Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: FXH7ZrjeN5tnRzviQ7XW7vxNvs10tlUlkyctRC8KTn4=
Subject key identifier: 86:AC:07:49:21:E6:D1:53:F3:04:47:31:36:2C:ED:94:9C:C7:E4:74
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 019F860D0E42FA7E3B3AB07CF0B11EF545B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 0108
Signing time: Tue 21 Jul 2026 19:00:30 +0000
Manifest this update: Tue 21 Jul 2026 19:00:30 +0000
Manifest next update: Wed 22 Jul 2026 19:00:30 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: hQjQEosZwu7LD/GYCA8PJLVlvD0xc0ft4zV2b8CoXS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:0e:42:fa:7e:3b:3a:b0:7c:f0:b1:1e:f5:45:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Jul 21 19:00:30 2026 GMT
Not After : Jul 22 19:00:30 2026 GMT
Subject: CN=86ac074921e6d153f3044731362ced949cc7e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:0b:da:2b:bc:49:06:9e:40:83:51:20:a2:
c9:97:6d:3b:1e:31:d8:92:07:cc:61:be:d8:dd:08:
90:de:f7:7f:5c:6d:a2:aa:6b:d7:04:1d:47:d7:f3:
e9:87:61:31:b9:9a:7f:9f:00:e8:0d:2f:92:93:b1:
88:c3:c5:c6:0e:9c:27:0e:35:c7:4c:05:0d:c1:ca:
86:e3:ac:3d:c8:26:04:b4:62:0c:18:fe:f1:b3:0b:
0b:ee:e3:6f:48:68:62:ef:49:18:40:a5:10:72:ed:
8d:f0:19:e0:8e:e8:d9:19:a6:42:89:ad:40:cc:c9:
bc:07:eb:19:a3:d8:f3:eb:97:f6:d6:44:75:7a:b8:
aa:1c:86:2a:6c:7f:34:d3:7e:0c:29:f1:95:7f:2f:
2d:e9:3c:a3:c7:b3:1f:03:7d:61:58:8a:74:78:bc:
2b:75:9a:ec:0b:bd:0b:04:63:21:92:79:e3:15:51:
f9:0e:85:40:5b:1c:0c:17:66:c0:09:d0:9f:cb:5b:
20:8e:5d:8d:9f:e5:ff:c5:54:d8:d7:07:bd:3a:46:
32:bb:17:07:c6:60:97:ff:a5:08:bb:40:5d:bb:d5:
24:a1:6f:43:0e:82:85:07:16:43:69:e0:dd:6a:f7:
98:7b:20:e1:50:35:81:75:49:b9:be:74:80:c0:ae:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:07:49:21:E6:D1:53:F3:04:47:31:36:2C:ED:94:9C:C7:E4:74
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:18:c6:05:5d:ed:b4:ca:32:f7:af:16:ab:2b:03:9c:6c:51:
7e:f9:5c:17:4d:03:3a:e8:12:98:c3:2d:38:d3:79:b6:39:ac:
85:55:93:86:19:70:fa:19:3a:e1:2c:0e:25:5d:43:d0:83:27:
33:a1:04:68:aa:35:e7:69:fc:ca:96:e3:ba:b9:8b:88:d5:54:
9b:6c:39:a2:b6:b7:b1:3a:53:01:e3:39:48:41:8b:da:8c:f6:
43:ef:c3:04:a2:25:07:a0:84:ef:00:40:0c:35:ce:28:3b:f0:
90:92:85:8a:96:12:4d:9a:d2:d7:d7:e4:95:0f:3a:fe:c4:ab:
07:61:58:d8:88:48:7a:70:08:14:2d:71:30:31:63:10:e6:fd:
b0:d9:1c:19:f5:9a:e5:61:5f:bc:ed:15:55:86:d7:82:ee:94:
2b:c2:a0:a1:be:66:25:6c:53:02:86:df:66:c5:6a:b8:83:0e:
73:56:51:c9:19:66:25:83:5b:ee:2d:71:4f:58:bd:ce:38:81:
e7:c2:46:57:13:ef:04:15:b7:99:d5:87:82:b2:ad:7a:90:a4:
28:b4:bc:05:20:25:3f:e4:6e:c4:dd:1f:0f:83:b4:06:9c:25:
7c:be:1e:ce:04:fa:79:bf:2f:d8:31:f1:b6:0d:1f:0f:f2:48:
30:6b:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:32 2026 by rpki-client