Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: 4Oa6I1S+395z4g+UmSxwfIEyeNmjNBnWlM/JlW1Ifhs=
Subject key identifier: 91:02:02:BF:35:CD:DE:8A:D0:DE:A0:DE:BC:57:40:2D:A0:3A:CA:4D
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 01A1ABCCF7D575CE0D778D9491E32046094B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1AEB
Signing time: Thu 05 Nov 2026 13:01:39 +0000
Manifest this update: Thu 05 Nov 2026 13:01:39 +0000
Manifest next update: Fri 06 Nov 2026 13:01:39 +0000
Files and hashes: 1: NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa (hash: 60B8Z6NMx31io1/yt+mCoe3AOI225aq1Qj6yflpDE9M=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: IPQgnmL32L5d0Ta48FC55QDDjb8+jn+gE+IGtvvICPM=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
5: x62fdnQHTG86kc8QeNrs-Fg3oVE.roa (hash: Q5HR/EB53DA3xDXZeryGNxJzH4ahXtlYt7caGd1WQn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:cc:f7:d5:75:ce:0d:77:8d:94:91:e3:20:46:09:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Nov 5 13:01:39 2026 GMT
Not After : Nov 6 13:01:39 2026 GMT
Subject: CN=910202bf35cdde8ad0dea0debc57402da03aca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:b1:93:d6:39:56:a5:2a:cd:11:a2:c4:9a:
8d:eb:36:e9:72:a9:a9:6e:57:78:b9:99:0c:b6:aa:
1c:97:b2:98:d9:a8:8b:94:b4:1c:db:bd:c1:9b:51:
96:e5:4c:e9:b0:d2:bd:ef:08:45:cd:d0:5d:48:d3:
a4:d2:90:ae:b3:20:97:d6:80:50:3d:b2:1f:42:04:
9f:cb:78:d9:8b:72:d2:fa:9a:e6:ca:53:07:50:1b:
99:37:92:88:37:7b:97:cb:cf:3b:dd:f5:91:d1:b4:
36:26:66:63:85:0e:22:29:b8:c2:72:e1:1a:c1:44:
f0:ef:0b:91:5f:de:93:c3:20:1f:09:1d:8b:04:6d:
f6:6f:4a:6e:14:57:6d:54:ce:67:12:df:fb:c3:ac:
ed:3b:0d:fc:58:80:1c:69:d1:ac:79:a9:b9:04:6e:
d0:2f:77:8f:f9:59:16:ab:48:3c:b6:3f:6a:ea:fb:
f3:18:ec:2a:1c:26:c2:8f:c3:45:26:7c:e0:f0:7d:
b6:e3:4b:8c:61:13:6a:60:85:fd:d8:62:aa:4c:d9:
c6:a6:f9:61:23:77:3b:d1:0c:a1:c8:3a:17:c1:6f:
ea:f1:7f:ec:00:62:3f:3c:9f:42:75:66:51:80:1f:
e6:18:5a:6c:1e:bb:e2:42:90:7c:36:2f:a8:70:6c:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:02:BF:35:CD:DE:8A:D0:DE:A0:DE:BC:57:40:2D:A0:3A:CA:4D
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:f7:1f:63:1c:36:a4:4f:5b:e9:a4:24:77:f8:a9:9a:f8:
cf:e8:37:d0:ce:08:f1:88:cf:7e:60:89:24:5e:f5:a6:de:37:
f6:56:d1:a0:bd:27:59:3e:2c:5b:fd:80:5e:0e:09:7f:ac:05:
da:94:21:fc:97:7f:dd:eb:43:44:a2:55:14:00:cd:c8:9e:f4:
00:27:aa:cb:52:5d:08:b3:c1:e4:fe:e0:e0:a2:fc:26:54:16:
78:72:85:3c:e2:19:3f:ac:2e:66:da:f6:76:10:2f:1a:6b:05:
bb:84:50:bc:f3:21:af:72:ad:b6:f8:ee:4b:e6:3c:d6:1a:69:
8b:8c:4a:0b:99:3d:13:4f:6e:93:8b:9e:de:48:68:8a:e2:e8:
4c:16:18:ff:9f:f2:77:9d:4c:ab:23:9d:e9:30:72:18:51:c9:
2e:73:9c:f0:c8:c7:09:c0:2a:ef:e7:54:52:eb:36:d2:70:6e:
c4:12:c9:91:14:41:c2:a7:50:7d:7d:72:97:39:85:78:ae:1f:
ba:9f:f1:b5:8b:36:9b:50:b9:f7:d8:c3:05:0b:d8:28:e7:d1:
63:8c:35:ea:dd:61:78:fb:39:da:d1:9d:8a:8b:27:25:1e:f5:
00:45:57:22:c0:7d:d5:d1:52:c5:48:c4:3f:9e:6f:02:46:9f:
1c:bd:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:03:18 2026 by rpki-client