Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: nw1Z4OzjmEmGhupwp66admtIM9n2qadCNKgrzmMpmbY=
Subject key identifier: F3:C9:26:BF:CE:E2:E8:02:0D:1C:9C:24:75:C7:38:E5:BA:B0:F7:2D
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 019F8644D03872B9DA0B80BEFB0372289E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 19BE
Signing time: Tue 21 Jul 2026 20:01:24 +0000
Manifest this update: Tue 21 Jul 2026 20:01:24 +0000
Manifest next update: Wed 22 Jul 2026 20:01:24 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: s+FhPJcLhEpMsOFrWSqgH6LbTNnevgL/XEFHBa/Qrqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:d0:38:72:b9:da:0b:80:be:fb:03:72:28:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Jul 21 20:01:24 2026 GMT
Not After : Jul 22 20:01:24 2026 GMT
Subject: CN=f3c926bfcee2e8020d1c9c2475c738e5bab0f72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:a0:9f:85:0e:78:49:71:d6:66:bf:2e:e2:
b7:31:3c:60:52:bb:da:b5:1d:31:48:7e:82:5c:ad:
8c:c4:5b:81:c5:90:df:29:d5:46:23:d0:d9:04:c8:
ed:9a:6d:d3:d4:b8:90:72:48:20:aa:40:78:9b:af:
80:39:69:96:1e:e9:eb:34:9c:5c:9b:80:7a:81:12:
f7:09:a3:1f:84:09:51:b6:4d:ee:16:26:12:73:5c:
b3:15:be:c4:82:d3:89:9f:14:f9:fc:67:58:65:ba:
0a:41:42:30:2c:a9:3b:39:12:81:a0:e8:62:ee:56:
27:48:c2:f7:53:3f:88:8a:1a:4f:36:b6:5a:fe:08:
63:0b:dd:42:a1:32:45:3b:9e:0b:9a:08:07:e3:64:
b8:0d:b0:1e:39:a7:29:97:7c:59:ed:f3:be:d7:b7:
c0:27:79:5c:c1:f5:c7:dc:eb:71:b9:15:53:3c:08:
cd:6d:5e:b8:95:7d:55:ff:d7:eb:83:e2:64:65:0d:
23:0b:06:98:34:91:64:56:59:22:16:39:0a:a2:40:
13:90:12:96:d8:4d:d5:1a:2f:a3:a7:83:64:6d:ca:
3a:08:7f:5a:af:45:db:f0:0c:54:73:ca:cc:fa:68:
6b:9a:13:00:3c:d4:e6:01:7f:9f:cc:f2:13:4b:62:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:26:BF:CE:E2:E8:02:0D:1C:9C:24:75:C7:38:E5:BA:B0:F7:2D
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:88:27:3d:d9:bf:a6:c3:d2:0a:86:a5:19:63:fd:2f:54:91:
64:e2:fd:b0:78:be:be:9e:4c:43:58:e9:89:66:5b:24:ef:89:
6f:49:01:bf:96:f3:81:52:1c:a7:f1:e7:8d:8c:af:a8:89:7d:
04:66:da:c8:df:43:85:96:cf:01:bb:21:57:ce:d4:5f:d2:c7:
78:d2:b5:68:16:62:b4:2d:cb:88:20:54:e6:c4:01:f2:9e:af:
32:10:d1:c1:b7:b8:1e:8f:19:74:92:47:71:3f:34:57:d1:ae:
34:f4:a6:7b:de:2c:65:43:20:a9:d0:dc:08:fd:09:1c:c3:87:
ff:a4:f3:4c:50:10:f1:4b:64:10:64:40:15:e9:5d:e6:9e:d0:
90:17:52:4d:db:2b:f5:90:80:89:90:34:44:51:4c:27:c1:ae:
c6:d0:72:be:b6:49:4a:62:05:53:81:37:fb:2b:c5:f5:46:74:
ba:5e:b3:3f:10:e5:d5:40:e1:7f:ec:35:a5:8b:6d:fe:26:e9:
59:41:b3:dd:44:04:7e:28:1d:9b:3b:83:d7:3b:f6:7a:d3:da:
d9:61:39:dd:0f:13:c6:87:7a:d0:33:19:2d:1e:8b:90:8a:d7:
45:37:a1:0b:84:7e:45:1e:b5:31:3d:00:a5:5f:97:eb:38:4c:
6f:ee:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:47:24 2026 by rpki-client