Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: IHuzw/seorY5xHcuaJM31kKogFhI0M9iOZo5322ChHQ=
Subject key identifier: 40:99:0A:BE:27:B9:5C:2A:F0:97:56:05:57:C2:FC:6E:FA:FC:DC:BA
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019F95491EB2C13D5CB726050232AACFB2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 18:00:24 +0000
Manifest this update: Fri 24 Jul 2026 18:00:24 +0000
Manifest next update: Sat 25 Jul 2026 18:00:24 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: n4RCWfhVnYzEHrWoefpBVVhA56r2jckDj+NhBSJf29M=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:1e:b2:c1:3d:5c:b7:26:05:02:32:aa:cf:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jul 24 18:00:24 2026 GMT
Not After : Jul 25 18:00:24 2026 GMT
Subject: CN=40990abe27b95c2af097560557c2fc6efafcdcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:58:2e:7c:06:72:65:a5:17:cb:00:1a:b1:
cd:45:84:5f:88:d0:d8:b0:7a:d8:2a:3e:31:b6:9c:
51:6a:a9:3c:dc:4e:b5:27:a0:91:da:d0:52:5a:c9:
34:e5:2f:9c:95:9e:4c:a1:f3:8e:70:8a:16:51:65:
50:9b:5f:80:5a:d1:66:75:68:9f:c6:2e:4e:2c:2b:
a0:5c:ba:92:7a:5e:88:f0:bf:b3:4f:8c:db:e0:9c:
40:a2:71:d1:35:f0:f4:14:ed:0f:48:e7:59:c8:f8:
ae:dc:50:06:f1:2e:20:89:72:93:a6:eb:6b:fc:7b:
99:44:a8:28:df:59:ed:f8:bd:06:c9:72:ba:7b:38:
a8:c5:49:17:a0:0a:e6:11:90:d4:9d:89:26:46:09:
05:d3:8f:2e:3e:95:8b:ab:22:9c:23:29:34:99:22:
2d:7c:c8:a4:55:02:8b:2e:4b:29:b4:a5:1d:2d:3e:
d5:c7:ef:37:69:9b:6a:24:37:69:57:83:82:fe:b8:
7e:d9:8c:23:14:8b:44:93:19:fe:6d:73:ec:a9:8b:
f5:cf:a0:3c:39:97:18:01:3f:ac:3a:0f:1a:d9:e1:
c1:7c:a7:38:b7:d6:99:d5:a9:7a:ba:eb:2f:00:4e:
53:c4:78:3e:b4:07:4f:f3:1c:d1:81:d8:3f:7c:64:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:0A:BE:27:B9:5C:2A:F0:97:56:05:57:C2:FC:6E:FA:FC:DC:BA
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:5c:e1:76:7d:04:25:b0:a6:6c:b0:93:18:fe:9a:15:a6:
61:9b:f5:e3:c2:8f:5d:9b:4e:62:e3:3e:b3:6c:d1:69:13:ba:
e5:db:4b:7a:ac:b8:e2:01:fe:3f:cd:35:99:ed:54:c6:b5:cf:
bf:86:5d:35:b6:ae:78:ec:22:df:bf:3a:dc:e8:80:41:26:8c:
32:27:51:0e:91:58:d2:71:6e:8e:37:c8:5d:d2:01:aa:1c:87:
0c:5d:39:a3:5c:3e:01:70:68:16:52:f4:d3:4b:f5:35:10:ae:
0a:6e:89:1c:d5:9f:0c:9c:0c:28:07:ea:3c:bd:c1:71:c9:5d:
81:67:58:d5:ef:44:d4:7f:df:5e:13:ea:7c:3b:1c:7f:26:cf:
8b:99:ee:c9:8d:5c:92:55:8f:fc:2f:7c:39:ae:98:78:b2:fc:
c4:a3:5a:3f:39:62:80:98:fc:a0:24:58:40:57:e2:8f:c4:77:
39:3c:3f:d0:7d:1a:02:84:75:ba:27:69:fd:3f:89:04:ad:0b:
97:ff:c7:11:e3:99:b1:87:d3:71:58:3f:df:c6:a2:01:48:ac:
17:28:51:f9:fe:12:ef:b5:70:83:92:80:77:96:42:98:b0:0d:
dd:70:84:9b:9b:8e:1c:c0:ba:7b:75:43:27:48:ce:1e:df:9e:
33:c0:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:57 2026 by rpki-client