Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: nxuyr7uyAJx0Z5sEujAUBq/Fs+jZNKfB6Yd+IprxiKY=
Subject key identifier: A6:CE:A0:98:8E:4E:A0:27:32:0E:3D:35:25:28:C5:8B:84:F1:3A:94
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019FA63CC686993A28B1DB1ADB3B2C763F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 01:00:28 +0000
Manifest this update: Tue 28 Jul 2026 01:00:28 +0000
Manifest next update: Wed 29 Jul 2026 01:00:28 +0000
Files and hashes: 1: 4SOYImJHyJqTwCMAGjKjr0oBLY8.roa (hash: QqjpUxrKkhwY2QSOOSplb9rBwA2D3pk3AGplsT4xaRc=)
2: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
3: g8_04g_ZLptnhbFMWnALX7jI71Q.roa (hash: 70TJV8gzoaCntblmfItJ9c4lhtIDo3EwTvJjPUN694A=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: Wz5wub9GHYyLs6Ht9ONrVsiJUlCHqPkzu0h0QBPqQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:3c:c6:86:99:3a:28:b1:db:1a:db:3b:2c:76:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jul 28 01:00:28 2026 GMT
Not After : Jul 29 01:00:28 2026 GMT
Subject: CN=a6cea0988e4ea027320e3d352528c58b84f13a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:0a:91:f0:e0:60:30:c7:c7:90:1e:8c:73:
6b:23:ea:b7:1a:83:c7:7e:c1:42:80:6e:e5:1b:ba:
06:48:a3:23:bd:cb:16:c6:45:95:96:40:af:bb:ab:
70:da:0d:c9:54:ce:96:a4:e2:66:8a:9e:46:33:c1:
89:94:bd:d4:5d:c5:dc:03:a0:70:37:fc:fb:56:ad:
39:69:51:e0:89:92:ee:cd:ff:78:cf:9e:80:96:8c:
4c:f4:7d:60:2c:8b:e5:8d:1e:f2:87:14:47:73:a7:
45:60:df:ec:9d:7b:76:25:4d:8b:cf:91:93:6c:a6:
d9:96:88:4a:4e:c0:f2:96:e8:0d:53:31:75:f0:01:
e9:e2:a9:52:65:18:17:e5:99:6e:95:d9:1f:b6:bd:
a1:a3:9c:f5:34:4e:46:65:36:21:40:4b:54:8b:8d:
e9:84:b7:7a:d5:26:b6:f8:8d:6f:6d:9e:1c:75:d1:
0b:2e:5c:71:f0:06:64:01:af:44:ff:f8:5a:7a:3f:
63:99:1e:35:6d:38:a2:1c:24:75:84:63:06:bf:53:
f0:35:80:76:de:6e:12:f9:76:0b:2a:73:97:8c:3d:
cf:50:be:5d:60:5d:00:59:73:0e:6a:b3:d2:31:d0:
a7:5f:28:c3:06:63:4a:9d:4c:e9:aa:4d:d2:71:4e:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:A0:98:8E:4E:A0:27:32:0E:3D:35:25:28:C5:8B:84:F1:3A:94
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:24:08:7b:7c:0f:88:87:64:61:4a:f4:12:96:62:cd:75:5d:
1c:66:7d:c2:33:fc:1f:86:f6:4d:8d:4c:dd:2b:92:46:df:4b:
76:91:5b:45:01:92:f2:c7:b3:cf:d5:34:c0:53:da:dc:38:35:
8e:ef:b8:4e:8c:01:1c:cb:f8:1e:b2:bf:f5:69:4d:ec:5d:e1:
8e:f7:b4:48:f2:ad:f7:8c:c8:23:41:bd:2e:c5:64:ed:f5:7a:
b8:e7:3c:fe:a8:34:03:e8:18:03:80:47:7d:09:d9:e6:52:19:
42:2c:10:49:fc:a2:46:e0:a6:8f:bb:88:d0:6e:d2:ab:fc:83:
9d:0b:9d:93:8e:4c:44:9f:24:ed:f9:83:c5:73:02:e5:da:b0:
74:48:c8:da:10:9f:92:02:09:a6:90:ee:c1:14:dc:e3:c8:cb:
10:4c:aa:47:9b:b6:f5:ea:d3:77:21:8c:d4:08:f9:61:69:08:
db:ba:0d:07:ff:9a:4c:6f:7d:bc:44:58:b2:6c:f5:c6:72:f1:
c8:b5:30:d7:c6:29:c5:59:17:a6:3a:83:c1:ac:c2:83:58:92:
03:62:5e:e9:86:7a:f6:fd:be:ce:9d:6f:64:ed:9a:d2:5e:a6:
c4:6a:a5:fc:7c:ef:79:f6:31:ea:b6:8d:8b:79:14:a2:e5:b8:
00:d7:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:30:24 2026 by rpki-client