Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: vWPVvl9XzCIKhV9mGT2rkjGFV11uxYkKnlYAU9K2E1k=
Subject key identifier: BA:58:27:62:2A:49:EB:B2:C4:E5:76:25:07:DB:9E:53:15:5C:E6:D2
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 01A019AED814E4625F52E065E4BC3D0BA3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0CC0
Signing time: Wed 19 Aug 2026 11:01:23 +0000
Manifest this update: Wed 19 Aug 2026 11:01:23 +0000
Manifest next update: Thu 20 Aug 2026 11:01:23 +0000
Files and hashes: 1: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (hash: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: z8AxCY4UvU7HRZH6KpEKTzBs5perv4HKMkJ+sol3izE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:ae:d8:14:e4:62:5f:52:e0:65:e4:bc:3d:0b:a3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Aug 19 11:01:23 2026 GMT
Not After : Aug 20 11:01:23 2026 GMT
Subject: CN=ba5827622a49ebb2c4e5762507db9e53155ce6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:38:c7:dc:4b:94:7c:31:63:68:7b:69:25:
93:8d:a7:b4:79:6c:98:b5:c7:f4:53:1c:b4:3f:60:
30:ed:24:df:84:7b:7a:ef:85:fd:4e:37:16:e1:fe:
70:7b:3a:e5:66:c7:d2:c5:57:8b:f2:a9:9c:15:b6:
1f:37:28:41:5c:66:20:1a:8b:f5:01:c5:28:83:0d:
f7:da:63:fe:99:3a:2f:af:fe:53:04:a8:c1:d7:26:
3f:26:34:1b:4a:79:f9:30:cc:82:81:86:2d:0d:ff:
43:10:e8:0a:51:75:ee:95:77:22:09:de:0f:c5:33:
82:ba:bd:32:df:99:a6:31:8e:f8:09:c6:d2:62:a2:
26:16:9d:ed:b9:fe:63:c5:66:ae:c1:9c:32:fa:d5:
45:b2:f2:78:e7:99:ec:a3:58:85:f5:6c:90:1c:64:
b5:0c:b6:24:bb:34:99:62:f1:ff:e2:fe:e3:cf:2e:
9d:95:64:a2:8e:0c:b9:e1:64:fd:33:cd:29:28:db:
a4:db:49:12:1e:33:63:51:19:f7:82:c5:a4:75:c0:
7d:61:67:a3:e7:3d:ce:41:72:fb:dd:53:b5:09:5c:
fc:94:c9:1f:64:45:7b:d1:23:54:a5:ad:5f:f5:5a:
f4:1f:d0:8f:eb:ac:c6:02:c6:b9:a4:4d:7f:71:90:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:27:62:2A:49:EB:B2:C4:E5:76:25:07:DB:9E:53:15:5C:E6:D2
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3a:54:81:09:04:37:a2:23:78:67:71:0b:df:d3:fc:5d:75:
02:de:d2:c4:85:75:23:70:9c:8d:f8:a7:14:fc:1d:ef:64:b4:
0d:59:a4:6d:65:89:16:eb:83:9d:de:33:e2:9d:4d:7d:03:46:
80:fd:b2:d4:d4:62:b0:b2:97:a6:bd:f2:95:8a:49:52:64:73:
24:4d:f8:7e:58:fc:5a:74:cb:b8:fe:18:82:19:9c:22:01:73:
3a:d8:d9:32:b8:32:78:ab:3b:de:0f:90:6a:90:c4:8a:68:ae:
94:18:7e:0d:13:37:60:ad:7b:b2:ab:78:8d:a6:59:e5:48:33:
c8:07:e8:50:fd:c7:22:87:f4:5f:6e:4d:db:aa:ce:ed:c2:a5:
73:89:b8:3c:14:9a:b4:57:10:78:3d:a2:fc:20:31:7a:08:6b:
95:ea:70:56:86:d1:78:2c:2b:c5:c1:4b:c8:79:fe:3d:d4:8d:
5e:da:a9:3f:67:c1:38:69:cd:2b:72:99:23:51:c3:4c:98:a4:
d2:25:78:14:e3:a1:9b:34:e5:33:49:79:4c:05:a3:22:11:4c:
af:65:6b:20:8b:2b:bb:f5:bd:93:a0:e2:a2:5a:db:33:f0:a5:
67:b5:67:b1:d2:66:12:e7:5d:66:05:95:01:18:49:4b:fa:dc:
50:f5:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:30:43 2026 by rpki-client