Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: Kz5XiixxbBpvbArqdtYxLTxqp0SZDPoUUaaGof+bc74=
Subject key identifier: CD:50:36:FC:E8:3E:5A:76:48:74:DD:D4:0F:EA:CC:37:FE:0B:CD:28
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019F8455E35B13350C0288BE86893CB7FE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0C8F
Signing time: Tue 21 Jul 2026 11:00:48 +0000
Manifest this update: Tue 21 Jul 2026 11:00:48 +0000
Manifest next update: Wed 22 Jul 2026 11:00:48 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: Vv5V9A2n63EUz+dnh3vnRqls1gAvi722SXnTAm38EPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:e3:5b:13:35:0c:02:88:be:86:89:3c:b7:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jul 21 11:00:48 2026 GMT
Not After : Jul 22 11:00:48 2026 GMT
Subject: CN=cd5036fce83e5a764874ddd40feacc37fe0bcd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:8d:b4:a7:cb:ba:66:5b:93:2b:70:b5:35:
9a:9d:35:4e:ba:d6:06:53:05:35:26:dc:11:80:41:
a6:c6:2c:fb:8b:2c:a2:bd:13:94:e7:7d:01:2b:e8:
9d:f3:a4:5a:60:c5:07:c3:71:8a:b9:47:30:d9:52:
4d:01:60:39:1f:11:03:b2:e4:36:9b:7b:f8:45:a0:
78:64:ad:62:37:74:54:e5:54:c4:74:84:0f:37:ea:
a9:d7:47:d0:75:0d:33:b4:56:69:cf:2d:de:db:19:
30:f3:c4:76:bc:6f:8f:c7:1e:4d:6a:55:51:63:04:
79:7b:19:db:0b:21:80:41:9e:8b:9a:0d:8a:97:88:
2e:fd:b2:c6:d0:31:36:62:67:89:51:a6:ea:2d:e1:
ab:e6:b1:09:77:86:63:58:8f:7c:b1:2a:ac:7c:52:
f1:de:c9:51:1b:d6:4a:8e:95:b1:5b:b8:fc:22:d3:
a4:14:2c:da:6e:aa:cf:ff:c0:7b:e4:bf:2a:b2:02:
b7:04:2e:50:71:62:c4:17:07:c2:ef:e3:a8:6d:03:
4e:35:65:6f:0f:c9:32:30:98:c6:f1:76:7f:f8:fa:
5e:25:e1:b7:56:94:86:f5:07:37:30:52:03:b3:ae:
31:48:63:a7:c2:4b:7a:3f:08:9d:84:3c:6e:cd:82:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:36:FC:E8:3E:5A:76:48:74:DD:D4:0F:EA:CC:37:FE:0B:CD:28
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:75:b1:f1:ee:8d:46:b2:5a:25:77:28:4a:11:c8:8d:63:e0:
f0:98:cd:e7:26:99:4a:0f:75:fe:0b:7e:55:3e:91:ed:7f:57:
91:9a:5a:5b:2f:d2:53:fe:b1:2c:a4:15:fa:23:ff:2f:1d:87:
6a:fa:90:00:ad:0c:3f:33:10:88:66:d5:ec:34:8f:fd:47:26:
0d:a3:7e:35:f5:c6:d6:cd:53:5c:9c:22:7f:25:42:d5:2b:c5:
07:9d:89:15:ca:0e:6e:69:c2:52:9a:8d:fa:75:0d:ac:dc:a5:
ff:7e:1c:bc:44:3a:f3:c0:f7:33:4c:7a:23:f1:a4:ad:df:9d:
88:7e:62:d8:4d:50:a6:85:60:b6:51:7e:18:6d:13:e5:e9:a3:
34:82:15:9a:b3:a0:1d:59:c5:41:99:5a:d2:30:88:20:d2:14:
22:37:25:0c:5e:f7:78:b5:a7:53:ff:1a:92:3b:8b:43:0f:a4:
37:c0:dd:50:91:4a:1e:44:60:01:a6:07:54:a2:2b:fe:dd:49:
57:02:c4:ec:97:2c:87:a7:61:29:8f:5d:51:de:e6:03:01:aa:
eb:45:6e:da:49:4a:06:1e:3d:e9:a7:ef:80:9f:3b:65:e4:e2:
d1:cc:0a:aa:b6:99:2d:0c:a0:e6:10:d6:9b:6c:84:f3:32:33:
b3:2f:83:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVeNbEzUMAoi+hok8t/6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj
NDAxZWQwHhcNMjYwNzIxMTEwMDQ4WhcNMjYwNzIyMTEwMDQ4WjAzMTEwLwYDVQQD
EyhjZDUwMzZmY2U4M2U1YTc2NDg3NGRkZDQwZmVhY2MzN2ZlMGJjZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlqNtKfLumZbkytwtTWanTVOutYG
UwU1JtwRgEGmxiz7iyyivROU530BK+id86RaYMUHw3GKuUcw2VJNAWA5HxEDsuQ2
m3v4RaB4ZK1iN3RU5VTEdIQPN+qp10fQdQ0ztFZpzy3e2xkw88R2vG+Pxx5NalVR
YwR5exnbCyGAQZ6Lmg2Kl4gu/bLG0DE2YmeJUabqLeGr5rEJd4ZjWI98sSqsfFLx
3slRG9ZKjpWxW7j8ItOkFCzabqrP/8B75L8qsgK3BC5QcWLEFwfC7+OobQNONWVv
D8kyMJjG8XZ/+PpeJeG3VpSG9Qc3MFIDs64xSGOnwkt6PwidhDxuzYJ4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1QNvzoPlp2SHTd1A/qzDf+C80oMB8GA1UdIwQY
MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt
ZGRiMGIxNDhlNDZiLzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi
LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXWx8e6N
RrJaJXcoShHIjWPg8JjN5yaZSg91/gt+VT6R7X9XkZpaWy/SU/6xLKQV+iP/Lx2H
avqQAK0MPzMQiGbV7DSP/UcmDaN+NfXG1s1TXJwifyVC1SvFB52JFcoObmnCUpqN
+nUNrNyl/34cvEQ688D3M0x6I/Gkrd+diH5i2E1QpoVgtlF+GG0T5emjNIIVmrOg
HVnFQZla0jCIINIUIjclDF73eLWnU/8akjuLQw+kN8DdUJFKHkRgAaYHVKIr/t1J
VwLE7Jcsh6dhKY9dUd7mAwGq60Vu2klKBh496afvgJ87ZeTi0cwKqraZLQyg5hDW
m2yE8zIzsy+DeQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:06 2026 by rpki-client