Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: 8+miSNh7sE1hzE5XBaDG4VQwsARox9VBfcerRDAVckE=
Subject key identifier: 79:51:E6:8D:CF:BB:02:19:21:2D:D9:DB:6A:2D:57:EA:33:97:72:1E
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019FA1BC02F09FB56B569877B697C8196355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 05F2
Signing time: Mon 27 Jul 2026 04:01:20 +0000
Manifest this update: Mon 27 Jul 2026 04:01:20 +0000
Manifest next update: Tue 28 Jul 2026 04:01:20 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: EzmwCVp0SY18NYJfAmBEFyjRIHdjTsrzWqLZSbmrBCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:02:f0:9f:b5:6b:56:98:77:b6:97:c8:19:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jul 27 04:01:20 2026 GMT
Not After : Jul 28 04:01:20 2026 GMT
Subject: CN=7951e68dcfbb0219212dd9db6a2d57ea3397721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:22:63:68:c6:8b:f4:63:f5:c0:6f:f3:87:
e1:a0:19:fa:ea:8b:8c:a8:a3:17:e6:85:e6:a8:7c:
c3:3f:01:75:ec:8e:1b:28:e5:f2:e6:d7:b9:0d:a9:
7b:73:45:ae:87:c5:69:05:9b:fc:bc:e3:1e:63:cf:
4d:97:3b:f1:e8:7b:f6:9d:9e:f3:76:73:5a:69:c2:
0e:64:3b:ec:53:5f:5a:dc:f6:2e:88:b7:aa:f3:6e:
c8:65:55:21:10:55:cc:9a:99:77:63:21:58:eb:2d:
cc:1b:97:bc:c2:36:be:7a:15:18:0b:73:83:25:df:
e3:99:2c:f4:18:4b:ce:f4:25:7a:9e:43:83:a7:64:
a3:ad:d3:82:6f:1b:09:ac:89:3a:f0:96:f5:94:85:
cf:ba:1b:13:09:6e:25:d9:ee:c4:51:23:45:7e:cb:
07:5b:72:3b:b8:ea:45:53:bb:a3:a6:0c:a3:60:57:
ad:83:c2:9b:0a:ca:63:25:fa:ff:3c:e1:fb:13:b0:
13:82:c5:5d:d4:f9:1d:9a:33:3e:3e:7d:af:1c:00:
b7:f3:ee:d0:e4:19:a5:7b:43:86:db:c1:35:ee:63:
af:93:38:e1:fe:de:9c:e4:ac:4b:ee:17:60:39:d0:
6e:28:0d:82:0e:99:e8:65:72:66:1a:31:95:b5:49:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:51:E6:8D:CF:BB:02:19:21:2D:D9:DB:6A:2D:57:EA:33:97:72:1E
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:44:b5:fe:c0:f8:4e:c9:17:5c:7c:37:81:ed:a1:d9:a5:
2e:e9:67:7e:08:81:27:14:d1:4e:8c:ce:86:f3:07:a4:79:92:
27:b0:b9:1f:aa:95:5b:29:fe:04:d6:86:cb:a9:0e:53:fb:4d:
ba:bb:5c:03:17:ff:8c:73:3f:a1:55:b8:f4:1f:2a:58:e6:73:
c6:54:a4:0b:05:26:ee:e8:ea:5d:44:52:e1:bd:c0:fc:a9:05:
f9:46:16:7a:34:92:b1:93:76:80:9f:8f:77:4f:54:f1:f4:dc:
16:de:aa:1c:45:7b:d0:6d:cf:70:0f:55:fa:80:74:66:b7:96:
86:fd:3f:c1:1f:99:ee:3c:64:dc:cf:e4:05:dc:c4:f9:8d:fe:
de:84:69:ef:e9:be:5d:a0:fc:fd:d4:a3:d4:46:ad:59:1c:33:
57:67:58:38:48:b7:14:fd:09:0d:ed:fa:d3:38:3c:a9:77:6d:
95:32:5c:c9:c0:27:2c:5f:68:75:c0:78:21:7a:43:6c:b6:4a:
d4:5f:3d:95:5c:15:59:31:a6:64:7b:1f:96:0f:66:d1:9f:dd:
cf:ba:e1:f7:90:54:ae:12:40:2a:4a:af:d7:98:04:94:56:dc:
42:a6:f3:93:c0:eb:74:7b:3a:57:7c:d5:33:37:21:7f:6f:0f:
91:d2:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:20 2026 by rpki-client