Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: p9zl8GM7JV6uEGAknoP3ka3puzUVujerI9+XB11AnFY=
Subject key identifier: B7:CF:91:95:EB:A7:E4:CF:00:D4:2A:D7:31:87:9E:46:04:77:F7:A5
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019FA29748C0C83E8FD97CFC0664B5869478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 05C5
Signing time: Mon 27 Jul 2026 08:00:51 +0000
Manifest this update: Mon 27 Jul 2026 08:00:51 +0000
Manifest next update: Tue 28 Jul 2026 08:00:51 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: a9XRe49fk42lizVgp8dlp3DgNi77qYcss/rDAqsXoH4=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:48:c0:c8:3e:8f:d9:7c:fc:06:64:b5:86:94:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Jul 27 08:00:51 2026 GMT
Not After : Jul 28 08:00:51 2026 GMT
Subject: CN=b7cf9195eba7e4cf00d42ad731879e460477f7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:3d:b0:26:1b:0e:50:8b:ed:bc:bb:9c:5e:
3f:24:84:65:6b:f4:76:66:0f:f8:e2:06:8f:ae:7f:
2a:58:44:59:7c:16:c5:94:ac:0d:48:65:d4:d7:4f:
0f:74:0a:38:2e:23:e4:91:f7:eb:cc:cc:d2:43:90:
54:74:07:59:90:80:a6:49:25:27:eb:23:b3:98:30:
93:b1:a2:1f:b8:0c:99:94:0b:06:30:92:fe:2c:32:
01:47:db:aa:fd:a1:9f:06:08:95:cb:a4:b1:a2:01:
53:40:d7:09:73:70:0b:64:a1:a0:34:c5:e3:3d:15:
98:ff:5d:98:43:4a:7f:ec:df:33:73:8e:4a:ca:2d:
67:7e:b1:3c:e0:b3:8e:f2:04:87:b6:86:b5:d9:b5:
de:73:79:1b:fc:8d:9d:4d:5b:d1:13:c5:ad:3b:7c:
16:28:d7:09:c1:08:7f:2e:ee:c3:4f:37:d5:6b:e2:
bc:c0:39:3c:2c:cc:f7:1f:27:15:0c:01:05:85:b7:
02:94:55:6c:f7:45:e3:5f:14:9d:85:9d:b5:21:c8:
0b:9d:6c:19:88:95:10:88:c1:fa:b3:e7:51:a0:99:
bc:ae:68:66:23:6c:19:71:dc:4d:c7:65:9a:34:c6:
52:55:86:81:d7:2d:01:07:26:fa:9c:01:de:13:61:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:91:95:EB:A7:E4:CF:00:D4:2A:D7:31:87:9E:46:04:77:F7:A5
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:f7:9b:55:b3:5c:b8:dd:54:d2:e6:e9:ef:b7:51:41:ff:
51:0d:de:e3:3c:ea:45:e4:8e:f2:f7:36:63:54:ad:39:4b:e5:
e7:d3:bb:90:c3:a0:e9:4c:ad:4d:55:5a:79:5e:d0:27:4f:ac:
07:3c:15:83:1c:f0:65:b8:31:89:ac:e6:9d:8a:ea:08:08:4a:
1a:3c:b9:9c:52:43:3b:ca:0e:44:ba:62:95:87:55:75:c6:a7:
e3:01:90:ec:ff:a4:21:aa:0a:bd:fb:2b:7d:32:74:55:d9:f0:
3e:7b:83:43:16:0b:cd:0b:a2:08:f6:79:6a:68:44:f6:18:ef:
e6:30:c3:c1:98:07:d4:d5:96:4e:2d:69:9a:d2:4c:61:3b:bd:
5b:44:09:a7:d1:3a:96:dd:dd:a5:fa:a0:c5:00:03:72:6e:cd:
20:c4:6b:47:0a:44:ce:f5:e3:05:50:b4:ba:bd:e5:92:5b:e4:
92:47:a8:20:f2:89:77:4e:75:80:e0:1c:33:91:f9:26:81:6e:
62:28:ae:af:9d:24:21:9d:02:4d:b4:76:9b:33:69:c6:cb:96:
ea:e8:3c:d8:fc:57:d0:fa:0b:41:17:ef:c4:5d:3c:cc:dc:cd:
81:c2:f6:b1:8f:c4:b2:a8:b2:11:bc:77:9c:d5:7b:c7:e4:8e:
0f:15:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:05:27 2026 by rpki-client