Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: oKhda48zejIBz6b/HltgBxJt9OxWkwVfvONyQYyjwHQ=
Subject key identifier: A7:BF:3C:CD:28:39:85:9E:31:71:17:C4:1D:52:B1:8A:F4:F9:3E:22
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 019F83E85A8725EDA83B7D24C5E4BB96DF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 39
Signing time: Tue 21 Jul 2026 09:01:10 +0000
Manifest this update: Tue 21 Jul 2026 09:01:10 +0000
Manifest next update: Wed 22 Jul 2026 09:01:10 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: QhnNPnUM/mVtkJeMc2dyeAStvQZDS7+LP5JTO88trK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:5a:87:25:ed:a8:3b:7d:24:c5:e4:bb:96:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Jul 21 09:01:10 2026 GMT
Not After : Jul 22 09:01:10 2026 GMT
Subject: CN=a7bf3ccd2839859e317117c41d52b18af4f93e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:84:43:91:8e:ae:77:6e:f1:18:61:94:3f:
a5:df:eb:25:9f:e6:fc:04:f4:e4:49:d4:6a:bd:9a:
d2:9d:7d:c7:91:84:2c:a5:37:13:fb:86:27:a7:1c:
ec:7b:46:b6:71:38:41:9e:3d:d3:b9:e1:33:8f:29:
03:7e:e2:5e:9e:73:b6:04:cf:44:c0:72:bd:1a:81:
68:8a:44:bf:0a:ef:af:51:9f:27:91:a1:14:49:94:
c6:06:38:1f:1d:ea:28:88:4b:7a:27:8b:6a:fe:7a:
c4:61:09:45:96:ef:26:73:ae:4e:69:df:ad:9d:43:
87:c7:7c:b2:40:4d:bf:7c:75:64:c3:1b:cf:59:64:
a6:50:2e:fd:e2:1d:f4:0b:00:b0:5c:98:4c:cf:c1:
b2:5f:17:90:3d:60:3b:e1:62:44:0c:32:b8:f8:ff:
d5:86:a8:e2:d0:62:cb:75:92:07:0c:1f:93:c2:e2:
fa:06:57:20:40:18:22:03:dd:18:d9:1e:6f:70:1b:
a3:84:19:75:54:53:d8:b3:e3:bd:eb:4f:af:fe:39:
ce:54:d8:64:45:c4:10:12:fc:bb:89:55:36:00:7a:
a0:e4:cb:9d:e6:52:b8:f4:95:bf:a4:d7:ea:14:7f:
46:9d:36:2b:55:f2:29:ae:c8:99:0b:fe:b3:89:95:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:3C:CD:28:39:85:9E:31:71:17:C4:1D:52:B1:8A:F4:F9:3E:22
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:31:92:e4:6f:86:e2:42:ce:a2:08:64:65:b0:85:06:a1:
c7:4e:d9:26:dc:24:4b:42:b0:21:8f:33:6d:ac:a1:1e:03:4d:
02:9c:19:45:2c:68:4e:d6:cf:98:f7:ca:5f:a8:29:33:a3:7c:
13:1a:7f:44:be:14:8a:4f:a5:8f:7c:c6:61:37:d0:0a:7e:7b:
41:c5:38:e9:14:ec:25:75:e5:16:a3:c8:fe:99:7f:86:ce:c2:
94:21:37:e1:42:e5:0d:47:eb:30:6f:cc:8e:8d:4e:19:84:f8:
aa:09:eb:e5:5c:fb:53:a1:fb:d3:7e:be:73:e0:4b:42:28:fb:
4b:14:e3:a4:d3:4b:6e:e4:b6:ab:47:fe:8d:ac:eb:28:bd:85:
2d:da:dd:c1:90:bb:a8:65:38:11:80:e3:f7:7a:5b:86:41:4b:
03:dd:d7:63:3c:aa:46:43:c6:64:3f:6d:7e:cb:16:29:8b:cc:
4c:63:f8:8f:04:67:19:52:15:09:27:45:e4:25:74:55:a9:4f:
1b:ee:0d:06:b5:d5:4f:e6:07:16:27:a5:ca:e5:8d:04:5f:d9:
04:72:99:2a:75:67:de:d4:21:a9:de:f3:28:72:88:fd:a5:8c:
25:d4:67:7a:b8:cb:4d:4b:d5:e1:f5:e6:0c:d1:07:07:2d:b9:
29:ce:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:39 2026 by rpki-client