Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: Cn3V93nj+cbEOcihrFImsjLnmIov8Rlsm7bdx2AIai0=
Subject key identifier: 6A:09:D2:4A:45:8B:44:45:CB:75:37:10:01:97:07:65:18:0B:60:66
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019FA0A8FD663625B76E9A1B76A316D08C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 10A4
Signing time: Sun 26 Jul 2026 23:00:57 +0000
Manifest this update: Sun 26 Jul 2026 23:00:57 +0000
Manifest next update: Mon 27 Jul 2026 23:00:57 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: Z+hhZsBkH99AvbTKyPs4E+oClvyt2dgQw0ZFo5KfFEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:fd:66:36:25:b7:6e:9a:1b:76:a3:16:d0:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Jul 26 23:00:57 2026 GMT
Not After : Jul 27 23:00:57 2026 GMT
Subject: CN=6a09d24a458b4445cb75371001970765180b6066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:84:5d:0e:84:11:f1:b0:dd:d0:97:14:75:
bc:ca:9b:79:44:de:9f:70:66:d9:ee:f8:1a:5b:ab:
ab:82:8d:f5:f9:be:1d:74:ef:50:b8:81:97:1a:dc:
57:0d:51:4d:31:91:ac:f4:1e:2d:16:16:a5:b8:a8:
d9:8d:57:d0:c4:61:b0:da:35:0e:a0:c4:ce:58:1b:
28:75:13:fa:f4:af:08:c4:81:df:94:c8:ad:ad:29:
43:e6:9d:36:31:3b:62:db:d5:d3:73:dd:60:b6:d0:
02:10:21:31:2a:9c:8e:b5:fe:51:d6:c1:37:5d:22:
7a:17:c4:78:c1:1f:9d:4c:b2:82:68:b3:63:89:a7:
9b:8f:f1:14:98:6a:d3:91:f5:20:9f:40:fe:95:cb:
e5:51:5a:a1:4e:1a:dd:d9:41:4a:e0:3a:e9:80:80:
d7:c0:2b:98:6e:dc:79:06:d3:17:11:1c:94:06:d2:
72:50:6e:4c:09:e3:ec:be:7e:ea:85:9f:c7:c8:fb:
4e:fb:2e:66:69:a6:c4:e9:ba:71:44:15:3d:85:42:
67:92:75:32:67:66:f4:c2:6f:fe:43:3a:31:5b:de:
b9:08:4c:00:cd:4e:25:e0:00:d9:bd:60:0a:26:52:
e3:71:a0:08:aa:04:ad:59:1e:9d:be:1a:30:8d:5d:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:D2:4A:45:8B:44:45:CB:75:37:10:01:97:07:65:18:0B:60:66
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:f4:d2:65:ab:8c:ae:73:35:c1:3b:e8:f7:0d:70:08:a4:
01:0b:8f:a7:d7:ad:d1:54:c2:3a:69:ff:ed:b9:ae:1b:3e:80:
96:a8:bc:53:f6:f0:b3:d4:fb:c7:19:1e:97:11:31:a4:43:b1:
5b:d9:c0:c0:b4:5b:dc:d6:5b:0f:7e:97:12:5d:93:08:e9:44:
0f:27:30:6e:a1:8b:a2:6c:49:6d:71:85:04:7b:27:86:b9:df:
60:88:41:ff:bc:ca:1d:5f:df:01:4b:73:12:47:dc:f1:54:70:
8a:4a:08:f8:24:ab:66:80:19:b8:a7:91:0e:d3:13:0a:10:7b:
b1:82:8d:f4:16:b1:82:a4:91:cf:29:7b:04:68:66:ad:16:a4:
13:80:12:68:e6:dc:6a:f7:9e:c9:81:07:f8:d5:c9:93:3b:5f:
78:8b:3c:46:b3:67:03:a7:a6:84:31:69:db:52:5d:dd:50:9b:
55:8c:c4:e2:c0:bf:c2:ac:32:e4:be:25:9b:44:69:69:33:ec:
7a:d2:41:83:a7:59:39:63:9a:86:ac:a5:07:e9:40:d5:51:ad:
85:7c:0f:67:58:65:a3:c6:33:66:c0:14:d3:c3:cc:93:1d:2e:
62:4e:6a:13:1c:1e:cd:49:db:6e:0b:04:4a:31:6f:ea:ec:2e:
36:7b:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:47:17 2026 by rpki-client