
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: 4prY70c14unADWWgZ/Ohzeik931zP84d+pX1Mh62Onk=
Subject key identifier: E2:33:D0:E3:CC:AE:B4:5B:97:D9:02:E3:8E:2E:08:BA:6B:1E:DF:35
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 019F90910860993A0F31C357981CA758B83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 0142
Signing time: Thu 23 Jul 2026 20:00:51 +0000
Manifest this update: Thu 23 Jul 2026 20:00:51 +0000
Manifest next update: Fri 24 Jul 2026 20:00:51 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: 6aOxjbMfIE2tYLP1nXrDneSTRGsDiRvXlFtCrACVqdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:08:60:99:3a:0f:31:c3:57:98:1c:a7:58:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Jul 23 20:00:51 2026 GMT
Not After : Jul 24 20:00:51 2026 GMT
Subject: CN=e233d0e3ccaeb45b97d902e38e2e08ba6b1edf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:47:bc:ce:1c:da:0a:37:d5:19:f8:26:93:
5d:b2:9b:81:51:ee:d8:0f:48:b3:5c:64:c0:73:79:
49:99:30:8c:df:e8:9d:d8:53:66:17:85:da:57:95:
78:5c:a1:87:8f:98:ba:7d:87:cd:82:a5:21:86:0f:
13:7f:41:b7:e3:5b:50:a3:4b:cf:e0:07:8c:c8:35:
66:b3:cb:59:31:d6:f3:47:bc:4f:3e:e1:96:24:e9:
2c:65:1a:12:d8:0c:83:78:fb:2a:d9:20:ae:cd:53:
91:ad:e0:97:2b:d6:46:f1:28:c7:b0:92:cd:35:b0:
0c:db:e3:2d:04:63:58:4d:44:d7:f3:3e:f4:05:00:
6a:60:59:43:d0:68:1b:69:6b:fd:5e:ac:01:42:e7:
a5:07:19:b3:0c:dd:c8:1a:32:64:ba:7f:1b:55:26:
e9:02:00:34:cf:d2:68:1f:98:9c:2c:07:7b:ec:c1:
a8:77:9d:ec:b6:fe:ce:49:97:d0:c8:e0:f9:da:94:
90:8f:8d:0b:a2:10:fb:4e:5b:41:87:10:1b:60:2f:
86:c8:5e:ee:c7:78:2b:3b:34:c6:1c:2b:90:50:68:
7a:c0:fd:32:24:df:50:dc:b5:46:ad:e5:2a:cc:c1:
89:7d:4a:eb:39:f1:8e:fa:a7:cc:51:a7:35:7a:49:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:D0:E3:CC:AE:B4:5B:97:D9:02:E3:8E:2E:08:BA:6B:1E:DF:35
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d1:da:65:5e:5c:5e:0d:ad:49:75:58:02:c4:45:cb:ce:5c:
fe:1f:fc:63:72:59:58:8f:92:a7:62:e4:cb:b2:e9:ab:0c:d3:
ef:bd:25:d6:4b:b5:37:0e:d8:c7:ca:a9:39:32:f8:75:83:48:
d2:90:81:1f:54:76:09:9c:cc:0c:78:d2:af:65:e0:f5:d1:c5:
fd:2b:90:f6:7e:1f:ed:98:a9:cf:cf:34:e1:8f:63:6c:4a:97:
fa:d7:47:16:b1:60:c0:ca:2b:74:61:94:20:d9:27:f4:d1:f9:
12:ab:72:4f:23:80:f7:a8:84:35:33:e1:16:43:36:85:c9:51:
cd:97:6b:cf:a3:a5:a0:4b:1d:dd:7d:37:bc:d5:b0:57:77:1f:
d0:66:33:55:c5:f3:b6:5b:9e:68:3a:af:be:c6:8c:7a:e8:19:
0c:a0:43:6e:88:c2:e0:88:43:49:e7:d5:9c:03:03:35:17:f0:
aa:5e:68:2f:18:d1:16:9e:45:d5:41:31:11:46:af:ae:b3:86:
20:50:21:ea:69:2e:f7:75:10:19:39:cf:fe:d6:9e:a0:1d:63:
28:fa:32:8b:bb:41:0f:5e:c2:51:f9:66:b6:1f:04:32:b6:8e:
77:33:32:86:a3:a3:46:c5:9c:bb:7b:2f:c6:4a:45:48:11:a2:
ba:ba:02:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkQhgmToPMcNXmBynWLg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjkxMWFmYjI5Y2UzMzUyNzY3ZTcxMzlkOWI5NWRmOGEw
NTk4Y2IwHhcNMjYwNzIzMjAwMDUxWhcNMjYwNzI0MjAwMDUxWjAzMTEwLwYDVQQD
EyhlMjMzZDBlM2NjYWViNDViOTdkOTAyZTM4ZTJlMDhiYTZiMWVkZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H5HvM4c2go31Rn4JpNdspuBUe7Y
D0izXGTAc3lJmTCM3+id2FNmF4XaV5V4XKGHj5i6fYfNgqUhhg8Tf0G341tQo0vP
4AeMyDVms8tZMdbzR7xPPuGWJOksZRoS2AyDePsq2SCuzVORreCXK9ZG8SjHsJLN
NbAM2+MtBGNYTUTX8z70BQBqYFlD0GgbaWv9XqwBQuelBxmzDN3IGjJkun8bVSbp
AgA0z9JoH5icLAd77MGod53stv7OSZfQyOD52pSQj40LohD7TltBhxAbYC+GyF7u
x3grOzTGHCuQUGh6wP0yJN9Q3LVGreUqzMGJfUrrOfGO+qfMUac1eknS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIz0OPMrrRbl9kC444uCLprHt81MB8GA1UdIwQY
MBaAFJ65Ea+ynOM1J2fnE52bld+KBZjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYt
NjVlMjQ1NzEzMmVmLzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYtNjVlMjQ1NzEzMmVm
LzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNHaZV5c
Xg2tSXVYAsRFy85c/h/8Y3JZWI+Sp2Lky7LpqwzT770l1ku1Nw7Yx8qpOTL4dYNI
0pCBH1R2CZzMDHjSr2Xg9dHF/SuQ9n4f7Zipz8804Y9jbEqX+tdHFrFgwMordGGU
INkn9NH5EqtyTyOA96iENTPhFkM2hclRzZdrz6OloEsd3X03vNWwV3cf0GYzVcXz
tlueaDqvvsaMeugZDKBDbojC4IhDSefVnAMDNRfwql5oLxjRFp5F1UExEUavrrOG
IFAh6mku93UQGTnP/taeoB1jKPoyi7tBD17CUflmth8EMraOdzMyhqOjRsWcu3sv
xkpFSBGiuroCsw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:25 2026 by rpki-client