Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: KaJbO5zDzdyzkuS02LzItTqhhv1kV3IkHjeHscEEW0g=
Subject key identifier: CE:94:97:66:8A:34:2E:D7:B0:8F:F3:23:36:22:5B:76:BB:1A:B7:A7
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019FA296D60D8E21F06776111C3A1C68FF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1290
Signing time: Mon 27 Jul 2026 08:00:21 +0000
Manifest this update: Mon 27 Jul 2026 08:00:21 +0000
Manifest next update: Tue 28 Jul 2026 08:00:21 +0000
Files and hashes: 1: 9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa (hash: wIGBfgZvSDRH5lC7Lt7B+TOaBYWXsMviGDk54gwrBVY=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: jiwxzo3tOvHh2FU5eJtTH3IdxxCgejsSLygvFpIqiq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:d6:0d:8e:21:f0:67:76:11:1c:3a:1c:68:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jul 27 08:00:21 2026 GMT
Not After : Jul 28 08:00:21 2026 GMT
Subject: CN=ce9497668a342ed7b08ff32336225b76bb1ab7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:93:60:7f:60:66:53:18:50:57:84:a7:f3:
ec:a6:2c:99:bf:64:b4:b5:73:2f:8f:0d:7c:81:6e:
44:31:67:19:c0:ba:0a:55:00:75:55:80:07:3c:1e:
d6:92:25:d3:cf:58:d7:d3:44:dd:92:93:fe:64:7a:
3f:07:a4:ce:51:24:7c:3b:b6:5d:a5:2e:37:ff:68:
77:19:59:2f:94:dd:57:eb:60:9b:91:17:05:eb:f9:
38:b5:0e:8e:a5:5d:f2:23:6a:0c:83:34:3a:08:8f:
c8:24:78:56:2c:49:9b:a7:7b:b8:72:d0:88:66:4d:
c0:63:d7:07:95:f0:0e:bf:17:21:2f:80:c0:4f:fe:
17:90:5f:3b:d2:3e:e4:19:24:66:f7:15:63:b3:69:
45:08:44:2e:51:6f:88:07:88:cb:d2:af:45:c0:7b:
b3:cf:17:d5:7c:84:4b:24:30:9d:28:dd:4d:ba:d6:
d6:ad:e8:4b:0a:c0:6c:54:27:7e:e9:e4:5d:62:a4:
77:fd:25:3e:80:cf:c4:d0:84:79:86:dc:4f:d8:92:
0a:f4:df:9a:d2:0d:87:54:7d:4b:b1:e6:11:d2:6a:
82:58:9b:36:8b:49:d7:ad:e5:86:cc:3b:2b:a0:fe:
18:46:f2:e6:c7:d2:67:a5:1f:f8:94:6a:d8:65:28:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:97:66:8A:34:2E:D7:B0:8F:F3:23:36:22:5B:76:BB:1A:B7:A7
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:83:79:d2:b7:c9:5e:5b:8a:9c:51:ce:93:b2:dd:8f:53:ed:
b5:43:71:60:16:54:75:ae:a1:d6:eb:79:cb:da:01:b5:9d:04:
48:5e:ac:46:65:67:65:ad:8c:47:ba:9e:01:a5:a5:b8:51:e7:
62:25:90:ee:6d:70:88:31:cd:db:eb:88:3c:1e:f9:46:22:58:
e3:94:66:29:99:c5:f9:8f:b1:b3:76:67:d9:5d:12:87:c8:48:
44:02:62:76:b9:f8:0c:13:21:c2:d2:8b:7a:6b:f1:86:bd:3b:
e8:70:a5:11:4b:24:08:5b:02:d7:3b:b3:b2:e0:79:1f:8f:f8:
6a:31:3a:6c:67:9e:38:03:8b:96:b6:e8:13:0e:79:d1:e6:a2:
cc:91:36:47:78:87:e0:8e:88:f4:30:e8:5d:47:0e:6f:7c:8f:
31:69:da:5f:ab:74:63:d7:d3:ec:0c:73:1e:95:20:f0:1d:5d:
7d:a7:6e:a4:2d:84:45:e6:8a:9f:23:35:13:e8:c9:ae:76:ae:
10:e4:bb:73:28:09:da:da:1e:53:6b:9a:3b:87:07:cf:f3:d0:
09:0f:da:cd:35:76:58:93:ee:ae:f3:c1:bf:c0:93:66:c5:96:
c7:03:db:5b:ae:2b:be:10:30:81:91:d7:25:67:af:91:3f:1c:
06:6d:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:20 2026 by rpki-client