Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: gsMztfmWL1ZN04fdjkrMdJM4DzIQ8bvOfa2tg6mykv4=
Subject key identifier: 14:77:00:1F:BC:B7:C9:57:C1:2E:A6:D5:B2:9C:35:DC:D9:F4:3E:98
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019FA14D36AD85C60AC480593EC807171BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0D02
Signing time: Mon 27 Jul 2026 02:00:19 +0000
Manifest this update: Mon 27 Jul 2026 02:00:19 +0000
Manifest next update: Tue 28 Jul 2026 02:00:19 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: mnHxUawPaHJTg3b8FywCXSXjixMix36m/h7PzBjtKkw=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:36:ad:85:c6:0a:c4:80:59:3e:c8:07:17:1b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jul 27 02:00:19 2026 GMT
Not After : Jul 28 02:00:19 2026 GMT
Subject: CN=1477001fbcb7c957c12ea6d5b29c35dcd9f43e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:82:3e:7d:dc:b5:4e:cf:2d:4f:96:2b:5e:
6d:9c:5d:a9:73:b2:82:f9:d7:d2:4a:eb:bf:22:10:
08:0d:ae:44:96:82:2e:69:92:b3:42:ed:09:8c:1c:
1e:98:05:7e:39:9b:5b:b9:03:3e:97:6d:c2:b1:37:
7a:98:25:b5:99:3f:1e:e7:01:5f:23:cf:e2:c0:68:
23:16:6e:23:54:f9:e5:78:05:51:2c:b1:08:0b:a6:
9a:53:fe:c5:62:90:17:ca:44:f7:86:55:b8:57:e0:
41:87:23:bd:5c:cb:bf:dc:16:39:ac:3b:53:97:20:
15:4d:3a:59:a0:d8:14:cb:12:18:98:7e:e4:48:f6:
4d:a6:72:a5:d7:23:36:48:0b:13:23:59:22:a3:40:
3f:79:42:a0:8a:35:aa:f9:ee:3f:ee:fc:78:f8:73:
89:23:3f:93:86:a6:4c:af:97:b4:3a:1d:34:e1:9a:
55:e2:7b:0e:eb:fd:25:27:78:9b:1c:8c:1e:14:44:
07:c1:69:fc:e4:36:fc:42:c6:78:82:9a:56:65:39:
f3:b4:20:2e:f2:a2:68:13:f4:81:01:97:14:bb:f5:
87:8d:a6:73:79:fb:53:19:2c:91:cf:c3:30:43:83:
70:8a:65:f6:13:ca:d0:f3:8f:c0:43:60:91:2e:ab:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:00:1F:BC:B7:C9:57:C1:2E:A6:D5:B2:9C:35:DC:D9:F4:3E:98
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:33:ce:17:21:c3:8b:bd:3a:bd:44:39:03:cb:36:36:09:
cd:eb:de:aa:77:ed:a9:bb:7c:4d:41:0e:59:fc:9e:1a:17:18:
f9:77:9e:aa:6b:1a:33:0a:c5:ed:68:6b:04:24:85:e6:ab:bd:
3d:4a:69:cc:32:6f:4c:7c:4c:cf:9e:e8:ee:6d:b5:4b:22:28:
f4:0d:bb:d9:af:bc:a4:af:2f:95:cf:d0:59:40:9a:18:cc:ee:
7b:ea:a3:c9:53:79:a1:41:24:6d:c4:0c:bc:35:ca:26:f3:87:
8e:74:2e:67:59:95:48:f4:e1:3e:48:a3:a2:c9:76:a6:1b:9c:
96:6c:cf:48:20:4c:55:05:d2:2c:43:fe:f4:cc:42:0d:3a:96:
65:7b:2c:66:19:19:10:bf:e3:d7:98:fc:14:f3:fa:15:8a:44:
81:ce:45:b3:c0:ff:47:b0:9d:2a:0f:1e:8f:65:d9:c1:6c:da:
d3:27:58:e2:a2:bd:06:e1:32:ad:29:11:9b:f0:d8:79:1e:e3:
4c:f6:06:3e:3e:b0:0c:5d:b1:80:23:46:81:5d:40:03:ee:0a:
97:0b:a2:92:72:96:aa:d1:0f:13:12:cc:c3:4c:f8:52:b6:eb:
78:ec:b9:c6:0a:8b:bc:49:16:d3:42:2e:15:74:22:af:c0:af:
ce:4a:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:10:47 2026 by rpki-client