Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: xyVWH+P6CzqwmxWCesRYyHXFX057kyuU4Y6JnNrGfHM=
Subject key identifier: E0:97:C0:F0:3E:5B:5A:7F:A7:0B:45:C8:2E:DD:47:4D:B5:F2:EB:F7
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019FA33BC628AA4D394A93E81E6BF368429E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 04F5
Signing time: Mon 27 Jul 2026 11:00:31 +0000
Manifest this update: Mon 27 Jul 2026 11:00:31 +0000
Manifest next update: Tue 28 Jul 2026 11:00:31 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: Tmp+4MyHqS4OH0zH2QX9jYneM2IYKUUsOE2iHgjtcHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:c6:28:aa:4d:39:4a:93:e8:1e:6b:f3:68:42:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Jul 27 11:00:31 2026 GMT
Not After : Jul 28 11:00:31 2026 GMT
Subject: CN=e097c0f03e5b5a7fa70b45c82edd474db5f2ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:0b:b4:dc:24:90:7b:5b:0f:39:51:e0:7c:
a3:87:27:c5:fb:85:29:53:19:a4:79:ee:29:66:61:
1f:23:cf:94:3b:5d:22:98:9c:ee:3f:28:8a:ba:a4:
57:d6:cd:a0:73:b0:a5:0f:06:6a:2f:31:26:a2:14:
85:5d:8a:7e:9c:39:39:12:48:b1:ff:94:46:a7:b7:
e4:fe:00:ae:08:60:ac:9f:f7:4b:14:d4:1b:be:02:
eb:ca:5f:03:40:ba:12:b4:11:4a:a0:01:19:92:06:
e1:c1:7c:b7:0a:94:aa:41:96:fd:96:46:82:05:80:
8d:b1:30:c4:ee:1a:46:cf:0e:84:fc:d2:09:62:c7:
49:59:d3:c6:16:74:19:86:9a:dd:e2:d3:7e:2d:9d:
bd:7e:a3:82:9d:ce:c8:c0:c6:03:4c:f3:c2:dc:30:
3f:db:55:b9:0d:5e:c6:8e:e8:6b:7f:09:22:88:b8:
aa:0f:56:a6:23:ec:ab:a1:ca:d4:e7:27:ee:35:b8:
bb:a5:ad:8a:b1:ff:ef:26:ed:2f:55:a5:dd:0f:be:
f9:3a:0f:72:1e:0e:6a:b1:9a:6e:c3:fa:cc:26:a4:
95:40:30:9e:70:ce:4c:1f:64:79:aa:95:cd:af:0b:
4c:ec:1e:3c:83:2d:89:54:7b:55:dc:ac:db:35:d6:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:C0:F0:3E:5B:5A:7F:A7:0B:45:C8:2E:DD:47:4D:B5:F2:EB:F7
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:db:92:2c:51:f4:e6:7e:0f:af:5a:06:cf:13:28:6d:04:f0:
70:f7:13:e6:18:fb:1a:8e:61:43:f8:6f:e1:c5:d4:75:1e:e7:
20:12:fb:ec:7a:61:ed:43:8e:9c:dc:30:9e:54:7c:a7:8d:47:
ca:af:7d:9c:d2:ed:8a:68:1a:5f:01:1b:17:8d:f7:6f:03:fb:
51:5f:be:02:bc:bf:34:d6:0b:f1:67:ec:96:4b:30:ea:e8:03:
ca:9b:cc:a6:1a:3a:a8:4f:03:be:5f:87:80:74:4f:8a:24:ae:
3e:71:23:b1:95:41:97:b9:8c:a5:57:82:63:c2:ce:13:07:63:
59:79:77:f1:d4:18:09:13:c6:3a:96:e1:46:72:90:8d:20:f4:
92:5b:3d:d1:b9:55:a7:35:03:d6:a0:54:07:d9:e7:93:4b:cd:
f5:e9:cd:c6:af:e0:da:26:9a:85:96:6c:26:a0:a2:b2:c4:06:
8a:91:a6:c6:a6:fd:e1:53:a9:99:c4:5e:35:dc:34:1c:e5:e9:
9a:b7:ef:4d:e3:16:fd:b3:05:42:87:97:6f:41:52:30:ed:9c:
c0:98:40:3d:e7:d7:d8:e4:3b:7c:72:a0:46:92:0d:d4:f7:46:
e0:45:d8:67:65:aa:d1:b3:74:0f:1e:7b:78:3b:46:47:3b:49:
76:06:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:19:49 2026 by rpki-client