Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: iBXV0n7cNLgK1AWRgBK1brGnU02K63/YB948rLoYZgI=
Subject key identifier: 93:15:B5:73:1E:32:79:80:9A:BA:1B:09:F8:62:88:73:E4:EF:80:CC
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019F860D2F8F1037E83C5A11E4AA6D5A4B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0A15
Signing time: Tue 21 Jul 2026 19:00:38 +0000
Manifest this update: Tue 21 Jul 2026 19:00:38 +0000
Manifest next update: Wed 22 Jul 2026 19:00:38 +0000
Files and hashes: 1: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: REGkLgP8hMXHdMnPEXH2ZvVoIWcoy1XDaOCAKI/v1ac=)
2: rZZQYoQ-ii1ULymg1gCODzd0s4o.roa (hash: sgyKwwfW2KwaDdlaRSgHtW+s4rE3CgoGYd/sjsljqxY=)
3: vJI0zjSupe8L2btdgObTHN_0uMI.roa (hash: t1tDTpvOlNLAVNfscJvGfDoocyToS/t9xpe8zMWNV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:2f:8f:10:37:e8:3c:5a:11:e4:aa:6d:5a:4b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jul 21 19:00:38 2026 GMT
Not After : Jul 22 19:00:38 2026 GMT
Subject: CN=9315b5731e3279809aba1b09f8628873e4ef80cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:3e:08:1d:29:64:0a:50:e0:a2:09:ac:3a:
fc:fb:c3:46:43:4d:c2:a8:46:38:76:d8:5c:6f:4a:
3e:d1:e5:2d:35:0c:c3:1c:d0:29:48:3c:da:6d:90:
eb:39:fb:7e:74:93:4a:ae:cc:f5:75:32:86:b5:04:
64:7f:ee:ee:39:e0:e8:cb:57:75:75:f0:77:a5:c9:
79:4c:96:e9:7b:6c:16:4e:a6:6e:95:6c:c0:c5:93:
9f:e4:d3:db:1f:74:f3:52:5e:7f:a1:13:15:48:0f:
fd:a0:19:13:7c:f7:50:bd:35:9a:a0:df:60:16:8b:
b5:2b:b7:34:7f:b2:76:53:6b:b2:4a:68:35:c5:8c:
3b:f5:5b:5f:60:f1:b6:b1:45:97:f4:02:fb:70:00:
94:03:26:84:34:15:d1:94:8a:98:22:f2:fd:d4:51:
7b:7e:0d:c5:25:d9:1d:d9:4d:b2:ca:38:94:e4:00:
ef:78:56:05:93:b3:4d:6c:3b:6d:58:0e:97:9d:db:
45:5c:64:e4:be:bc:e0:af:64:d1:60:f5:a5:67:be:
97:0f:d1:24:59:ef:6c:62:ed:d2:76:5e:c0:df:1c:
d1:c2:0f:d5:c0:d1:75:df:bf:9e:08:d7:84:5d:1d:
25:3e:70:d9:09:c4:e8:3e:0e:21:d0:28:8c:1a:8d:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:B5:73:1E:32:79:80:9A:BA:1B:09:F8:62:88:73:E4:EF:80:CC
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:37:91:e6:00:de:f2:3a:35:e3:60:31:3d:4c:fe:78:88:81:
d7:e0:b8:5d:04:f7:dc:35:cb:58:d6:76:5f:09:c0:93:90:b8:
8c:54:f0:fd:68:18:5a:f1:5e:ed:f0:b9:2e:b3:7c:9b:d4:00:
2e:fa:d1:dd:24:c0:9e:61:14:a1:94:69:45:22:5a:7d:39:d0:
64:92:02:cb:72:5c:5e:d4:0c:3b:bc:d8:bd:57:6b:ab:47:7a:
e6:45:11:14:0e:20:50:c3:70:b2:dd:b7:ed:c8:bb:2a:7d:87:
14:b5:31:5b:a3:bb:cc:6b:9c:3b:35:1b:d3:ae:15:1e:11:a2:
88:dc:c1:e9:81:82:79:ed:41:72:9e:e0:72:b3:2c:c0:0f:79:
77:51:eb:92:40:b6:28:ec:08:14:70:24:b4:18:27:2c:5d:06:
5c:7e:f8:8a:6b:09:10:74:d4:29:df:0a:2b:de:f9:ac:db:b1:
9c:f3:81:78:3a:45:ac:7d:38:ea:cc:19:06:f4:1e:10:16:07:
46:69:48:cb:d2:0c:d4:02:17:48:d7:79:5a:05:49:c8:f0:96:
b0:00:3d:50:8e:87:64:f0:26:18:49:cb:20:17:77:a3:4c:3f:
4f:c7:67:13:b7:b4:52:f5:38:9d:0c:f3:fc:e4:76:7f:1e:c9:
79:33:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:57:21 2026 by rpki-client