Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: 7Tf8D9KXYv01vhTXvx0mrqZ6aWGC5bYg6PLxWMA9wq0=
Subject key identifier: AA:18:21:D0:4E:C5:97:B8:5F:4D:A6:C4:85:40:F6:D2:F4:44:55:07
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019E1F11216F0AF0960C125655DA3C7D8498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 02:01:16 +0000
Manifest this update: Wed 13 May 2026 02:01:16 +0000
Manifest next update: Thu 14 May 2026 02:01:16 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: WFK2+nnHd4yvxILKvz04kRJHpPGqPAinjn0wyrk1KN8=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:21:6f:0a:f0:96:0c:12:56:55:da:3c:7d:84:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: May 13 02:01:16 2026 GMT
Not After : May 14 02:01:16 2026 GMT
Subject: CN=aa1821d04ec597b85f4da6c48540f6d2f4445507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:16:73:6d:5d:f8:dd:a5:c2:79:10:81:7d:
48:d1:6c:4b:ed:63:d7:a4:c5:08:da:29:d4:1d:2e:
35:7b:1a:33:72:96:84:c9:1d:9e:50:a5:83:c3:5a:
e0:00:84:9c:cb:13:95:9b:cf:13:0a:88:93:d2:11:
34:73:cd:fe:68:c8:21:86:19:84:d1:f4:17:03:58:
6e:17:9e:48:15:2a:04:15:bb:4c:ae:d3:5d:64:75:
d6:c2:af:a6:36:7a:b2:3b:bd:8d:8b:df:ca:02:1f:
8b:aa:c6:bb:68:70:56:db:a0:32:f5:c9:e1:5b:04:
2c:0a:bd:51:0f:69:d0:f2:89:ed:3a:b8:26:ff:0c:
0f:50:f0:eb:6e:88:c7:e8:e5:5c:e9:74:b4:4e:68:
3c:44:db:1d:f6:1f:ea:17:f7:88:f7:fb:9e:fa:f9:
ca:24:dc:4e:15:6d:43:8a:7b:59:95:d8:7e:28:6e:
78:c1:45:3e:d7:30:22:50:85:fa:6a:7f:09:a7:85:
8e:2b:c9:f7:ce:13:f1:36:68:17:2f:cc:3f:9e:1e:
52:07:21:cf:19:ec:a8:e8:81:63:07:47:44:0e:e9:
db:14:e0:90:3a:19:a7:03:f7:8a:ad:87:b3:83:e7:
d4:b2:66:1a:47:ef:30:3f:51:3e:25:43:ce:5f:88:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:21:D0:4E:C5:97:B8:5F:4D:A6:C4:85:40:F6:D2:F4:44:55:07
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:0a:6a:d1:85:81:a9:e2:de:98:29:7a:79:87:f8:b7:59:
b1:87:a2:f7:ab:85:7c:82:98:4c:c0:8b:6d:ad:99:26:d9:3d:
01:47:d5:0d:2b:06:af:5b:22:d1:b2:8d:f9:a7:f2:29:34:bd:
db:36:23:22:3e:c1:1d:d4:3f:11:fd:db:6f:69:97:a5:73:f0:
33:2c:9b:ff:c8:51:0d:ed:fe:28:67:f7:fb:a3:ec:95:68:02:
60:7b:41:3f:f8:ec:87:4b:91:e9:77:7b:df:08:00:c3:e6:0b:
b0:a4:33:f9:a3:42:70:63:94:57:0e:fc:1e:a2:a9:6e:b1:21:
62:49:46:e3:55:bf:6f:6a:a5:8f:77:3b:c8:9f:23:a1:6c:0c:
fe:cf:15:fb:39:ce:ce:9a:6d:6f:f9:04:b0:c7:a1:35:c8:02:
d1:be:a9:76:fb:f3:3e:87:00:43:38:52:34:90:b2:3a:12:5d:
65:c2:bb:a6:dd:ef:a6:6c:90:c7:22:cd:19:3d:16:c1:f5:27:
4d:7e:14:ff:94:3f:7e:0d:64:56:8f:d1:6e:fe:10:c2:a0:a4:
ac:fa:d8:4c:e8:4f:74:35:75:6a:74:14:4e:ea:db:6c:8f:f2:
ae:15:e4:17:20:15:62:3a:f9:2c:64:09:91:55:ac:a3:9c:5d:
b1:56:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:03 2026 by rpki-client