Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier: lxF6jzD+YVXdkNE8usyAePvRK+ef8L4nex5v+4CYorQ=
Subject key identifier: 97:8E:17:DF:96:AB:95:C0:5C:E3:31:1E:8A:36:98:03:D4:E4:AE:12
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial: 019FA184B8540EB13704D19F643D9AEAA824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number: 0957
Signing time: Mon 27 Jul 2026 03:00:57 +0000
Manifest this update: Mon 27 Jul 2026 03:00:57 +0000
Manifest next update: Tue 28 Jul 2026 03:00:57 +0000
Files and hashes: 1: IVyr9TDbDX_pP70HeSId022KL1g.roa (hash: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc=)
2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: E/Jml208XFZE8q2T7MP3xG6hUE14VJIEPnnnTQWqD6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:b8:54:0e:b1:37:04:d1:9f:64:3d:9a:ea:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Validity
Not Before: Jul 27 03:00:57 2026 GMT
Not After : Jul 28 03:00:57 2026 GMT
Subject: CN=978e17df96ab95c05ce3311e8a369803d4e4ae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:f8:e4:b7:a5:b2:b1:d4:b9:26:9d:c2:c0:
b5:77:c5:67:d5:44:cf:d7:03:25:ae:12:ea:b0:8a:
7d:06:c3:8b:3b:f1:8c:0c:da:4b:32:01:6a:9d:df:
75:7d:bb:5a:41:f7:55:aa:69:be:71:cb:69:56:2b:
d8:eb:4b:6f:13:21:ad:74:ee:d9:1c:71:49:ae:33:
66:26:3c:d7:16:a2:48:17:41:5b:ee:b9:fb:ca:5d:
4f:df:2d:98:5d:29:a8:2a:7f:37:c3:c0:96:d0:da:
b5:62:b3:fa:7a:b3:ce:e4:97:3e:fa:54:ff:ac:d0:
0f:a8:0f:77:0a:43:d5:94:c3:4e:da:3a:4e:54:fe:
0b:2b:30:66:74:b5:90:6d:d8:d0:5e:6f:f7:dd:af:
5a:1c:0c:3c:88:57:e8:30:13:ee:7a:72:72:ee:14:
5d:d5:d6:9f:76:4c:fd:fc:22:58:6a:ba:ed:02:2a:
3b:eb:63:77:7d:1f:89:67:bb:b9:70:38:57:76:e8:
c3:c7:ed:9d:a1:dc:fd:10:ff:9e:31:e5:93:12:20:
bf:f4:34:e3:e5:18:a1:44:a6:19:bd:e3:52:04:73:
35:52:2d:0a:83:7f:33:10:dd:01:e8:c8:56:93:db:
83:f3:86:0d:ca:ec:d0:1b:02:c3:ca:70:23:d6:de:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:17:DF:96:AB:95:C0:5C:E3:31:1E:8A:36:98:03:D4:E4:AE:12
X509v3 Authority Key Identifier:
keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:2b:2f:5b:a8:70:00:c2:09:93:c2:02:a2:bb:25:6e:ea:
58:a8:e2:84:26:d5:f6:72:82:31:9b:9e:4f:24:0e:74:7b:f4:
10:1a:d3:31:e5:52:ca:f9:e5:ed:8e:4b:3f:55:14:24:fd:60:
98:da:98:77:17:28:04:bc:87:ba:86:33:8b:e6:67:35:19:b0:
a5:6c:28:f6:3f:2c:26:b8:55:62:24:be:35:cf:4a:86:8d:0e:
00:8f:3e:ec:0c:72:7b:30:8a:4d:6b:d6:a9:e1:fa:82:08:a2:
3b:2f:e3:22:a1:b3:9a:fd:6b:c4:96:76:b1:bf:57:c1:7f:d1:
69:47:4a:0a:ea:3e:8b:8a:42:a9:4f:52:7a:b1:24:98:8b:21:
a1:a0:85:7a:0e:65:05:35:61:69:c3:37:90:7d:3a:d0:d2:6f:
b4:14:9d:33:a2:5c:29:20:1b:09:cd:5b:7a:4e:86:c8:0a:05:
5d:34:09:c9:16:9e:51:27:8c:74:1b:75:5e:94:0a:d8:5e:51:
16:a7:be:f6:10:70:3a:02:71:cb:5a:d5:86:62:b6:25:30:95:
11:db:f9:77:d4:9f:5f:9c:5f:7c:f0:bf:43:5f:5e:2b:dc:75:
52:77:0b:c6:d1:2e:be:3d:c8:ae:1c:6f:d5:ed:6f:e0:76:fc:
3c:ec:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:53 2026 by rpki-client