Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
File: nxYQJZ1PXE_V109vJfcCYGbdyho.mft (raw, json)
Hash identifier: QqtwLvU28LXcChWE6H0OkQQwCeE+K+NSrzqDh2HM+hQ=
Subject key identifier: 72:E3:46:71:A7:30:B6:9A:AD:DA:F3:D2:72:D4:32:BD:22:17:73:C5
Authority key identifier: 9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
Certificate issuer: /CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Certificate serial: 01A105EEB9A1C908BF2751DC3F2FC01FA4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
Manifest number: 8E
Signing time: Sun 04 Oct 2026 08:01:33 +0000
Manifest this update: Sun 04 Oct 2026 08:01:33 +0000
Manifest next update: Mon 05 Oct 2026 08:01:33 +0000
Files and hashes: 1: nxYQJZ1PXE_V109vJfcCYGbdyho.crl (hash: WgiUHxHvoaXg3Jtltqu5riUD2F0DWd3/l/1PFPJZMWY=)
2: oi4mpYSiovaK57ZfZlNO4DWYjA8.roa (hash: HIM928G3nU2O9SydmXSIdQ7slGUh1v0LGnhyHlXPxy4=)
3: pBBBsanOr4leF5bPPtl74nQxq2U.roa (hash: GThK88f+E0fIkwsyGb/Te2dstzqrMhLm3PX4PsqfIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:b9:a1:c9:08:bf:27:51:dc:3f:2f:c0:1f:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Validity
Not Before: Oct 4 08:01:33 2026 GMT
Not After : Oct 5 08:01:33 2026 GMT
Subject: CN=72e34671a730b69aaddaf3d272d432bd221773c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:60:d5:53:ff:65:e0:f7:77:e4:e2:86:20:
26:e3:a5:3d:5c:6b:68:15:2a:30:7a:c3:fb:b6:f0:
0a:6d:ad:09:55:33:4b:41:91:bf:9f:08:2c:11:4b:
6f:0c:2e:89:68:21:09:38:bc:68:b6:c9:1c:35:0a:
b5:98:76:da:9c:67:29:c4:66:e6:e2:e5:76:c7:41:
24:09:2d:27:f8:93:71:3d:75:d1:77:92:d7:db:85:
45:33:ca:0f:91:62:ca:bb:7e:83:39:1d:f3:8f:64:
96:48:3b:8d:9b:c7:08:e5:ab:68:07:ca:c0:02:4c:
8d:ca:55:86:f1:90:82:77:73:16:00:5d:fb:57:30:
63:a1:f2:6c:c7:96:9a:91:6b:26:02:4a:2a:1a:45:
86:9e:c1:4c:5e:0e:3b:c0:30:c3:8e:c4:92:61:fd:
45:a7:f9:ca:1d:4b:bf:7f:da:87:4f:62:42:12:44:
bc:db:c1:b1:61:80:fa:ac:44:64:9f:19:c7:89:a7:
84:16:e1:ef:4b:46:ac:18:52:b7:b1:9d:e4:0f:ea:
24:d5:ff:4e:30:f2:d4:d3:f7:1c:a4:80:eb:42:dc:
02:a2:35:df:b9:32:bf:d1:11:a0:74:28:99:39:91:
0b:2e:85:91:67:8b:e6:7b:3b:32:dc:bf:dc:f4:67:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:46:71:A7:30:B6:9A:AD:DA:F3:D2:72:D4:32:BD:22:17:73:C5
X509v3 Authority Key Identifier:
keyid:9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:97:3a:96:37:83:20:0a:e7:eb:bc:92:62:af:ca:7d:07:9c:
ab:8d:4b:43:c8:5f:e4:d0:59:3a:59:9e:86:78:5a:fb:b0:a7:
ef:27:56:d8:e0:97:dc:e7:46:41:ee:1c:7f:80:da:c2:f7:37:
e9:89:28:2a:23:14:47:4e:6d:e3:be:e3:df:0d:03:24:96:c4:
ea:ee:75:dd:99:64:14:bb:85:1d:a1:65:af:1a:92:9b:3e:ed:
c8:81:5e:12:8b:62:17:51:5b:e4:18:36:2e:89:07:ee:1b:cf:
65:fb:95:f6:53:ae:45:80:72:be:c8:95:9d:b3:cc:d2:5a:ea:
f6:7e:0c:75:19:f2:7a:14:9d:e2:99:44:bc:b2:4f:2c:61:f3:
94:3b:48:d5:5c:7f:6a:52:c9:fb:94:03:33:9b:76:34:78:98:
a0:09:8b:ac:38:5d:d2:89:9c:19:dc:37:f6:2b:0d:9d:f1:d8:
09:35:58:c0:af:dd:5d:77:4c:df:c3:e5:a0:7f:96:08:75:9b:
ac:40:e3:20:4e:30:71:3e:2f:c4:a3:21:6b:3e:04:17:28:d2:
df:d5:5c:ed:59:7e:86:1a:e8:83:22:c2:aa:88:fd:9f:9f:5d:
e8:7f:42:1c:1c:a2:e5:80:c2:70:15:ff:cf:bd:76:ca:45:1b:
cc:11:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:14 2026 by rpki-client