Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: JrL18H2pJVa25A2YrwktE4u4eiHUxJ7veqmMgm1Xiqo=
Subject key identifier: BF:0B:CE:A6:63:4A:48:71:98:18:E7:F5:CA:11:5E:4C:D7:91:DC:75
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019F93C97C75466E3ED3E4ECEF0C1CDA2C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 11:01:22 +0000
Manifest this update: Fri 24 Jul 2026 11:01:22 +0000
Manifest next update: Sat 25 Jul 2026 11:01:22 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: vxGrRIhRN9Me+OnJDIRKq3B7JwrE72pErbxFLKAkd68=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:7c:75:46:6e:3e:d3:e4:ec:ef:0c:1c:da:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Jul 24 11:01:22 2026 GMT
Not After : Jul 25 11:01:22 2026 GMT
Subject: CN=bf0bcea6634a48719818e7f5ca115e4cd791dc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:d4:92:3e:8d:4e:fd:6e:1c:da:a5:e6:40:
13:8f:0d:f4:5e:ae:34:ad:06:ae:0c:85:c3:24:f9:
79:b4:2d:42:21:87:5b:50:30:76:76:57:b1:77:ca:
94:ab:cc:b9:18:86:e8:8e:63:76:7d:05:03:c0:61:
35:50:2c:b1:1c:be:2f:a0:2a:f1:11:60:e9:94:83:
d2:1e:3e:8a:6a:30:5b:7c:66:59:cd:38:5e:8f:2a:
9f:86:3c:ac:b0:13:4d:73:84:ab:4e:d2:d9:38:4f:
da:08:d5:4a:f9:25:6c:89:5c:52:4a:1d:9e:21:60:
7f:5d:bc:79:77:da:8a:17:e5:9d:85:c0:87:f9:3e:
8f:70:fa:d2:cc:e7:60:ac:b1:a8:83:d3:af:43:4b:
a9:f6:3e:83:b2:31:be:9a:68:33:aa:b9:33:85:7f:
ea:c0:d8:35:62:b6:61:62:b0:49:ca:8a:10:f9:11:
89:02:2d:2e:3c:f8:cd:07:db:de:71:5b:01:97:80:
cb:4a:07:0a:16:5b:12:31:dd:b7:69:84:ad:e5:6a:
7d:bd:8f:00:90:15:9f:2a:6e:2f:9a:0f:a0:67:60:
f3:14:4d:6a:4f:20:b6:f4:47:10:2a:74:8d:fe:b7:
db:6e:0c:db:d3:f2:49:0a:dd:5f:18:08:03:dc:2c:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:CE:A6:63:4A:48:71:98:18:E7:F5:CA:11:5E:4C:D7:91:DC:75
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:70:00:1f:02:3e:dd:b3:d7:b2:4e:64:6b:ed:39:90:e8:e1:
0a:83:73:af:4e:d7:80:1b:11:96:70:41:c3:5e:eb:bf:34:85:
42:f4:25:68:f7:5c:65:80:82:9a:b5:bf:8c:24:5a:ff:04:5d:
57:79:28:4e:b8:ce:61:18:07:34:98:c7:69:ce:35:fa:87:d5:
4f:c6:49:44:c1:4d:22:51:31:8c:7a:19:a1:a8:fb:a2:9b:82:
79:b0:cf:ba:6e:80:67:17:63:1b:a9:5b:dd:09:77:b4:ea:37:
0d:bd:9e:c9:19:4a:6c:4c:ca:f3:30:f6:fd:ab:19:4e:46:cd:
ab:67:d8:9f:e5:70:5c:98:0c:e6:e6:7c:19:a6:2b:fb:04:f3:
aa:71:16:70:45:d6:d4:15:8d:c9:c7:84:1e:ae:33:e3:a4:23:
e2:fa:6b:94:99:6a:18:62:99:f2:b6:06:4e:bf:d4:39:3e:5b:
13:60:e8:19:fb:f2:d7:26:88:3e:01:68:19:9b:56:86:59:83:
a0:46:9f:79:44:39:04:9a:29:8a:05:cd:63:44:08:1f:57:37:
1a:c2:d1:3a:1e:af:ad:5e:2f:cf:0b:dc:26:25:55:5c:f9:1f:
e3:07:2e:f3:66:d6:89:1b:58:8f:cb:3d:7c:eb:4e:da:98:3b:
1e:28:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:27 2026 by rpki-client