Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: 9XtmIRpAmgib8iUEk0GQYdfhP5+8IBPEz6DCR6n45wc=
Subject key identifier: 6D:56:AE:22:61:51:27:A8:3A:B6:69:E0:AA:70:7E:A4:DC:C6:E1:2F
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019F84C35A0A44857726F41A700E8F7BB784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 0477
Signing time: Tue 21 Jul 2026 13:00:22 +0000
Manifest this update: Tue 21 Jul 2026 13:00:22 +0000
Manifest next update: Wed 22 Jul 2026 13:00:22 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: JDHZPv7bC4jxC6JgcB47Ra467W+XOGN6qgG7UdIYHMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:5a:0a:44:85:77:26:f4:1a:70:0e:8f:7b:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jul 21 13:00:22 2026 GMT
Not After : Jul 22 13:00:22 2026 GMT
Subject: CN=6d56ae22615127a83ab669e0aa707ea4dcc6e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:95:fd:01:13:ce:b3:99:07:22:77:0a:70:
86:ce:a0:89:70:5e:31:a9:e2:56:50:3b:e0:62:96:
e4:31:89:0f:98:37:d7:b7:aa:59:54:7e:5b:c8:5b:
05:ed:46:59:da:dd:9f:aa:c5:44:b2:21:d5:d3:da:
d5:dd:2d:c7:f0:6b:8a:65:d1:d3:a2:d1:7b:45:7d:
61:42:cd:f6:dd:d8:7c:4e:ed:25:1f:d8:1b:69:b8:
27:73:f4:95:29:de:1d:a2:26:5f:8e:ca:be:84:59:
9e:6d:a9:a3:92:28:ab:6e:70:d7:2d:76:00:3b:90:
e6:29:52:4f:34:e3:9e:e2:e6:99:b6:39:ef:2d:b0:
38:88:89:d8:cc:23:18:89:f3:4a:f9:c5:2f:b2:b3:
02:84:73:b9:63:ec:9f:56:54:e6:75:8a:ee:7c:67:
d2:d9:68:a0:98:01:07:84:7e:15:68:14:6a:82:73:
17:c9:c4:77:bd:f7:86:5b:65:dd:73:f1:1b:81:7a:
06:9f:a4:6a:a0:71:8e:aa:90:8f:a4:d9:bc:71:17:
2f:2e:76:d0:36:b3:8d:dd:e2:52:11:63:00:ae:08:
88:04:ee:07:7f:50:65:54:f0:00:17:e9:02:eb:55:
63:d4:f7:80:08:86:76:08:15:9d:8c:2f:e1:40:67:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:AE:22:61:51:27:A8:3A:B6:69:E0:AA:70:7E:A4:DC:C6:E1:2F
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a6:71:77:6e:67:2c:42:53:38:72:99:57:5e:d2:b2:2a:d5:
82:7a:3f:d0:5a:36:de:05:2f:61:6c:83:6e:18:fb:1b:e6:8c:
f3:98:8e:be:7d:20:18:30:1f:3a:b1:34:18:ce:77:38:56:5e:
76:f6:93:0a:70:71:41:73:a5:6f:64:fd:cc:5e:f1:b6:ac:dd:
c4:45:8d:c5:a3:97:ad:f3:fe:37:2a:41:8e:b6:1b:f4:ee:08:
28:aa:b3:9c:60:b9:63:52:11:4a:88:3b:91:ab:59:4a:45:c8:
63:27:73:d7:aa:91:3b:fa:0d:ff:1e:de:de:ee:dd:2a:24:eb:
4f:92:7e:64:ec:d0:ad:f8:5f:cb:dd:ba:eb:b6:d5:4c:d0:c7:
0c:17:a2:16:b2:68:47:a9:da:4f:28:2b:3f:7c:6d:9a:dc:ab:
e3:ce:2f:2c:e8:e0:01:b1:5c:d9:f0:be:c8:02:04:82:f8:69:
41:82:37:f0:90:0c:7b:b1:47:ea:4a:05:da:8e:3f:fc:db:76:
14:1e:64:0d:21:90:1b:31:e0:7c:6e:2b:f0:57:18:4e:20:0e:
1b:7a:db:76:7c:d4:0c:71:eb:7b:3e:57:f0:86:a2:81:cb:2f:
c7:bd:c0:f2:c2:6e:be:ec:de:58:42:72:72:91:44:9e:52:f3:
31:49:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:39:09 2026 by rpki-client