Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: pJcFTxQH4oKEdm73QEPpASHlGdDN4sgwMz4FFEfMisY=
Subject key identifier: 63:B0:C1:D9:2B:81:6D:07:67:09:B1:77:81:A8:8A:92:A9:59:0B:1A
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019FA184C0F1BC41D6C4048449132928273A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0CEB
Signing time: Mon 27 Jul 2026 03:00:59 +0000
Manifest this update: Mon 27 Jul 2026 03:00:59 +0000
Manifest next update: Tue 28 Jul 2026 03:00:59 +0000
Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=)
2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: BfZjunxDeroaU8q5b39Gd2Yb031BjNdD5GaRP8UoYrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:c0:f1:bc:41:d6:c4:04:84:49:13:29:28:27:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jul 27 03:00:59 2026 GMT
Not After : Jul 28 03:00:59 2026 GMT
Subject: CN=63b0c1d92b816d076709b17781a88a92a9590b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:fb:97:21:b8:88:93:29:dc:77:f1:a3:56:
43:69:10:1c:4e:f6:73:89:15:ae:25:d6:70:0a:da:
d9:85:ef:af:34:15:05:d7:ff:ce:21:6c:87:a0:ba:
12:34:78:8e:6b:4e:d2:c4:bd:b7:7b:2b:29:72:49:
67:fd:b1:be:85:83:93:9b:23:a9:2b:a6:4a:87:5c:
bc:a0:46:9b:3f:be:b9:d6:4b:56:f8:76:76:a1:7e:
88:b3:0d:81:b9:5f:43:65:56:84:c3:93:46:06:51:
18:96:e4:3b:98:67:71:c7:57:c9:98:57:a2:51:d7:
5a:2e:57:ac:4b:e8:39:17:77:64:e5:d0:75:21:5e:
62:07:f5:80:05:ab:55:7a:ae:69:ae:af:ca:7c:37:
33:b9:f7:9d:ed:28:c2:6c:82:61:b1:43:b8:4e:21:
53:86:ff:55:c0:9b:42:17:fc:74:a8:2d:2e:23:94:
c5:f3:ef:56:b7:c1:22:e7:ac:af:d0:51:68:61:68:
49:ae:ab:c6:ef:58:72:2a:01:68:15:7f:07:98:14:
29:13:80:7b:ef:7e:64:14:47:e4:fa:06:1d:0f:54:
33:5f:6f:75:36:75:d5:df:81:ff:95:08:c9:41:d6:
de:88:01:f0:3f:7b:be:a8:39:77:91:2d:cf:73:bc:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:C1:D9:2B:81:6D:07:67:09:B1:77:81:A8:8A:92:A9:59:0B:1A
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:db:12:ff:f9:2c:52:5d:ce:61:54:5e:64:13:fe:a3:1e:8b:
61:5c:d2:23:ed:ca:5f:31:c9:e2:29:ba:83:02:8b:5b:d7:13:
81:a1:bf:9d:78:47:59:45:aa:88:bb:e9:b9:34:d5:3f:1a:6f:
0f:f9:2d:07:0e:98:09:ca:b5:9a:90:96:dc:2a:1a:a8:72:62:
4d:19:60:46:87:d4:59:d5:ba:9c:e8:6f:51:81:b6:ad:0d:f2:
8c:17:dd:03:64:cc:54:83:1d:d2:f6:5a:51:b3:5d:7b:df:3d:
a7:c5:4a:9e:cb:f9:e3:c5:c9:61:84:ef:fb:e1:eb:d9:94:91:
a9:12:78:a0:a0:18:a9:1c:97:6c:4f:f7:a4:43:14:43:df:7f:
c5:3b:76:39:1c:6d:72:07:f3:4c:43:61:73:b8:cb:e5:01:7e:
30:6a:53:d5:ce:e6:51:af:aa:be:77:a6:91:56:60:12:4b:d2:
a4:4f:e6:4c:ec:09:95:ac:c8:5f:8f:81:1f:54:9c:af:0b:e2:
0e:43:b4:d1:83:47:d1:e4:42:12:3b:f9:af:0e:71:2d:af:31:
20:1a:31:ae:fe:82:b9:80:d6:73:ad:6b:37:54:2b:a1:20:84:
06:c0:3e:e5:07:8b:bf:6b:a2:3d:d1:b5:0d:0e:10:c3:e1:0b:
e2:54:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:18 2026 by rpki-client