Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: gyBvxwiiM6Z9VGC1Z+cMZe/QqUbBesT7lxnnECfaNXw=
Subject key identifier: 6A:CD:4A:E5:2A:2F:E9:6C:F3:EB:77:D1:FB:AA:60:94:C9:7F:FF:45
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 019F8FB5CB02460FB250920757126AA0D256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 010D
Signing time: Thu 23 Jul 2026 16:01:23 +0000
Manifest this update: Thu 23 Jul 2026 16:01:23 +0000
Manifest next update: Fri 24 Jul 2026 16:01:23 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: wsjtIy2daOHurqjXFWayYs4eWGR0cPfGWQVVn8Wf76Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:cb:02:46:0f:b2:50:92:07:57:12:6a:a0:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Jul 23 16:01:23 2026 GMT
Not After : Jul 24 16:01:23 2026 GMT
Subject: CN=6acd4ae52a2fe96cf3eb77d1fbaa6094c97fff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:36:e3:45:a7:c2:7c:e7:66:30:4a:62:57:
f9:9f:78:c3:70:c3:ac:06:95:83:b7:cd:a6:c3:11:
0e:9a:e5:d0:ee:2f:46:f0:db:e9:17:57:fc:1e:9a:
c8:1d:33:a7:58:a4:a2:36:9c:60:e3:f4:97:d3:99:
6f:07:75:6b:37:17:f3:f8:3b:1f:eb:a9:a3:8f:58:
28:77:13:da:bc:e3:98:ee:75:c6:f3:eb:b4:91:53:
de:8e:1f:f6:4a:5b:27:37:f3:7e:d0:fa:b6:ff:a4:
62:d0:87:a7:eb:17:ea:46:1f:25:de:0c:27:b5:78:
57:11:b4:ef:40:56:01:9e:17:e8:b5:56:97:69:ee:
48:d8:cb:b0:bc:d1:bc:dc:4c:fd:b5:6f:d6:00:c0:
72:20:b6:47:39:21:25:c3:fe:1e:4d:64:7a:13:10:
a2:f6:f3:c7:8b:d3:1d:2c:59:04:6d:c5:70:eb:cf:
af:1d:df:ea:32:7b:21:df:27:52:91:38:0b:cc:d6:
5d:dd:8f:f6:5e:5e:e5:ef:bc:e4:bc:d1:80:74:dc:
cc:9f:ae:44:95:d1:79:0d:22:4c:5e:a2:b1:f0:0d:
fa:91:91:7a:86:cf:af:32:c1:99:bf:34:46:df:8d:
7a:ab:fd:4f:0a:c1:4f:01:5c:2f:97:75:8b:09:9a:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:4A:E5:2A:2F:E9:6C:F3:EB:77:D1:FB:AA:60:94:C9:7F:FF:45
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:29:02:4a:89:35:e0:92:90:2a:75:09:b0:88:2c:c6:84:f6:
4e:5d:e4:28:80:47:37:d8:09:10:59:cf:a3:4a:6f:67:3a:9d:
40:78:19:4c:c8:12:d6:7e:10:3c:5c:d5:9b:1b:a4:92:99:07:
43:5e:03:98:82:bb:c1:e7:a7:55:ec:a4:03:25:41:50:29:d8:
9a:21:24:5f:c8:4f:3c:c4:41:54:f1:7c:f8:1f:e4:ad:69:50:
84:c1:27:bb:10:81:1d:05:92:6f:f4:f8:dc:72:b8:5e:ce:1e:
fe:5e:f0:7e:a9:eb:fd:26:41:d3:57:e2:41:1f:05:38:dc:73:
e7:78:5b:af:60:a4:21:c9:f7:a5:ae:81:df:25:75:06:2a:38:
54:a3:43:b0:fa:00:10:ca:6d:3d:23:8c:ad:04:35:64:57:28:
bc:7d:f8:16:84:82:e7:d1:b6:98:ea:d0:23:b1:a5:0b:9b:92:
f8:cf:89:87:b1:73:2f:de:8c:0a:06:fe:43:e2:86:f3:81:dd:
8d:bc:b8:b2:41:70:82:91:4e:bd:46:3c:1b:89:2f:a0:de:d8:
67:91:ec:84:a8:8f:3f:21:e4:ed:3f:c2:d4:b1:09:ef:bc:37:
57:6a:52:9e:48:46:fe:ed:dc:4e:9a:8f:66:49:d6:7c:6f:b1:
6e:18:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:37 2026 by rpki-client