Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: dtsNl/DVQk5FCs3+a7F4cdAWllCR1NcFdBztdzZL69A=
Subject key identifier: F9:DE:6C:0E:22:9F:64:B3:71:A8:42:70:BA:B4:28:67:64:17:C5:95
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019F97A5D9EC6F656CF032A2EFCDFB2C4FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1987
Signing time: Sat 25 Jul 2026 05:00:56 +0000
Manifest this update: Sat 25 Jul 2026 05:00:56 +0000
Manifest next update: Sun 26 Jul 2026 05:00:56 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: +nAmaPafRBrsln7alpaG1M4ZACJwxNKI+s7Mqyu4dL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a5:d9:ec:6f:65:6c:f0:32:a2:ef:cd:fb:2c:4f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jul 25 05:00:56 2026 GMT
Not After : Jul 26 05:00:56 2026 GMT
Subject: CN=f9de6c0e229f64b371a84270bab428676417c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:5c:7a:a1:bc:c8:29:f9:20:30:a5:6d:d5:
83:9c:5a:6b:a2:a3:2e:4e:fb:0e:f8:29:b4:0d:cb:
54:9f:6b:f8:ea:2e:c7:f3:4b:56:26:3b:55:ec:eb:
a5:65:0f:a7:13:f6:c1:76:ca:c6:be:f1:63:14:fe:
29:2d:38:81:e1:84:36:df:f4:ca:e4:64:7d:26:10:
8a:ae:b2:ab:dc:ea:3e:63:c5:3f:31:f0:99:5e:7d:
67:d5:6f:e4:2c:45:4c:34:19:75:7e:3c:de:bd:92:
4e:7d:67:df:d6:57:6a:76:41:20:36:a5:9a:11:d3:
02:86:fd:38:bc:ee:8c:32:37:9c:18:4e:e3:f5:49:
d6:c5:96:9b:78:12:6d:62:84:a7:6b:43:6e:94:82:
b1:e6:6f:41:1b:1e:9a:f0:34:a0:d6:28:b2:5b:a9:
95:80:58:48:c3:a8:99:fb:db:60:74:4e:41:0f:b7:
7e:39:f5:fc:52:2d:07:35:b1:cb:3d:0b:4b:b5:3c:
77:80:ab:99:98:3f:44:1a:4a:c5:bf:c9:6b:b9:9c:
8a:14:68:06:12:45:48:91:bc:b2:eb:ac:ba:c6:08:
59:0d:ed:76:75:cc:a1:f7:42:2a:86:9a:f7:61:f7:
b3:34:57:a6:22:23:f4:58:6b:18:b0:34:ca:4d:93:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:6C:0E:22:9F:64:B3:71:A8:42:70:BA:B4:28:67:64:17:C5:95
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:c2:42:00:1c:0d:28:c6:6f:5e:b8:96:96:7e:cc:fb:81:
07:1b:18:69:fa:aa:f6:e8:1e:ae:30:78:c1:12:50:79:35:0d:
92:3f:cf:ad:a3:8f:c0:b7:d4:b3:ed:59:26:78:5c:44:76:56:
4e:73:0b:b1:0e:01:41:72:5b:19:49:da:db:2e:25:0d:25:29:
25:83:5a:43:8b:d3:0b:fe:50:87:c7:f6:e0:54:81:a2:ff:c3:
51:2c:53:95:9a:3d:f5:f4:03:f0:a1:69:af:a2:c2:b5:31:9b:
42:f1:4e:03:04:bd:c5:6c:fc:db:a3:7c:f2:4a:6f:50:54:bb:
c6:50:4b:23:fa:bd:c9:a8:e1:6d:34:2f:26:4d:a9:63:b5:f8:
af:fd:34:87:ae:db:f6:d4:4a:76:32:f4:a6:94:ef:92:67:05:
2f:66:d6:6e:38:9f:45:1f:ac:02:af:71:f6:6d:8b:48:bc:b2:
92:a7:18:87:51:d0:72:5c:3b:28:36:e3:68:26:70:01:16:fe:
7e:c1:01:ef:07:ac:d5:1c:fe:9d:02:74:13:50:ef:07:8a:b9:
57:29:d8:fa:5a:43:1a:35:80:64:28:6b:f0:20:e6:ba:0a:19:
f8:88:1c:4b:d9:a8:e6:4a:db:15:a9:eb:f6:1d:55:9a:1b:c2:
46:2f:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:33:06 2026 by rpki-client