Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: 7wWbOoW3R2+UdvcrwT9UkCBDJm0dlR9YBzYq2BnvEnU=
Subject key identifier: D1:CC:06:28:2D:F8:92:9B:61:37:03:72:4E:BD:64:05:84:6E:8C:AE
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 019F954AB314F0C29A9D0A81EB83712FFF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:02:08 +0000
Manifest this update: Fri 24 Jul 2026 18:02:08 +0000
Manifest next update: Sat 25 Jul 2026 18:02:08 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: sRI1FXkJ//KiFurntdUIiAHxHn9xiW9XXTGtuGleqEY=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:b3:14:f0:c2:9a:9d:0a:81:eb:83:71:2f:ff:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Jul 24 18:02:08 2026 GMT
Not After : Jul 25 18:02:08 2026 GMT
Subject: CN=d1cc06282df8929b613703724ebd6405846e8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:87:a2:b7:26:ea:74:de:21:26:ec:e8:c4:
0d:5b:59:d9:65:14:8f:29:09:0e:16:ff:6c:32:70:
3f:67:9d:95:f6:83:86:49:f5:12:87:41:7b:8e:f9:
42:b8:ff:8b:98:cc:29:f7:e7:87:3f:86:58:da:e1:
d8:95:03:5c:9b:8a:c5:07:91:46:07:d9:ec:60:69:
18:ef:09:7b:d8:b8:ec:4b:59:d2:d7:83:dd:1d:84:
96:d8:78:68:86:6a:91:af:d1:a4:39:94:fa:28:8f:
f1:7c:ca:f6:13:e8:59:19:3a:27:36:46:0c:7d:6b:
b2:91:a6:64:9a:2e:69:2e:d6:ee:d5:e4:d4:b9:ce:
86:ed:e0:b5:7c:c0:16:e7:be:c6:1a:79:6d:c8:cd:
ab:ee:9f:4b:d4:5c:24:9a:7c:aa:8d:f0:a6:52:ed:
b2:ae:98:b3:af:81:2e:ea:af:65:e5:32:27:6f:6a:
4e:78:ee:4c:02:8e:b9:f0:24:8d:d2:38:a0:30:95:
92:d0:51:11:bf:0a:e0:d1:41:ba:55:e5:a5:23:43:
bb:88:97:6c:13:df:3c:6e:8d:80:1f:72:f9:fd:57:
a0:b5:71:13:e6:4a:ba:25:2b:ff:31:19:0a:6b:f4:
4d:78:f4:05:98:14:2a:02:e7:f4:13:06:81:79:f4:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CC:06:28:2D:F8:92:9B:61:37:03:72:4E:BD:64:05:84:6E:8C:AE
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7a:6c:e4:91:8a:79:a8:d0:f1:6d:d7:84:60:2d:1d:cb:81:
2e:0f:32:24:22:12:c5:c3:4e:5e:d5:db:7d:27:c8:d0:31:c1:
7e:8f:ce:08:62:e3:7b:4b:07:ad:d4:ea:cf:b4:63:52:85:30:
bb:fa:c2:49:be:d6:76:15:1e:03:43:2f:57:94:9f:16:9e:93:
50:16:93:b9:db:9f:4b:8c:dd:e6:a5:e9:0a:23:93:cf:ff:84:
84:4e:88:20:5c:6d:04:5a:2e:89:79:d8:13:d8:3f:d0:1a:bf:
93:8c:75:4d:71:85:3d:46:5d:84:a0:a6:b6:f8:1a:51:86:76:
4e:a8:7b:84:92:55:07:02:36:3c:a4:57:09:48:b5:15:cc:42:
43:90:54:ef:be:e1:4f:b5:64:a8:04:0d:b4:c1:61:e0:a8:1c:
06:a4:57:54:fa:b7:cf:00:28:3b:31:e5:47:86:93:a7:f4:fb:
e3:7b:92:4d:06:88:dd:0b:38:10:3d:1e:39:9d:fc:11:d5:b7:
06:b2:95:e0:ba:a9:f7:c0:47:e3:a0:71:d1:2b:9e:19:c1:d0:
22:40:05:15:43:20:5e:99:dd:99:38:74:8b:25:5e:62:b0:25:
0c:c3:8d:a7:fd:26:28:c1:69:77:f4:aa:da:ce:3e:7b:f3:ef:
5b:6d:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:47 2026 by rpki-client