Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: g46wYyzt9SZSbIN5zI6Bk8kX5hGE4ik4TdzPVUk5f2I=
Subject key identifier: CC:2E:1C:2A:37:D9:71:6C:58:54:92:09:7A:AD:0E:75:CC:F4:C6:14
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 019FA1F277EE963DDD8ADE7D1B0400EAB263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 091E
Signing time: Mon 27 Jul 2026 05:00:49 +0000
Manifest this update: Mon 27 Jul 2026 05:00:49 +0000
Manifest next update: Tue 28 Jul 2026 05:00:49 +0000
Files and hashes: 1: mNCgVhtdcHk_wU97-Gy3cw-WdNw.roa (hash: mTADEdCwBT4z8h+n4TsVWFX5hSFlb40/mneHRKe61U0=)
2: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: TrdIWQZ/0FVjryolTnXUACOxPkmLrDFKJHfNw/UCLOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:77:ee:96:3d:dd:8a:de:7d:1b:04:00:ea:b2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Jul 27 05:00:49 2026 GMT
Not After : Jul 28 05:00:49 2026 GMT
Subject: CN=cc2e1c2a37d9716c585492097aad0e75ccf4c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:6e:b7:e6:97:ad:5f:32:4b:66:b4:d7:42:
45:cf:46:3b:85:f8:e8:8b:44:7c:ca:2a:24:b6:f5:
da:91:07:de:78:6e:3c:5c:0a:1f:3a:82:ea:6b:c6:
fc:7b:5b:b5:14:92:9a:09:03:cc:ee:b6:30:1f:7b:
d0:38:b9:28:1e:7c:ea:76:8e:6e:33:ec:3c:01:6d:
12:f4:3e:e6:74:96:6c:2f:0f:3e:a1:a1:f8:48:31:
8f:03:a5:91:a0:e2:2d:1b:96:a3:ab:97:f7:d5:48:
ac:a6:50:05:48:bd:06:39:cf:6b:f2:ef:c0:bc:15:
7c:ea:9c:6a:cb:dd:f7:58:32:1c:7d:83:33:ac:39:
0c:da:a8:a5:d5:37:6e:86:e8:00:29:37:89:ac:34:
f2:c8:68:21:4b:06:ba:b8:3f:67:64:dc:93:58:b6:
17:aa:55:48:01:22:ba:b3:c7:53:fa:f0:a1:77:27:
ba:89:fe:67:10:4c:22:7d:a1:e4:c3:d7:7e:0e:3f:
55:7e:0d:9a:a1:00:86:08:80:ab:7d:d4:0b:46:f0:
cb:51:7d:34:67:6b:72:8a:3b:cf:44:90:70:7f:a9:
70:02:2c:6a:0b:15:34:c1:81:85:02:9f:24:99:6d:
b8:9d:f1:fb:3a:15:99:d3:d6:0e:dc:4b:df:19:89:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:1C:2A:37:D9:71:6C:58:54:92:09:7A:AD:0E:75:CC:F4:C6:14
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:72:03:8e:55:b6:04:18:d5:91:a6:81:10:53:f1:e7:93:
93:55:17:37:40:e8:22:d7:2f:0c:ec:3b:0b:61:c0:99:93:18:
ba:36:b8:3a:01:7c:f9:c1:41:c3:5b:8e:d5:80:32:fc:09:45:
2d:c1:7a:bb:61:9a:9a:39:b4:30:32:ab:d6:51:67:be:3c:47:
6f:65:c4:29:9a:bb:34:36:a8:00:c2:9e:c5:a4:f7:c7:41:3f:
ce:da:83:9b:d4:a0:a4:69:09:c9:49:8e:22:01:3e:0b:ab:c5:
37:f0:96:e9:19:70:52:27:1c:41:54:30:c6:73:5a:63:e3:ed:
c9:4b:2d:1a:93:ab:ec:9c:9d:27:b6:51:fa:c5:65:2a:bf:70:
fa:14:b6:77:b4:d5:1a:4d:ff:8c:a1:08:5e:72:62:66:c5:8e:
e0:b0:bb:87:7c:22:e6:77:66:5f:aa:ef:e8:96:60:e2:da:bf:
66:83:6b:54:28:8e:77:ba:cd:30:e4:c1:b8:92:54:5e:3a:31:
61:0d:ec:a1:ba:40:e6:f1:7b:3c:59:71:80:15:ee:78:c5:25:
67:76:a6:76:db:b9:ec:af:02:90:48:99:41:88:c7:fb:c4:e0:
ed:d9:90:18:1b:a8:d7:fc:7b:5c:b6:5a:af:d3:85:af:b2:4c:
ea:15:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:18 2026 by rpki-client