Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: KWmHNXC19ShDJBPxtjls+G9fx6Pns0msWrih7UEgK2Q=
Subject key identifier: 7B:2E:D4:55:3C:56:63:48:28:0C:2C:D0:61:B7:8E:D0:29:97:05:86
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019F1A1F46A5424B6D10F224FC7F054F84FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 20:01:24 +0000
Manifest this update: Tue 30 Jun 2026 20:01:24 +0000
Manifest next update: Wed 01 Jul 2026 20:01:24 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: e6yOgW6Y7O0I/sqT7Q5YKILDiaNvUKwhvf95p2717sw=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:46:a5:42:4b:6d:10:f2:24:fc:7f:05:4f:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Jun 30 20:01:24 2026 GMT
Not After : Jul 1 20:01:24 2026 GMT
Subject: CN=7b2ed4553c566348280c2cd061b78ed029970586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:61:05:d7:4c:4c:7c:fe:54:09:be:52:4b:
57:bd:32:7d:bc:38:e2:75:fd:8d:5e:f6:8b:1a:56:
68:17:88:45:39:c0:54:3b:ec:92:dc:69:69:d3:23:
a4:aa:fa:5b:6c:50:ea:1a:74:b0:98:78:59:e8:1c:
44:a6:5b:eb:33:1e:8b:0d:58:5f:3f:5f:7f:8f:d2:
fe:20:84:dd:d8:18:bc:e7:d2:3a:f9:a3:09:c6:4a:
7a:93:67:07:aa:d5:a9:33:dc:d3:94:89:78:36:65:
8e:7c:c8:9c:98:d1:2d:8a:6d:15:2e:a6:83:d6:79:
50:b4:59:26:43:26:9c:3d:42:c4:6b:71:54:47:01:
84:c8:5e:2d:80:50:c4:17:2a:f3:82:7a:c8:8f:b0:
ed:97:e1:8d:15:3b:c1:b8:56:e2:8f:2d:c0:18:3a:
69:d6:45:68:05:7f:fc:47:51:7a:de:b1:3f:c6:85:
f1:83:ef:b4:4b:31:95:de:ca:f0:0e:d4:5a:a3:7f:
d2:fd:2a:c1:22:66:18:93:ab:ce:f9:8a:74:4c:b1:
3f:1f:93:a6:f8:c0:3c:e6:35:28:29:8b:fc:50:ef:
53:22:75:81:5b:fa:eb:b6:da:33:d7:cd:d2:e4:f6:
2a:1d:d7:d2:35:e4:e8:9e:49:18:48:a2:72:22:4c:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:D4:55:3C:56:63:48:28:0C:2C:D0:61:B7:8E:D0:29:97:05:86
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ab:02:44:af:04:a7:aa:a3:a9:c0:9b:0c:f8:83:83:c4:9a:
aa:d8:8b:b3:ed:52:e1:da:13:95:19:be:f3:fa:b8:6d:ba:43:
3a:17:44:7b:38:f0:38:a6:52:cd:e3:b9:28:f8:60:f0:61:ce:
fa:ca:70:ae:c9:10:5a:61:2e:67:81:8d:fa:37:24:d6:96:ca:
7b:6e:eb:ce:12:8e:96:05:43:9f:a8:ec:7d:85:d8:4e:11:17:
14:11:1d:7d:07:37:8d:91:a9:14:8c:a1:25:bf:60:61:02:4c:
c2:9d:d1:96:73:9c:e6:f3:ed:9a:63:dd:2e:4f:3c:b6:32:03:
d3:0d:b8:47:10:9c:a0:30:25:05:bd:53:78:13:9d:4d:97:18:
8a:fe:ed:7b:fb:44:49:6b:20:d2:91:f0:9e:58:32:e1:a6:76:
a3:ee:03:8d:9f:96:eb:92:cc:6a:8e:e6:11:22:01:49:28:c3:
69:5c:ce:0f:6a:48:73:9e:94:39:c8:b4:76:c9:fa:a2:10:75:
d9:ce:a9:df:fe:5b:e7:0a:65:e1:17:3c:4f:f0:41:ba:0f:e2:
df:ea:05:3b:d4:75:85:73:2b:9e:71:86:eb:b5:ba:eb:c9:75:
d2:32:6f:27:b5:bc:18:21:f9:b1:c9:b5:a5:20:37:6d:1d:dc:
4d:ee:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:18:49 2026 by rpki-client