Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: gKd9EjP0prkho0R//Dtn9e9Ui/eU2HWxNc8s+56sRmg=
Subject key identifier: 71:BF:A4:E3:97:96:2A:1A:E9:6A:25:C1:35:B0:F7:E7:83:A7:76:7E
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 01A06E70866FB79C9B2E13636DFAA3D11583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 04F0
Signing time: Fri 04 Sep 2026 22:01:03 +0000
Manifest this update: Fri 04 Sep 2026 22:01:03 +0000
Manifest next update: Sat 05 Sep 2026 22:01:03 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: hHWGSabJShZJXw2SN3CmSeTFdyo3dwuNxqEKxtdSnPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:86:6f:b7:9c:9b:2e:13:63:6d:fa:a3:d1:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Sep 4 22:01:03 2026 GMT
Not After : Sep 5 22:01:03 2026 GMT
Subject: CN=71bfa4e397962a1ae96a25c135b0f7e783a7767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:4f:ab:3c:3b:20:35:07:19:4a:39:ba:33:
27:00:2e:a2:f5:41:45:bb:f5:e7:51:2a:c4:dd:46:
7e:1c:ef:ba:44:6f:c7:ca:8b:d8:ae:f3:69:1c:53:
43:6b:9b:fb:3b:9a:0d:12:d0:6e:60:3a:c4:06:e2:
2f:15:55:85:91:a3:c3:64:93:ea:a9:b7:ed:92:0b:
b9:7f:1f:4d:17:9a:ff:f0:dd:36:fc:71:99:e9:95:
b9:71:b3:cf:7b:e0:0f:84:7f:71:59:a5:ba:a4:92:
5a:7f:d1:10:4e:b0:02:31:95:f6:22:c1:28:95:00:
bd:fd:c6:0f:ce:ae:2f:d5:dd:31:b6:e9:de:c1:47:
2d:60:3e:74:72:bc:e1:94:4f:7f:95:4f:0a:97:d7:
f8:90:e8:98:67:73:f0:21:00:0c:6c:6f:d2:03:9f:
5d:32:56:a9:e2:b3:f4:d5:53:df:bf:e5:9f:d6:b8:
7f:b3:ab:d5:6d:f4:b3:9d:ff:6d:38:04:b7:7d:d0:
22:92:9d:b7:b6:c7:c1:40:a5:ed:9f:46:f4:3c:79:
86:2f:45:d4:b6:f5:d0:74:8d:eb:a8:b0:c3:94:8a:
08:ff:a7:4c:a1:c5:d6:1d:b5:f1:b1:a2:57:3d:fc:
a1:1b:9b:a1:0f:35:fe:9d:84:52:64:88:94:0b:58:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:A4:E3:97:96:2A:1A:E9:6A:25:C1:35:B0:F7:E7:83:A7:76:7E
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f4:19:6c:ac:a1:38:44:c4:e7:05:88:79:d4:4f:91:50:a1:
e7:c9:e4:bd:e6:ae:57:ea:3c:3e:aa:77:b2:77:d3:67:cb:8d:
04:db:21:9f:d4:7b:35:81:22:21:9d:c6:7f:34:a2:c7:d0:c3:
fa:ab:7e:8f:15:f3:42:bc:ad:1a:c3:58:2d:95:f6:4e:9d:81:
b0:4e:4a:6c:c6:17:44:1c:b1:23:3e:7f:b8:c6:8b:bb:2f:44:
1f:09:3d:76:66:cc:bf:af:0c:f7:ee:6d:bc:6a:91:a8:a5:1d:
db:97:5d:27:47:d4:f6:a5:5a:ef:85:ec:24:aa:9c:cd:16:3f:
55:0c:8a:ae:1d:10:be:70:b7:79:a2:ab:88:cf:d1:94:7a:d0:
40:c7:58:2d:ef:2d:d5:88:e2:9c:db:15:9f:4f:1a:a7:65:0e:
de:67:28:0c:2a:bc:c0:42:f8:aa:8e:ba:d1:4a:e4:d4:f5:1b:
94:e6:b9:a1:83:d6:d6:54:6d:a9:64:8d:44:50:04:3c:d4:07:
e4:65:8b:e6:3f:b7:10:72:3e:85:17:cb:c0:79:19:f8:bc:f2:
02:45:6d:8c:30:cd:a1:41:e4:56:62:ba:2e:b7:d3:e7:c5:35:
1e:cb:3c:a1:20:e2:23:91:d5:24:ae:e6:92:81:1b:56:03:b6:
00:53:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:51 2026 by rpki-client