Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: Yu0tggcaZx0jZbi9/bKV8/2f/PSRjoMwRY07MlBdGV8=
Subject key identifier: C0:73:81:D5:E9:85:09:27:98:BC:F1:D3:EF:AC:D2:28:62:96:52:31
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 01A002B89136F0DCB82FA0914F1FAEEAFA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 068D
Signing time: Sat 15 Aug 2026 00:00:45 +0000
Manifest this update: Sat 15 Aug 2026 00:00:45 +0000
Manifest next update: Sun 16 Aug 2026 00:00:45 +0000
Files and hashes: 1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: 9jm+u0CuJatxtHHEpYgYcRMNJEs+oVAhAkmlVm820U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:91:36:f0:dc:b8:2f:a0:91:4f:1f:ae:ea:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Aug 15 00:00:45 2026 GMT
Not After : Aug 16 00:00:45 2026 GMT
Subject: CN=c07381d5e985092798bcf1d3efacd22862965231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:47:ca:d2:84:5c:48:97:43:2c:08:6e:a6:
98:4c:71:2e:be:c4:a9:85:dd:1c:77:ec:c3:2a:3c:
27:d2:a7:b5:fb:00:04:a9:27:5e:55:79:66:d9:dc:
52:2d:59:20:9a:14:0e:d2:ea:75:b9:7a:20:a3:b7:
27:f4:d9:a4:0b:b1:92:48:84:35:ac:cb:2b:99:8b:
6a:d2:d0:6b:4d:ac:97:5c:7a:6b:1c:b0:b7:9d:9b:
b9:e9:a5:52:2b:f6:94:58:5c:5e:87:4d:4b:1d:a2:
92:34:2d:e3:8c:51:84:d7:bb:5b:4e:9f:2a:fa:0a:
15:d2:b0:c0:98:15:60:ba:1b:fb:e7:27:83:23:c0:
ab:1a:4b:69:2a:61:ee:f6:97:8b:5f:e3:37:1d:4b:
25:d9:62:33:2a:e3:f1:89:59:a5:04:f3:2a:d9:37:
06:b6:61:17:6d:54:08:ec:55:62:8a:49:9c:27:50:
f3:63:29:ac:34:ae:f2:68:80:b8:a6:5b:53:2c:cf:
a3:a1:25:ab:49:01:58:b6:09:b2:3c:6a:29:15:62:
03:21:86:3a:1e:9d:d4:9b:9c:b5:e8:2c:5b:f1:c4:
ab:ae:2c:89:63:ca:57:fa:7e:77:62:09:b4:aa:4a:
d8:9b:77:44:22:08:7d:d7:da:c3:aa:82:29:e0:27:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:81:D5:E9:85:09:27:98:BC:F1:D3:EF:AC:D2:28:62:96:52:31
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:68:eb:08:73:37:75:5a:3d:49:b8:7a:33:85:49:bc:90:
b1:4c:c5:71:87:4f:34:57:d7:20:e9:13:b7:d8:d2:c6:ce:80:
b4:47:c2:a2:12:88:b4:6f:92:b7:22:d9:7f:0e:b5:7f:55:ab:
76:ac:f1:ba:d5:7b:2b:b4:2d:d2:dc:34:a3:3d:b6:ea:88:1a:
76:76:d4:85:ea:b0:45:ed:15:e8:bb:d1:d3:ac:eb:b2:ce:7f:
4e:b4:87:cc:13:ce:48:5f:b6:9a:8b:bd:f5:07:3d:11:59:d2:
97:bf:02:93:aa:98:c1:cb:15:37:77:be:93:0b:de:25:6e:44:
c6:ee:a3:eb:b7:cf:84:4f:ac:58:d3:52:bd:a3:f7:76:7d:a4:
92:af:63:68:3f:4f:c6:61:c7:77:ef:0f:6c:51:f1:0f:13:28:
35:ba:6b:b0:80:c3:14:24:40:c5:b1:8c:c3:13:3f:73:db:88:
13:3c:a5:56:34:12:f8:4d:92:24:e0:04:42:1f:6b:c7:c4:e2:
e0:46:be:4e:18:a4:86:9a:0b:52:9d:1f:b2:40:86:96:72:51:
26:2e:1d:2c:07:05:4d:b3:23:98:bc:24:c1:58:80:cc:e5:de:
b2:1c:bb:b8:70:bc:4d:33:4f:bb:dc:aa:53:a0:9b:c8:2c:71:
4e:72:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:23 2026 by rpki-client