Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: pmqkMoMXMR00sPn7LGFEAyRFPgmmIGNnuo0kWlfDRlg=
Subject key identifier: 4B:90:9E:C6:D5:8C:91:22:8E:7C:42:DD:C1:D1:E5:0C:19:99:A9:9B
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 019F935B2AA9DE32DD9CE18F705337202696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:53 +0000
Manifest this update: Fri 24 Jul 2026 09:00:53 +0000
Manifest next update: Sat 25 Jul 2026 09:00:53 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: UawMHtqDbr2RiqA+3R9YmlVpdTTpFdHegscsZRVww8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:2a:a9:de:32:dd:9c:e1:8f:70:53:37:20:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Jul 24 09:00:53 2026 GMT
Not After : Jul 25 09:00:53 2026 GMT
Subject: CN=4b909ec6d58c91228e7c42ddc1d1e50c1999a99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:53:d7:9e:04:e5:09:96:45:34:10:29:c6:
c7:b0:a2:df:2a:44:1d:d4:c0:67:95:05:fc:e4:87:
cc:30:ac:77:4f:cb:d2:ad:46:b2:ac:ce:15:9e:f6:
52:25:76:e8:57:05:54:60:e3:29:43:a2:62:02:0c:
d7:72:44:79:3a:bc:86:d9:a8:33:b4:ef:c9:46:36:
57:12:1b:1a:3d:52:ec:5e:34:19:a9:43:02:00:16:
35:7d:03:ba:bf:ad:34:9b:dc:af:cb:db:54:d6:15:
b8:ff:f6:89:4d:38:75:32:d8:9c:7d:20:f5:ce:04:
95:86:c4:79:fc:9f:c8:b8:9f:d5:c0:ad:4c:2c:28:
70:4e:f7:fc:a5:cb:16:6c:70:39:02:88:bd:14:d2:
7c:ff:0d:99:af:34:9c:f8:ca:22:df:bd:4d:2b:cb:
3a:f5:ce:00:ab:ed:e7:b4:99:cc:8f:2d:62:54:fc:
00:b5:73:1a:dc:86:1e:fd:2c:f3:e7:5d:86:ad:19:
b0:7b:29:74:69:d5:96:46:62:d4:32:d3:8e:3e:24:
45:d6:1a:14:12:1d:0b:e4:97:09:fc:46:04:91:e5:
7b:3f:2a:23:48:27:d2:74:69:e6:a4:a7:8e:59:c2:
69:8c:1a:66:99:81:1e:0b:05:6a:91:c4:02:ff:cd:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:9E:C6:D5:8C:91:22:8E:7C:42:DD:C1:D1:E5:0C:19:99:A9:9B
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:c2:cb:5f:6a:1e:96:c2:f2:f3:a4:d1:69:19:ea:fe:dc:
85:e5:85:6b:51:87:c4:3d:4e:a1:f7:73:15:3a:d2:7d:6c:3f:
f6:c3:d5:60:f8:29:1c:c1:52:79:22:9d:f9:40:78:0f:ae:24:
86:e3:8e:a3:eb:81:78:37:b8:b8:82:56:8d:c2:9c:2c:3d:ee:
e5:48:22:ed:4c:c0:7d:b0:a6:0b:5a:51:6e:ba:e1:a4:57:a5:
0a:6b:82:79:02:a2:11:8c:40:b4:50:26:30:e9:70:82:9c:de:
c2:37:fc:89:c4:50:4c:a4:13:fa:b0:b8:fa:ee:d7:1f:80:08:
fc:1c:53:04:a3:33:ca:1f:27:57:08:d2:ff:ed:04:70:27:9f:
0d:67:b3:37:b7:97:6e:52:1c:e0:ac:13:ee:b2:8a:45:30:b7:
f7:e2:7b:e2:c6:f2:0b:39:9e:fb:5b:95:a5:d6:6a:5c:41:60:
51:32:24:90:dc:48:14:ae:83:e3:29:18:1c:c2:b8:8d:3f:a2:
27:b0:1c:64:e0:fd:99:e3:96:7b:61:bf:fb:fa:4b:18:a9:dd:
6c:8e:65:a9:eb:76:0a:9b:1f:49:7c:a5:8b:47:94:2c:85:3f:
11:e6:ee:d5:fe:f7:23:3a:89:7e:0c:4c:fa:bc:92:bc:0a:d8:
14:95:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:32 2026 by rpki-client