Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: /ct0P7DdlBCdcJrcZ69jmQbh4spqr77HMtHL7Gg0hZs=
Subject key identifier: 65:84:15:6E:5D:55:48:8F:68:86:2B:CD:22:D6:D6:51:B9:F4:18:8E
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019F845634706E15A4F1FE6C63AADFF48F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 190E
Signing time: Tue 21 Jul 2026 11:01:09 +0000
Manifest this update: Tue 21 Jul 2026 11:01:09 +0000
Manifest next update: Wed 22 Jul 2026 11:01:09 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: 16zdCQl7bP9Idsp4LcDMmy5ksQDCNAaoHBJxW9m6rUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:34:70:6e:15:a4:f1:fe:6c:63:aa:df:f4:8f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jul 21 11:01:09 2026 GMT
Not After : Jul 22 11:01:09 2026 GMT
Subject: CN=6584156e5d55488f68862bcd22d6d651b9f4188e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:f9:cd:a3:97:53:a2:e8:53:92:41:c6:5d:
52:32:29:98:b2:e2:9d:54:ba:45:48:d0:f4:c3:80:
34:e5:6f:d4:a8:a5:24:7a:50:39:49:85:45:f1:3a:
55:4b:47:dd:c0:45:11:ca:bd:ed:02:3a:dc:88:3b:
0f:68:fe:3b:9b:4a:f3:fc:c2:d2:c9:01:bd:09:04:
79:60:7d:8c:e4:c1:59:18:68:47:13:f0:4b:bc:56:
5d:c8:e8:b4:82:dc:40:e9:26:4c:59:79:50:b5:49:
7c:cf:27:4c:30:2a:c6:4a:63:12:0a:5b:24:c6:dd:
ba:3c:ba:da:ea:fa:07:33:6a:ac:43:4f:16:34:fe:
fb:af:73:db:7c:17:1a:23:88:2b:99:c9:85:f6:66:
af:3e:91:4b:42:9b:8e:02:75:2a:f8:e7:0f:33:f4:
8c:3b:88:8f:7a:0e:20:89:21:45:98:da:73:b5:ea:
d8:c2:a3:38:e7:84:8a:96:c5:21:1c:1f:11:b2:84:
13:85:c8:ec:9c:da:9d:4a:af:30:c0:d6:61:74:ab:
6e:fa:6e:45:5a:8f:51:65:7a:aa:3d:37:5e:0f:c1:
71:3c:c7:41:16:7b:51:c5:38:16:95:9e:22:47:28:
8b:7a:95:d2:0f:5d:90:64:94:ff:cc:71:30:dc:f2:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:15:6E:5D:55:48:8F:68:86:2B:CD:22:D6:D6:51:B9:F4:18:8E
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:3f:1f:10:43:7a:16:8b:6a:e2:fb:4a:71:44:26:7e:cd:
4e:fd:3a:41:c4:03:62:2c:0f:c6:4d:9a:f3:cc:b4:af:c7:0f:
f6:a8:d6:9a:74:39:b3:05:ef:ab:dc:19:05:ba:a6:54:b5:36:
bd:1b:6a:7f:c0:ba:43:2e:d2:5f:34:d8:76:63:09:c8:ce:1a:
e6:25:db:d8:df:9f:65:f2:e5:aa:bc:b2:93:1c:d3:b6:52:6f:
1f:8e:dd:6f:29:f1:d4:37:7e:a4:a5:a9:c6:bb:4c:11:8a:9d:
50:ea:78:67:f0:3a:ee:6f:aa:95:81:7d:52:d4:93:eb:1d:08:
65:1e:6b:3f:b3:79:31:92:a7:81:8f:bd:63:fb:c5:4b:65:f5:
eb:c1:04:e4:2e:c1:cd:c6:fa:62:90:6c:1b:b5:18:ca:e5:45:
8a:33:f9:40:56:29:14:3f:8a:18:fb:bc:0d:74:42:db:96:e4:
88:fd:8d:7c:f9:86:57:89:bc:5a:cb:1e:b9:27:d3:63:d9:2b:
c3:d8:38:e2:f3:32:ea:1d:c2:4a:bf:8b:df:c2:17:0f:0e:3b:
3d:23:54:93:96:5f:3d:9e:3a:e6:ab:a0:67:e7:b2:a9:fe:97:
db:46:e6:61:dc:e2:8d:6a:17:e1:6d:78:4a:2a:a6:9d:a6:74:
d6:66:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:36:28 2026 by rpki-client