Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: r8VxgxE8Pv7nVXd/xSWPsileE7KF11gKQevMPJBrlmk=
Subject key identifier: 6A:E7:A4:F1:22:BE:78:ED:E9:0B:48:AF:34:44:E6:FE:80:79:2E:10
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 019F95127050018B571546850DBD3B60C4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 0C41
Signing time: Fri 24 Jul 2026 17:00:41 +0000
Manifest this update: Fri 24 Jul 2026 17:00:41 +0000
Manifest next update: Sat 25 Jul 2026 17:00:41 +0000
Files and hashes: 1: KggeSoYJuTH0OsCrW287o_IBVIU.roa (hash: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: hYh0rNAJJpZv/v7/rE6YudleTD0tt5BWkmlUJB40xGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:70:50:01:8b:57:15:46:85:0d:bd:3b:60:c4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Jul 24 17:00:41 2026 GMT
Not After : Jul 25 17:00:41 2026 GMT
Subject: CN=6ae7a4f122be78ede90b48af3444e6fe80792e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:6a:ba:6f:54:84:80:50:f3:26:be:b0:c2:
fb:b9:96:49:1a:9d:3e:a1:bd:ff:d0:b4:88:4e:f8:
4b:c8:ed:6e:de:67:9b:3b:a3:2f:ec:ed:34:4d:e3:
c3:5d:bb:9e:34:8f:6c:83:e5:bc:7e:17:c4:45:16:
2d:38:e8:23:f7:24:20:60:0a:2c:7a:a8:a9:15:ee:
26:9b:22:0e:e8:53:0e:03:fd:81:85:fe:e5:7a:d0:
44:24:f0:52:82:70:9b:2d:72:82:1d:a5:c4:1e:8c:
9c:84:b4:05:c0:d9:d4:1c:b9:6a:45:d7:f5:e2:da:
f0:d2:86:6b:15:23:4e:9e:fe:7b:51:7d:15:45:8f:
77:a2:9c:39:11:a4:21:d4:9b:31:59:c8:b6:2e:db:
bb:76:97:bb:31:0c:69:fe:c9:11:22:10:7e:3b:4c:
76:94:9a:0b:e2:0f:a4:ef:54:f2:d3:6a:75:f9:90:
4e:2d:d2:92:6b:81:b6:2b:43:ae:7c:0a:d8:d5:c4:
44:46:c5:5a:85:cf:0a:ab:2b:72:f9:02:1d:9e:9b:
18:33:c4:f1:df:50:59:f2:4e:d9:6c:b5:f7:ae:6e:
d3:f5:e5:e7:da:91:26:ce:b0:7c:aa:a6:87:05:10:
1b:9e:9e:56:65:dc:62:b9:f7:0f:f6:3d:b8:98:c1:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:A4:F1:22:BE:78:ED:E9:0B:48:AF:34:44:E6:FE:80:79:2E:10
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8f:33:dc:2f:71:b1:02:17:74:dc:67:04:ac:e1:79:cb:b1:
5b:08:e1:69:60:89:78:c6:d0:7e:9e:5f:b0:7f:5e:25:7f:0e:
7c:bc:d4:44:d8:cc:95:6e:1b:43:53:35:2c:ee:39:74:12:8b:
ac:da:e7:8a:bd:07:26:0a:3e:ce:57:3e:2b:d1:d3:30:20:b9:
bb:c9:a3:e5:b4:57:74:f0:f6:03:0b:e3:58:7a:f5:9c:8a:4c:
e6:9a:67:c3:55:2b:8d:17:8c:b7:db:76:53:fd:a3:89:d5:5e:
0c:fc:7b:f0:3d:22:d0:df:fa:81:3b:76:aa:4c:5a:b8:aa:a2:
48:69:3a:e6:5b:bc:f0:78:29:cf:a6:75:88:bd:de:d9:90:d5:
de:c4:6f:0a:6f:0e:1f:01:b7:77:3b:70:a8:82:39:8f:b0:79:
fb:ef:96:87:c2:46:63:46:be:ec:08:7e:2a:b2:49:ad:72:26:
78:de:dd:78:21:3c:c1:90:51:06:82:ae:68:84:f8:c8:3b:44:
80:84:18:f5:e1:98:3d:78:22:dd:e0:c5:a9:5e:d6:59:d8:59:
36:f7:4a:22:d9:db:b6:a4:0f:6c:69:3b:5b:89:4f:82:af:30:
03:0d:b9:a3:08:5c:17:29:0e:87:b5:27:2c:40:35:a6:e1:10:
de:8b:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:53 2026 by rpki-client