Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: ybtujW+ZD296VCtHG4e2XCXNP0dZCCFHK1Bk9HklGtA=
Subject key identifier: CA:48:13:0B:B8:D6:A1:FC:B4:D4:43:F5:34:B1:1E:BB:29:70:9A:48
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 019F9EBADBFD8704E5F502B679A2364E737F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 0C46
Signing time: Sun 26 Jul 2026 14:01:13 +0000
Manifest this update: Sun 26 Jul 2026 14:01:13 +0000
Manifest next update: Mon 27 Jul 2026 14:01:13 +0000
Files and hashes: 1: KggeSoYJuTH0OsCrW287o_IBVIU.roa (hash: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: 26OjpLS/jvbiBhXHOoNwagSk82X5WI4AzdtQb9+xbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:db:fd:87:04:e5:f5:02:b6:79:a2:36:4e:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Jul 26 14:01:13 2026 GMT
Not After : Jul 27 14:01:13 2026 GMT
Subject: CN=ca48130bb8d6a1fcb4d443f534b11ebb29709a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:06:3a:b8:9a:7f:51:1b:69:b9:88:45:d9:
9a:4c:a2:78:14:ac:54:45:bc:32:e9:94:2a:1e:b1:
cb:34:dd:dc:59:47:44:6f:e0:68:3a:c4:cd:21:de:
b4:3e:60:52:7a:b5:0b:e6:31:65:56:80:1a:5f:d6:
b8:72:06:93:74:28:ab:dc:5f:72:16:7a:ce:1d:b0:
45:3f:9a:9e:11:66:c2:3f:6e:fb:11:c9:46:c6:de:
66:a9:81:1e:be:9c:94:9f:59:38:cd:89:48:8b:49:
b9:a4:60:00:80:a0:48:54:3c:06:58:a7:f7:45:31:
d1:51:2d:44:5e:9b:04:33:f8:86:a0:fd:14:33:02:
fa:2b:1d:b3:c3:1d:7d:e4:1d:35:40:c3:34:5a:eb:
19:9a:ca:52:64:a4:aa:90:c0:c1:33:b4:42:31:fb:
45:c8:e7:ba:a5:5a:88:34:32:75:c2:5d:a2:96:c6:
1a:08:a0:53:61:30:86:64:e4:1a:8f:1a:36:57:57:
89:ad:3b:2f:3b:5a:71:1d:7f:46:b1:dc:de:6a:e8:
25:a8:93:da:3c:8f:6e:9b:d2:3e:fd:bd:ba:ee:f8:
4f:b7:ff:3d:f6:0b:7d:46:5c:d4:70:ba:4d:c5:50:
a9:6d:6b:ea:15:ed:9b:86:1e:a7:53:11:bc:8e:7b:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:13:0B:B8:D6:A1:FC:B4:D4:43:F5:34:B1:1E:BB:29:70:9A:48
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:23:01:7f:47:1e:65:2c:ea:c3:38:92:3e:9a:2c:d4:bd:6f:
52:0f:9e:92:c9:91:dd:2f:ca:60:aa:2c:a0:b4:e9:62:d5:95:
b3:72:53:8b:5a:73:6c:b3:5c:0a:67:09:4a:0b:e7:38:11:2c:
f8:0a:2d:fc:d4:fe:17:7f:e6:bb:27:c3:66:a8:e8:8d:6d:da:
aa:40:b3:10:60:b7:9a:fa:1c:1c:10:13:78:68:4d:70:4a:5e:
38:b3:e8:8f:1f:95:37:f4:14:82:09:f8:5a:1f:36:cc:fa:d8:
6c:8b:76:fe:0d:09:f4:b9:17:3d:4f:45:da:05:cb:b4:50:ab:
3b:96:51:e9:e5:5e:ed:d3:02:fe:a3:db:e0:60:bf:4b:0f:e0:
5e:1d:7a:00:9d:39:6d:ad:0c:90:eb:dd:d7:37:f7:d1:3e:dd:
13:53:16:ff:3e:13:09:4b:42:25:04:48:4d:a0:f1:c6:55:b8:
69:0b:a3:e3:0b:af:94:f1:d5:06:16:3f:84:a1:9b:3b:dc:5f:
cf:43:67:e6:69:48:17:cb:30:2f:e6:39:0a:8a:9e:3e:38:05:
ff:59:63:f7:71:70:3a:50:60:83:31:15:9f:7c:bd:5a:c7:b4:
4c:cc:2d:ca:75:0a:bc:10:26:32:6e:47:79:42:06:8e:d0:c3:
81:a0:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:53 2026 by rpki-client