Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
File: ncIAmtRoV1bPSFCSRpxi4JndoKI.mft (raw, json)
Hash identifier: 97z0xsJzIOYDevgwlBbp/O5XFnohYrc1ZQBhBL0X4uo=
Subject key identifier: 1D:27:DE:67:5A:3D:55:70:AC:A0:9B:B5:C9:79:41:0F:7D:2A:D3:15
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 019F927FC5A73DC7A907BD5021F354652566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
Manifest number: 79
Signing time: Fri 24 Jul 2026 05:01:14 +0000
Manifest this update: Fri 24 Jul 2026 05:01:14 +0000
Manifest next update: Sat 25 Jul 2026 05:01:14 +0000
Files and hashes: 1: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (hash: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=)
2: ncIAmtRoV1bPSFCSRpxi4JndoKI.crl (hash: +7tMTOx/J22oT/A9mfZ2VtxFf1WLCdBvHiViJzIRuW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c5:a7:3d:c7:a9:07:bd:50:21:f3:54:65:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Jul 24 05:01:14 2026 GMT
Not After : Jul 25 05:01:14 2026 GMT
Subject: CN=1d27de675a3d5570aca09bb5c979410f7d2ad315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:cb:06:df:ee:a5:ad:21:e9:2b:78:30:71:
e5:9d:d1:fe:be:b2:ce:e9:bc:4a:7c:a0:25:6b:e0:
ee:b2:1f:3b:dc:9d:a9:77:55:2e:02:45:af:c1:39:
9d:54:c3:26:52:a6:f8:f7:95:89:dc:0c:da:54:46:
3a:bb:ba:91:ee:87:db:2a:60:f4:03:47:92:61:80:
a3:19:28:47:ea:5b:86:e5:af:f8:f6:5d:5d:31:81:
d2:1c:d7:b2:ba:4c:ca:98:d7:1d:e8:ee:30:10:9b:
fe:c9:e2:a5:7d:c0:51:0e:09:5e:45:73:49:24:ff:
35:96:24:8b:17:e7:be:9e:86:42:c4:10:4f:25:64:
cb:70:ba:c4:b7:c2:09:ce:7b:a3:7d:95:91:1c:5b:
ac:d9:08:a4:0c:80:47:a5:d0:81:b0:33:7a:01:f6:
3b:6e:2d:a7:73:85:f3:07:c9:10:f2:93:98:bd:aa:
14:c2:e4:8b:bc:75:9c:32:6f:af:70:2a:8f:c6:d9:
66:37:82:34:36:b5:cf:48:06:6a:e5:1e:1c:ac:a8:
97:1e:84:69:67:f2:8e:f3:48:5a:f9:52:c8:e9:95:
75:d6:28:c1:57:a9:02:32:5b:3e:2f:6c:8d:d1:77:
86:50:7b:b6:25:08:02:3f:51:de:79:74:3d:c0:a1:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:DE:67:5A:3D:55:70:AC:A0:9B:B5:C9:79:41:0F:7D:2A:D3:15
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:16:e3:f0:da:d3:2c:9c:fe:f5:85:bf:91:e0:0b:ce:29:
f2:cf:67:c4:6f:55:55:86:64:93:21:5e:3d:fb:d9:56:cc:75:
97:56:71:d0:4b:27:95:c9:1a:67:2e:63:ef:ef:c8:a7:b8:fa:
4c:cb:94:a6:57:6c:d3:18:23:50:46:f0:8d:22:fb:0e:aa:b2:
ee:30:dc:8c:02:b7:11:69:8d:f5:56:48:68:50:75:da:61:80:
fa:5c:df:65:c8:57:e8:b2:17:dc:3b:c4:7e:c6:52:8b:5a:6f:
0d:02:18:50:23:25:45:e4:e3:b4:87:d6:1e:df:6f:d7:21:3a:
d7:ea:cb:1d:00:8c:bc:9c:27:e1:d6:bc:0d:e8:9d:b4:1b:b5:
ed:56:ce:80:7b:82:df:85:12:0c:fd:6f:75:ad:57:83:20:c1:
0e:f1:ea:12:b6:ef:05:60:31:32:f6:c3:ab:ae:c4:3b:9c:71:
46:d9:44:c6:83:1a:c3:39:ee:aa:d6:9f:25:fb:4b:56:97:65:
60:f7:f9:1f:af:90:aa:3f:e0:03:86:a1:3f:8d:e9:65:1f:46:
61:22:d7:18:4f:8e:1c:72:6e:13:2c:57:e8:71:ee:8f:88:81:
a1:c7:f3:7e:fa:da:fa:0f:7c:53:b6:0d:1b:a1:be:f3:cd:45:
e5:03:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:58 2026 by rpki-client