Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: tZOFiWJHC6TjYxv2M9M06XvrQ1nBrJ6XKtHl3gWLDJQ=
Subject key identifier: 2C:CC:97:A5:C6:40:5A:76:52:3F:40:31:B5:B2:84:C0:1C:86:E0:95
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019F9323C8D7C7E861AEFF0A301370873BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0923
Signing time: Fri 24 Jul 2026 08:00:23 +0000
Manifest this update: Fri 24 Jul 2026 08:00:23 +0000
Manifest next update: Sat 25 Jul 2026 08:00:23 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: isZKARx5wYkC+oKlMoBdL1yu55O3kXlMKsl3inwgk/s=)
2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c8:d7:c7:e8:61:ae:ff:0a:30:13:70:87:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Jul 24 08:00:23 2026 GMT
Not After : Jul 25 08:00:23 2026 GMT
Subject: CN=2ccc97a5c6405a76523f4031b5b284c01c86e095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:dd:bb:d7:64:6b:23:3f:11:b9:cd:cb:ab:
49:b5:cf:92:fc:01:1b:84:6e:ec:1a:8d:59:2f:01:
2f:c1:09:ce:99:40:76:30:c5:df:b3:0a:69:ee:fd:
60:10:fc:21:95:df:88:20:ee:e5:b7:ee:80:27:58:
86:dc:ff:40:2f:5c:77:e7:8d:84:cd:79:af:b1:7e:
da:c4:2f:aa:84:97:70:09:24:fb:5d:60:b3:b9:80:
70:04:91:2a:ab:99:eb:32:1c:d2:83:d2:63:5e:ef:
59:b2:10:8d:50:36:6c:9e:f6:de:6e:55:24:6f:50:
65:50:50:07:6c:20:5e:f3:c9:7e:61:27:d3:eb:bb:
ff:fa:e5:26:9f:14:2a:38:62:3f:43:a0:d6:05:1c:
52:15:1f:a5:c4:8b:cc:b2:03:bc:7e:a2:c3:a3:94:
19:20:1f:f2:d2:bb:b7:67:06:50:9d:14:74:5f:33:
bf:33:f6:de:66:77:25:f4:de:e6:c7:80:95:41:4e:
16:05:06:eb:9e:5a:05:74:5c:a1:a3:05:f8:43:fc:
bc:2a:b1:3c:1f:09:dd:fa:f7:48:91:db:03:83:6a:
32:84:c2:77:10:2a:56:db:ae:cb:41:0a:a9:70:c7:
71:b4:68:92:c4:4c:aa:ac:62:fe:a2:4d:91:ae:f9:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:97:A5:C6:40:5A:76:52:3F:40:31:B5:B2:84:C0:1C:86:E0:95
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:d1:cd:56:cc:c7:91:aa:61:cd:9e:e5:9d:71:13:15:09:
50:fa:2c:14:99:44:ff:2d:6c:9b:f5:fc:fe:fa:a6:8a:75:3b:
4c:81:68:c2:e6:43:17:04:04:98:db:ba:c9:78:09:b8:4e:bc:
ea:cc:c9:82:07:3d:05:63:e8:c5:f1:bf:0b:f9:81:f8:e7:04:
83:6e:02:a5:d3:25:e2:2f:cd:4d:19:61:e3:98:37:25:02:44:
b4:6e:32:c1:95:e1:60:38:9f:1f:a6:47:e2:e4:68:dc:95:17:
c8:03:bf:a8:e3:3b:14:a5:ea:34:7d:80:36:c1:a2:a4:13:c1:
8b:7b:cf:06:40:1b:bc:6d:b4:ce:39:25:27:55:0e:11:39:3c:
d5:e4:f4:76:50:1a:b5:7c:e8:b5:de:27:46:c1:cd:9b:c7:97:
b3:8a:cc:7c:c4:be:8d:c9:c2:7f:e5:f5:cd:b7:56:60:bd:c7:
66:e2:7b:90:ee:b1:97:71:e6:d8:7b:dc:32:fa:5b:06:3f:5d:
aa:03:5c:57:7e:28:9a:e5:19:54:74:07:72:64:75:c1:b2:1a:
89:8b:24:73:c5:9d:e2:09:11:3b:e6:7d:f5:14:ee:11:c1:44:
36:05:e9:0d:60:72:7e:31:5b:79:5c:47:7c:d0:4f:9e:50:b4:
c3:59:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:33 2026 by rpki-client