Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: KxbEUy9QU6WT3+bekBFcq2GUC702Veul0/IXXeiFN0Y=
Subject key identifier: 8E:20:20:F9:46:BE:2B:18:CD:71:1C:9B:BF:D2:9C:42:C3:53:C3:E7
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019F81C23FA6336A5A8FD3ED4FE064228539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 0716
Signing time: Mon 20 Jul 2026 23:00:18 +0000
Manifest this update: Mon 20 Jul 2026 23:00:18 +0000
Manifest next update: Tue 21 Jul 2026 23:00:18 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: CTdL7hTsPErrPl9NRo4sRU1y/bW2gGwjcG7QmZgTfKo=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:c2:3f:a6:33:6a:5a:8f:d3:ed:4f:e0:64:22:85:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Jul 20 23:00:18 2026 GMT
Not After : Jul 21 23:00:18 2026 GMT
Subject: CN=8e2020f946be2b18cd711c9bbfd29c42c353c3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:8e:1f:7c:06:c9:28:92:4b:d6:be:dc:08:
4f:47:d1:6a:ad:e9:64:b3:42:fd:f3:81:58:b7:d7:
0b:87:99:95:39:6f:9f:24:3a:07:c3:78:a5:cf:89:
3e:40:70:51:c5:52:f2:c5:be:e2:da:21:62:e9:9f:
aa:a2:6d:d5:5f:88:3c:96:35:f2:dd:a5:10:a8:79:
34:5f:8e:15:50:65:2f:be:74:ed:b6:8e:b2:6f:1c:
57:c7:00:4e:6b:de:ce:4d:6d:94:a8:4f:bd:a8:ef:
1f:8b:b4:fe:cf:a9:09:24:46:5b:83:e3:fa:0c:f6:
55:e9:6e:b7:fc:1f:f7:df:91:6d:9f:59:05:84:5b:
0c:b0:f2:f2:b9:da:7b:06:3d:6f:9f:5e:42:f6:16:
53:2f:69:a0:e7:26:94:9c:ff:a9:03:85:6a:82:14:
9d:bd:35:f6:37:4e:96:fa:6e:a4:01:17:78:4f:3b:
39:19:b9:77:c0:73:af:04:7b:a2:76:12:d3:f2:dc:
94:e1:b8:7a:94:5f:30:64:27:61:fb:a9:5b:d1:70:
16:b0:5c:3a:17:aa:9d:66:ea:4a:e2:8c:82:25:2c:
aa:b5:38:af:2e:23:e5:c4:85:c3:c6:71:55:5e:6b:
59:29:de:df:78:e3:60:22:d8:de:31:21:5e:c4:40:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:20:F9:46:BE:2B:18:CD:71:1C:9B:BF:D2:9C:42:C3:53:C3:E7
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:66:24:40:2b:9b:44:a8:a4:9d:7f:dd:3f:58:23:8a:30:a7:
84:70:74:37:2f:78:f1:14:fc:e5:59:97:6c:16:72:55:36:81:
4e:72:1f:99:c0:0d:dc:89:04:a6:37:2a:3e:be:78:3d:70:9f:
60:e9:75:78:17:fb:49:a4:3c:c6:90:81:4b:48:8d:ae:98:a6:
d7:27:58:a7:8d:dc:02:b4:dc:15:4b:94:b1:c4:af:b2:1c:c7:
9b:d6:d7:3c:5c:f1:72:c8:4f:f0:97:d7:09:46:0f:b7:39:fe:
42:8f:6e:9a:e2:dd:f9:a9:4c:2e:82:91:c2:54:e9:21:fc:18:
7d:7d:32:73:ef:fb:21:a6:f4:b4:64:94:62:a2:ab:1f:d6:d3:
71:78:1e:f9:05:7f:79:4d:d7:d2:3b:36:4d:20:d7:0e:c9:13:
c2:d3:20:6a:7c:7e:a2:fd:89:ec:a0:73:8d:90:2b:2f:44:a8:
d4:45:6f:f5:51:08:06:ae:46:e3:44:07:7d:70:0c:64:19:6b:
71:ba:30:3c:31:66:ca:2d:6a:2e:22:6e:d8:b1:dd:f6:4e:e3:
68:c7:da:4b:fe:b6:ea:75:3f:c5:07:11:a1:ff:9b:0c:d5:90:
3a:bf:32:1d:29:29:23:db:58:81:36:3f:01:af:e5:91:d7:3e:
d5:14:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:53:00 2026 by rpki-client