Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
File: nN3tdbQwkYCFNbSuvXq-X2oTveE.mft (raw, json)
Hash identifier: tD+T2xw8wd/w/ZDl70YJkXC1wF9CH4ywG0dmtGKSJp4=
Subject key identifier: B4:A5:1A:66:AA:18:AE:40:41:8E:E0:2C:A9:AE:75:CB:FC:A6:B2:6C
Authority key identifier: 9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
Certificate issuer: /CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Certificate serial: 019FA4BD6AF8E5AC7181D42B97D7F9EC14BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:01:44 +0000
Manifest this update: Mon 27 Jul 2026 18:01:44 +0000
Manifest next update: Tue 28 Jul 2026 18:01:44 +0000
Files and hashes: 1: Spy0ABfhiBR-fkb9ryyNj0gV224.roa (hash: Yn8A8PlzG90yhOJl/so573+Ah6OeGtK4m3ymx4hJJHo=)
2: nN3tdbQwkYCFNbSuvXq-X2oTveE.crl (hash: r67NfUpVlubwtRCSd8bxjvpUYb/dYEDHINptWCzUYxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bd:6a:f8:e5:ac:71:81:d4:2b:97:d7:f9:ec:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Validity
Not Before: Jul 27 18:01:44 2026 GMT
Not After : Jul 28 18:01:44 2026 GMT
Subject: CN=b4a51a66aa18ae40418ee02ca9ae75cbfca6b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:e4:5f:23:ce:4c:b1:3d:1e:60:84:55:00:
03:2e:a2:a2:a3:21:8f:92:b8:dc:91:a9:70:12:0f:
d7:86:ed:31:17:a7:8b:fb:55:de:bb:a8:c8:30:9a:
84:62:bf:14:33:cf:64:d4:27:05:d9:23:66:85:39:
26:8e:eb:87:9a:6e:11:4f:2f:35:35:a3:eb:7f:22:
e8:1f:64:84:40:98:2a:db:13:a3:8b:61:05:c5:57:
d2:ec:aa:47:69:b2:97:be:a0:80:3a:0c:d8:00:5e:
98:3a:92:c2:7b:aa:49:c3:2a:0b:5e:e8:ef:c4:e9:
09:d7:b4:11:b3:4f:8b:4f:24:fe:94:42:18:b0:03:
3d:ad:e9:17:e9:29:d4:27:fd:a6:e7:9e:04:fd:46:
94:bf:02:26:a5:16:f9:2f:3f:d8:55:dc:a3:34:1a:
9a:94:5f:d5:ae:57:8a:63:d0:d8:21:c3:f2:3b:39:
cf:23:35:c5:39:d4:d5:ab:fd:08:29:3e:4c:ac:c1:
43:06:fc:fd:97:a1:de:72:87:58:e6:db:4e:3d:0f:
5a:58:b5:e1:26:4b:9e:71:c8:73:fc:ab:8c:a3:c6:
6b:08:7d:af:f0:aa:b0:4e:08:0e:0b:e3:98:6e:49:
7d:81:93:40:ed:4a:62:c2:72:27:1c:ed:22:98:3e:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A5:1A:66:AA:18:AE:40:41:8E:E0:2C:A9:AE:75:CB:FC:A6:B2:6C
X509v3 Authority Key Identifier:
keyid:9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:51:ef:7e:2f:3c:7b:19:b0:b6:26:0f:a3:63:a6:0f:7b:8c:
21:6b:e7:68:74:ed:61:b6:40:0e:26:33:8b:b7:28:6c:c3:fd:
d9:9e:d6:aa:9e:18:8b:5b:fb:59:09:ce:69:8f:1e:b7:ed:56:
03:12:99:5a:7d:ba:11:4e:f8:a5:ab:08:14:29:1b:ab:d7:f9:
98:db:c7:af:6b:f5:c3:7b:aa:07:c3:77:9c:0e:ad:ef:91:79:
40:4d:84:83:c5:68:ee:64:42:2f:6b:ff:7f:65:ce:b9:c7:aa:
dd:a0:58:f9:d1:ee:9b:a8:cf:43:e2:be:97:02:88:9a:8a:dd:
04:1f:46:df:bd:85:db:94:73:03:1d:c8:b3:52:7f:57:b4:2f:
81:9c:94:15:89:41:60:05:07:98:92:47:91:61:ac:34:79:a5:
85:6f:a3:06:fd:78:3c:db:01:ad:6c:33:01:27:94:24:7f:37:
e5:79:54:f7:30:39:62:49:d8:08:79:aa:04:5c:45:73:4a:5e:
55:01:ee:21:21:63:ba:90:62:07:98:bf:23:47:a7:35:6d:47:
74:0c:8c:56:19:03:1c:7e:bd:12:98:88:d1:98:90:e9:6b:4f:
fe:72:65:2d:c6:26:ca:d1:77:3a:2f:fb:f4:f2:bc:6a:d2:62:
05:f7:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:15:57 2026 by rpki-client