Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: EVk0JXBxlTaXoaXJMkmd5soRXFmz3l+LM28OsZ011yg=
Subject key identifier: 39:1A:AD:13:CC:52:5A:70:CA:07:89:2C:A6:A3:7F:DC:51:C0:5C:F3
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019F93FFD15DB333088BC2C598DC84E78E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 134F
Signing time: Fri 24 Jul 2026 12:00:43 +0000
Manifest this update: Fri 24 Jul 2026 12:00:43 +0000
Manifest next update: Sat 25 Jul 2026 12:00:43 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: Zq8AjHxCv4FTGqPd4LKVALKStFc.roa (hash: +Wgeeo4qZQi4AfCHDA8NNz4m0OfIuxblNCKxxi1fR7Y=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: /sRRe4IlgrXssLMOh5jFaXIvRMMChJHAw4sSSoTKU6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d1:5d:b3:33:08:8b:c2:c5:98:dc:84:e7:8e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jul 24 12:00:43 2026 GMT
Not After : Jul 25 12:00:43 2026 GMT
Subject: CN=391aad13cc525a70ca07892ca6a37fdc51c05cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:eb:73:5b:16:dc:92:9e:4b:ae:73:30:cc:
ef:87:41:1d:d2:84:97:db:5d:f7:3f:1a:5b:33:2d:
71:15:08:f0:e7:d6:02:16:4f:8b:bf:6d:bd:9a:02:
78:07:b3:b3:2e:f0:21:1d:72:16:eb:3f:a4:ad:9a:
e8:d1:c1:9d:12:9b:10:f1:8e:67:eb:60:50:b3:50:
36:e5:2e:22:0f:ee:e4:f6:2a:35:e3:ae:86:a6:50:
4a:ea:50:57:c5:1f:10:c4:ca:1c:30:04:a7:80:ff:
97:8a:51:41:55:e0:e2:0d:29:4e:c1:2c:fa:e3:9b:
cc:af:cd:2d:5e:c6:b6:fb:c9:1d:92:7f:c3:50:cb:
ba:4f:53:68:e8:c5:c5:1f:d9:de:3f:53:6a:6f:64:
da:93:39:cd:4d:5a:6d:bb:de:05:c7:39:35:3d:08:
4e:9e:fc:3f:47:f0:b7:73:72:d0:b3:f2:b3:ca:1d:
c3:d1:ee:d5:df:7b:7a:1c:46:69:e8:20:de:4d:c5:
26:af:d4:f4:54:63:f6:13:43:a8:26:91:49:f1:08:
86:be:18:46:f0:0d:ac:e0:f2:d4:33:49:77:0e:a8:
16:4f:3c:a5:fa:93:cd:72:8c:07:6f:84:10:23:59:
6b:25:20:8b:1a:7b:92:a4:3e:61:7b:d9:8d:0c:78:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:AD:13:CC:52:5A:70:CA:07:89:2C:A6:A3:7F:DC:51:C0:5C:F3
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:39:ab:20:92:10:e7:a2:c6:c1:25:a9:16:73:19:4a:9a:
66:8e:fc:2b:06:d0:6c:1c:69:68:45:da:dc:ba:2a:6c:72:bc:
18:74:f4:f7:5c:1a:37:da:51:86:dd:e0:cb:d0:f6:53:2a:94:
fa:64:f1:0b:f4:92:bd:81:fe:c3:80:3b:1c:0e:b0:f0:38:71:
d7:47:11:50:79:a0:ed:ad:6f:fa:4b:34:df:0d:ca:64:b0:a7:
73:6d:d3:75:fb:c2:0c:a0:0d:c6:53:05:51:36:12:c7:b3:8c:
8b:49:7f:1e:a6:d0:9d:5d:91:b1:13:8f:4e:ed:fd:9e:fd:6b:
88:3d:67:28:4e:1b:16:ca:b6:76:a5:32:8b:e5:c4:99:a1:7c:
5e:88:8b:59:ed:f8:23:24:e3:6f:90:a8:7b:52:bd:f4:4f:2e:
3b:74:33:85:86:a9:c6:1c:ff:40:61:45:cf:d3:bb:cb:95:53:
c1:b6:84:26:16:e4:29:0c:a3:27:63:ad:14:19:e0:dd:51:2c:
81:cd:6f:a2:de:7c:fe:ea:1c:5a:77:83:76:f7:cb:bb:99:09:
6e:5b:6e:a0:d3:71:04:91:e9:8a:de:9b:4f:6c:fb:b9:da:06:
34:bd:68:50:ea:c8:f3:35:ed:a1:01:3f:de:bc:84:b3:7b:13:
3c:43:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:04 2026 by rpki-client