db:47:82:df:75:33:55:be:e9:2c:12:8a:a2:10:97:dc:ab:77:
78:45:2b:e7:17:e8:9c:92:a5:71:2b:20:c0:82:6f:6b:b1:43:
48:d3:08:bc:71:75:9c:8d:82:6d:72:30:2b:6d:b0:b9:57:e5:
e5:b2:85:92:f4:fb:c6:c3:40:08:5f:c2:c1:f9:15:47:24:00:
6e:5f:ae:be:b9:d0:62:2d:f6:0b:f8:49:c2:14:ce:3a:a7:3b:
3b:7e:30:a6:c4:4a:5a:33:ab:b6:51:bd:f5:a2:87:a0:55:a6:
1c:9d:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:58:39 2026 by rpki-client