Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
File: nRsJrQnDR1asNA3Y6hSRqMf8toc.mft (raw, json)
Hash identifier: wL7aRud8HiRY/U1Dkml8p5+rarYcLp+oTiLeFR5RQ14=
Subject key identifier: 0E:EF:FE:6F:5C:CD:9D:28:DD:7D:4E:04:47:A4:A3:27:98:B3:60:05
Authority key identifier: 9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
Certificate issuer: /CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Certificate serial: 019F83E7A166D87C44A79D5EA759BF9928E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
Manifest number: 39
Signing time: Tue 21 Jul 2026 09:00:23 +0000
Manifest this update: Tue 21 Jul 2026 09:00:23 +0000
Manifest next update: Wed 22 Jul 2026 09:00:23 +0000
Files and hashes: 1: nRsJrQnDR1asNA3Y6hSRqMf8toc.crl (hash: ENx5NYrOXisXIcQdeSvouPTp1GbC8Pn7fbfrTVxFfno=)
2: yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa (hash: umwlZGJl591xCRTw6gLVt5FDOEtVDC3jktYmPDdcoaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:a1:66:d8:7c:44:a7:9d:5e:a7:59:bf:99:28:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Validity
Not Before: Jul 21 09:00:23 2026 GMT
Not After : Jul 22 09:00:23 2026 GMT
Subject: CN=0eeffe6f5ccd9d28dd7d4e0447a4a32798b36005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:e4:82:d7:8b:d4:0d:c6:bd:24:0d:03:f4:
ea:c4:80:31:be:52:38:f4:11:dc:9a:81:8f:91:cb:
d0:2b:e0:36:d4:22:82:a7:e8:58:e8:a4:01:6c:98:
b8:20:8c:a9:69:4a:57:70:17:66:78:45:91:d5:20:
f3:1c:7d:8c:28:ac:e4:f7:72:91:89:3f:13:27:79:
7b:2d:7c:13:fc:f9:c0:41:a6:8a:d5:c3:5c:31:89:
24:f8:8e:c5:97:46:25:1c:bc:bd:a4:bc:5b:2c:79:
a5:c0:5a:50:d7:57:25:e8:56:88:b6:45:19:d8:52:
7d:99:50:4b:85:f8:b1:c1:03:2a:81:94:78:b5:39:
98:e0:a6:0c:68:d1:79:05:44:6e:29:16:70:e2:b1:
b2:32:66:c2:50:03:a9:23:8b:f7:31:84:60:ef:cb:
17:1e:49:6a:5a:75:62:a4:a9:f4:2b:08:34:a5:7a:
50:53:5c:ba:06:dd:d9:60:4a:13:4f:d9:c6:be:cd:
a6:9b:48:0c:c2:a7:a0:63:87:48:23:46:3a:d8:ca:
8b:e4:17:de:86:67:95:e1:2c:73:18:e4:81:5f:07:
e6:21:ee:2e:50:fe:5e:18:f6:1b:f9:e9:45:71:99:
9a:2d:96:dd:41:6d:2c:93:52:4c:e3:b3:0a:2d:33:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:FE:6F:5C:CD:9D:28:DD:7D:4E:04:47:A4:A3:27:98:B3:60:05
X509v3 Authority Key Identifier:
keyid:9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:ed:4f:12:2a:e7:c7:41:33:69:21:ae:ba:2a:ef:ce:90:
99:04:af:7c:48:eb:8b:fd:5e:53:97:41:eb:e7:46:9b:cf:b4:
b5:b4:a3:c0:b7:66:9a:5d:c6:03:11:fd:61:13:ef:78:4e:af:
ab:d7:65:52:a7:e1:8b:0c:a7:3d:4b:48:7a:8f:b0:28:85:1c:
25:8b:1f:7a:0d:04:cd:7a:f1:29:5f:16:96:74:2f:79:0f:80:
55:2c:6f:61:47:b5:b1:fc:f8:3f:4f:17:1f:fd:df:8a:54:7b:
0a:f9:f7:03:e6:d0:8a:2a:67:ed:47:d4:e5:5e:8d:d4:c4:60:
36:e7:6d:2a:79:6e:c7:ac:bd:e8:81:4d:71:53:bb:5f:6d:90:
65:7c:3b:ea:17:9b:30:b3:27:48:89:76:c0:83:93:4b:60:44:
e0:e7:f3:b2:3f:10:3f:95:ae:02:12:7b:e7:61:4a:ff:ef:74:
0a:0c:7d:54:f6:81:35:0b:a3:7a:35:f3:1b:ba:ed:ef:b2:1f:
42:20:61:ee:37:38:ca:30:aa:d2:ea:71:42:b5:d8:41:35:05:
27:9c:6e:08:a3:9d:69:88:ef:12:56:8d:00:eb:29:36:9f:98:
2a:1b:7e:f2:9b:d4:dd:a6:5a:c3:dc:91:9a:d9:0f:76:3b:cc:
b8:bd:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:17 2026 by rpki-client