
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
File: nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft (raw, json)
Hash identifier: JmGlZA6PQIpXzRmyBYBLAf99Jtlp5w6ZOGkEo15+/wk=
Subject key identifier: 97:30:84:11:E1:F7:02:93:4F:26:B9:14:16:91:50:8B:FC:92:78:AD
Authority key identifier: 9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
Certificate issuer: /CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Certificate serial: 019FA1F26F113E2BB68BC507F6C4D8920691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
Manifest number: 3D
Signing time: Mon 27 Jul 2026 05:00:47 +0000
Manifest this update: Mon 27 Jul 2026 05:00:47 +0000
Manifest next update: Tue 28 Jul 2026 05:00:47 +0000
Files and hashes: 1: L0tuCjuCLhjPSF5HtdtxLxQpvLk.roa (hash: 9nbYmoJhoa2yk/1ARwX2HbvkSwOAKvIa7oZoUwwmhUA=)
2: nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl (hash: itU9TIuO29+W+8lVR/dDhz9PDzrSrl9E1j/ugtSW/6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:6f:11:3e:2b:b6:8b:c5:07:f6:c4:d8:92:06:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Validity
Not Before: Jul 27 05:00:47 2026 GMT
Not After : Jul 28 05:00:47 2026 GMT
Subject: CN=97308411e1f702934f26b9141691508bfc9278ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:00:ac:f7:68:d1:fb:e7:c2:36:8b:af:f4:
e5:f2:09:f4:0d:d2:c0:84:dd:18:c4:e4:a4:6f:b9:
3a:d5:d4:2b:48:c6:fe:09:4a:14:32:02:51:66:eb:
95:f5:a2:c9:0f:0f:3d:e2:1f:d4:ab:9a:b7:c1:13:
9e:77:f5:18:27:b5:f9:2d:f4:5c:20:5d:d8:17:4d:
05:32:63:a6:c5:27:ac:68:ee:d4:ee:f6:32:85:6f:
1e:40:26:d1:e9:15:00:e8:de:07:79:44:03:1f:44:
e8:a6:7f:97:b4:0c:83:40:73:05:3f:03:b1:40:3b:
7c:01:f9:55:c9:37:d6:d3:e7:39:a6:af:7f:ca:54:
2b:ff:98:69:24:af:0c:ce:2a:16:31:15:b6:0e:82:
65:aa:2a:34:48:5b:46:15:28:55:79:5d:e8:8e:4b:
24:99:8b:75:46:8d:b1:ae:f1:d4:3a:58:c0:f8:ba:
5f:ca:09:da:92:f4:66:1b:32:ba:96:6e:74:d2:3e:
f1:54:a6:8b:69:5c:c3:74:4f:39:f5:f0:45:c2:b4:
19:5a:9a:34:ac:5f:aa:ad:7c:25:3a:a8:92:75:c6:
e5:8f:00:47:9b:ad:d0:7f:d7:54:95:a9:10:19:1f:
77:dc:0e:ca:07:b7:a8:c6:e4:dd:a1:4c:8b:75:a1:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:84:11:E1:F7:02:93:4F:26:B9:14:16:91:50:8B:FC:92:78:AD
X509v3 Authority Key Identifier:
keyid:9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:08:29:c9:d8:bc:e8:95:6f:1b:30:84:04:e8:4a:46:2d:
cc:0a:28:80:39:c6:1a:fc:7d:1b:3b:56:c2:9e:13:66:3a:89:
01:38:44:13:fa:50:5b:bc:44:f3:3a:09:96:f0:ff:99:d6:d1:
ad:d5:bd:7b:51:6f:5f:08:16:0f:5c:59:a9:b4:40:c7:54:45:
99:53:60:ab:f9:c6:c6:5d:e8:c0:c8:35:71:2c:10:cb:b7:ab:
59:d9:98:67:67:10:e5:a6:6a:54:73:4d:16:eb:45:1b:bd:61:
83:7d:09:74:4d:2c:28:1d:f9:3d:00:ef:15:8d:aa:36:81:81:
0d:05:e7:2b:66:fa:56:3a:3c:2f:4a:b5:bd:c0:b6:a2:2e:d6:
04:32:3f:98:94:2e:13:61:8a:98:a7:23:1d:d0:bd:ef:00:e5:
5c:59:94:99:20:a7:16:fe:13:4b:98:b8:0b:30:49:c4:c8:c0:
c1:74:7e:d2:68:1e:96:65:e7:33:1d:e3:7a:8b:d2:ac:36:ce:
94:b3:ec:27:05:b7:30:ff:fc:2f:c3:84:16:07:2b:fa:52:57:
fc:da:61:46:4b:c0:83:1a:5d:3c:d2:9e:ae:ad:bd:22:74:14:
a9:34:96:e9:a9:51:70:bc:1d:83:35:19:5f:d8:96:91:5c:cb:
66:ca:1f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8m8RPiu2i8UH9sTYkgaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNDZmNzE1OWRiYTg3YWNiMmY2OTkxZjZiZjU0NWYzZTBk
MWRiZjIwHhcNMjYwNzI3MDUwMDQ3WhcNMjYwNzI4MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg5NzMwODQxMWUxZjcwMjkzNGYyNmI5MTQxNjkxNTA4YmZjOTI3OGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOgArPdo0fvnwjaLr/Tl8gn0DdLA
hN0YxOSkb7k61dQrSMb+CUoUMgJRZuuV9aLJDw894h/Uq5q3wROed/UYJ7X5LfRc
IF3YF00FMmOmxSesaO7U7vYyhW8eQCbR6RUA6N4HeUQDH0Topn+XtAyDQHMFPwOx
QDt8AflVyTfW0+c5pq9/ylQr/5hpJK8MzioWMRW2DoJlqio0SFtGFShVeV3ojksk
mYt1Ro2xrvHUOljA+LpfygnakvRmGzK6lm500j7xVKaLaVzDdE859fBFwrQZWpo0
rF+qrXwlOqiSdcbljwBHm63Qf9dUlakQGR933A7KB7eoxuTdoUyLdaFOuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcwhBHh9wKTTya5FBaRUIv8knitMB8GA1UdIwQY
MBaAFJ1G9xWduoessvaZH2v1RfPg0dvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblViM0ZaMjZoNnl5OXBrZmFfVkY4LURSMl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iOGQzMTEtY2FjYi00Y2NhLThjNmQt
NmM5MTgxODdmOTYyLzEvblViM0ZaMjZoNnl5OXBrZmFfVkY4LURSMl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iOGQzMTEtY2FjYi00Y2NhLThjNmQtNmM5MTgxODdmOTYy
LzEvblViM0ZaMjZoNnl5OXBrZmFfVkY4LURSMl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPooIKcnY
vOiVbxswhAToSkYtzAoogDnGGvx9GztWwp4TZjqJAThEE/pQW7xE8zoJlvD/mdbR
rdW9e1FvXwgWD1xZqbRAx1RFmVNgq/nGxl3owMg1cSwQy7erWdmYZ2cQ5aZqVHNN
FutFG71hg30JdE0sKB35PQDvFY2qNoGBDQXnK2b6Vjo8L0q1vcC2oi7WBDI/mJQu
E2GKmKcjHdC97wDlXFmUmSCnFv4TS5i4CzBJxMjAwXR+0mgelmXnMx3jeovSrDbO
lLPsJwW3MP/8L8OEFgcr+lJX/NphRkvAgxpdPNKerq29InQUqTSW6alRcLwdgzUZ
X9iWkVzLZsofUw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:21 2026 by rpki-client