Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: pKY8AWnx+0Zd5zq0sJEGN6Z9sLKw8oDBemE/b0ubHBQ=
Subject key identifier: 8F:58:E3:AE:5E:E0:F9:3E:ED:1E:3D:4F:79:85:F5:7C:67:EB:7D:7C
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 019FA0E107400E63A3289FC0CE1DE4E2B5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:09 +0000
Manifest this update: Mon 27 Jul 2026 00:02:09 +0000
Manifest next update: Tue 28 Jul 2026 00:02:09 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: NN2eL6p44uFh3dfOyCliHsjES4EmXkbUm34KpISNkCo=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e1:07:40:0e:63:a3:28:9f:c0:ce:1d:e4:e2:b5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Jul 27 00:02:09 2026 GMT
Not After : Jul 28 00:02:09 2026 GMT
Subject: CN=8f58e3ae5ee0f93eed1e3d4f7985f57c67eb7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:b0:a6:36:ba:23:af:a6:b4:07:e3:79:b3:
bc:a6:0d:5e:ed:99:b9:36:3b:2c:72:72:ea:22:d9:
48:95:c9:08:54:cc:b1:d3:5f:aa:ff:bd:71:3e:c0:
7f:eb:63:8d:d7:cc:f7:16:8d:3b:82:c6:e7:76:10:
22:dd:08:ec:44:b8:9a:c3:ef:d7:d4:b9:f6:99:b8:
10:1c:d6:a6:a2:54:46:9f:61:d7:9d:c4:3b:3b:5a:
f4:c6:78:ba:6c:b6:df:37:9b:78:76:eb:9e:98:bf:
43:b6:c5:b2:11:63:11:d6:24:12:a6:ea:4c:c4:f0:
bb:f7:82:a6:5f:02:23:bd:25:34:71:05:fc:89:aa:
27:96:d3:50:7d:ef:cf:84:3f:a0:e1:e3:6a:64:40:
86:2c:55:ba:ea:95:b3:fb:87:23:f5:b8:59:16:eb:
82:90:84:98:01:d2:09:a3:88:d6:ac:4e:19:e1:5d:
06:d1:84:2f:a0:0f:5f:9f:c8:d8:a5:b4:4f:bf:cd:
91:d3:6f:ae:52:f9:f0:af:5f:66:9c:36:0a:b7:94:
67:ff:3e:b0:3d:92:61:3d:5a:8e:79:9b:6f:5d:94:
d4:b7:41:c4:02:eb:47:f2:cf:6d:7c:00:25:24:e9:
23:2e:25:99:22:6c:d6:8c:ff:66:6d:fb:69:a0:13:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:E3:AE:5E:E0:F9:3E:ED:1E:3D:4F:79:85:F5:7C:67:EB:7D:7C
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dc:ed:a1:cc:1a:ff:0c:3b:63:13:28:54:33:2c:0d:56:a1:
5a:dc:51:d9:d1:37:61:f0:44:d0:be:18:a6:5e:6b:2f:8d:ad:
f0:83:7e:d7:58:ca:69:b7:bf:ce:ee:3b:df:65:22:2a:19:8c:
81:9e:e3:60:86:22:4c:c8:91:f9:99:85:f7:01:a1:7b:9e:47:
18:df:c3:f5:f8:df:e2:24:b8:b7:fc:4b:92:5f:52:23:fd:f3:
99:32:19:3e:ab:5f:20:cb:2e:e9:11:ed:64:03:2d:bb:21:3f:
dc:2c:19:2a:4c:57:e2:20:95:1c:13:a2:d1:c9:e9:dc:e5:0a:
3f:54:85:02:a7:19:03:8d:0b:25:a2:bb:64:8e:af:03:99:c8:
72:3c:d3:72:95:66:db:fb:67:88:06:36:87:a3:f0:85:3e:a8:
7f:fa:75:53:42:a3:d7:82:05:5b:8b:e7:0f:35:77:a4:79:2d:
08:30:c2:24:1e:5d:d8:b5:86:c6:2f:f1:8c:cd:a6:d9:9a:eb:
8c:d1:4b:4b:ba:28:3e:fd:bd:b1:13:6f:7e:e7:a6:9d:5f:fa:
c0:9b:2d:b0:71:ac:34:b5:d0:8d:22:bd:41:99:70:ca:0e:cf:
03:0c:5a:45:59:67:b8:f4:16:d8:05:c8:c9:93:51:77:4c:8c:
1f:e9:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:27 2026 by rpki-client