Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: m8JFtvb0jHz2i7bzL/NHgUd3BsKqiQm7J9f7lD1CUiU=
Subject key identifier: A8:33:7F:7C:B5:3D:47:D1:BD:5D:2E:74:83:6E:7B:04:C8:4B:2D:C4
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 01A17325F56B173DC9C22712874BECC10CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 0577
Signing time: Sun 25 Oct 2026 13:00:29 +0000
Manifest this update: Sun 25 Oct 2026 13:00:29 +0000
Manifest next update: Mon 26 Oct 2026 13:00:29 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: sdvUvnO2XwBC9eTcEMbN4jqPhbqY7LaLtbqSgY7LYec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:25:f5:6b:17:3d:c9:c2:27:12:87:4b:ec:c1:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Oct 25 13:00:29 2026 GMT
Not After : Oct 26 13:00:29 2026 GMT
Subject: CN=a8337f7cb53d47d1bd5d2e74836e7b04c84b2dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:0a:b7:48:50:bc:54:66:57:41:57:eb:5a:
f6:83:ed:6c:59:f0:14:fe:ea:30:17:7f:c7:7b:90:
cb:ee:05:10:1e:df:99:fa:18:7d:4a:9b:d3:99:55:
60:3b:cd:04:e8:42:a2:50:4f:7a:ef:3b:e7:cd:cb:
37:a3:2b:8d:9c:88:b7:23:0d:b0:59:38:c0:26:78:
b4:d9:bf:a7:d5:53:8d:2b:43:39:aa:b6:35:d1:63:
bf:ed:7a:75:77:7e:ba:0d:e3:f2:9e:b0:81:9e:9a:
a8:29:8d:55:5b:67:56:a9:b9:c8:32:8c:05:30:e3:
54:ff:e2:49:6d:89:e6:54:81:09:59:36:3b:6a:69:
f6:fe:b7:84:4a:55:e1:6d:1f:f6:a4:08:44:5c:47:
ab:18:95:00:c1:ea:e1:87:29:63:ff:f5:16:f2:0b:
ed:65:05:4e:bc:1b:4e:3b:48:88:85:28:da:c8:3d:
41:ad:0d:3c:c2:0b:4e:32:5e:a5:c4:2d:09:e3:ef:
a9:a0:7b:94:78:2d:ec:14:4b:f3:a6:0e:c8:27:ee:
9a:34:25:08:14:2e:88:69:45:95:e4:9e:77:ad:6e:
10:5a:78:9e:cb:bc:ed:0e:f4:99:ae:a3:c7:ba:1c:
84:ca:1c:54:b8:f1:2a:5a:e5:37:59:39:19:65:c7:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:7F:7C:B5:3D:47:D1:BD:5D:2E:74:83:6E:7B:04:C8:4B:2D:C4
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:c8:fc:2b:fa:56:99:34:85:c5:0d:82:97:7d:ab:fd:c8:
7c:c8:11:85:8b:e6:d2:93:ac:58:d7:a4:92:e1:a8:27:d8:61:
25:d0:b3:5b:e7:aa:24:9b:d6:77:35:4c:fc:c8:f0:eb:55:95:
6e:a1:4b:72:b8:19:c7:a4:f2:de:09:3b:5b:5f:01:1f:8d:41:
9e:f4:6e:cd:6e:f8:af:5f:cf:5a:b3:f9:72:69:cf:21:bb:81:
d5:69:d4:99:51:7f:5c:51:9f:a7:dd:1f:ae:3f:f0:fa:99:1f:
5e:76:04:70:7a:f4:2c:d1:43:d9:48:eb:4e:22:b5:64:aa:5b:
8a:44:a6:6c:92:2b:97:e8:3d:2c:92:06:18:7a:77:de:f9:71:
f4:db:21:bb:b3:9a:2b:39:05:06:2b:b0:bc:eb:81:c1:70:48:
df:a0:84:4c:96:a2:f5:72:d3:b8:63:ab:7c:ae:4c:13:4c:b1:
29:05:31:f2:64:9e:ff:44:16:ce:e1:6c:af:58:cf:70:6e:70:
96:ab:85:42:36:71:b2:52:84:8d:aa:19:2d:35:b7:bb:ec:ab:
48:ce:b4:6e:e3:f3:10:db:cb:76:e9:bc:b4:ca:c7:10:e8:0f:
49:47:cc:24:cd:48:dd:3e:05:8a:14:74:34:67:63:b6:4b:c9:
fe:5c:7b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:43 2026 by rpki-client