Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: oUxzl1Vc2bmGHpyIhaCS6UzZKa5Uz0YztBpG5B5R70k=
Subject key identifier: 8A:28:D0:0A:B7:E7:C9:71:4D:9D:DF:6D:C8:6C:43:49:5C:AC:F0:E5
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 019F946D8A7AB3605DD19FDFBDC6D27D82FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0F94
Signing time: Fri 24 Jul 2026 14:00:34 +0000
Manifest this update: Fri 24 Jul 2026 14:00:34 +0000
Manifest next update: Sat 25 Jul 2026 14:00:34 +0000
Files and hashes: 1: 5RFARNnQP81iGTseWeUutxn3EXI.roa (hash: Nxourp9u5nBIWhDVwCVmI/AilNX0cSXhcM93qEhrhhU=)
2: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: O/qs/9IUUmkkTuyeNLtE1hO0St2DOvPBITnU+VW+ETo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:8a:7a:b3:60:5d:d1:9f:df:bd:c6:d2:7d:82:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Jul 24 14:00:34 2026 GMT
Not After : Jul 25 14:00:34 2026 GMT
Subject: CN=8a28d00ab7e7c9714d9ddf6dc86c43495cacf0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:77:72:da:6f:1f:25:2f:ba:59:2c:a8:d9:
23:4d:03:ce:af:96:82:b4:b6:23:b7:e8:f7:58:14:
fe:aa:20:27:e7:23:7d:94:22:bd:d4:e1:6d:2d:b2:
e5:80:a3:4e:64:e9:6a:da:0d:25:8d:45:91:89:f6:
33:f2:51:32:c9:35:cd:84:29:f4:d7:d8:ec:bd:08:
54:d7:14:76:62:c7:db:43:74:7b:61:36:38:17:ae:
71:ad:65:3f:73:12:2e:67:af:7c:95:73:77:7e:2c:
dc:f2:12:ce:e5:f8:d3:d7:5a:fb:72:63:c5:f3:bb:
da:04:a4:fa:32:0e:e4:d0:07:f5:99:fd:31:3e:7e:
e9:c4:5a:a7:dd:bf:fe:47:9a:d9:e9:1e:6f:87:a1:
c9:6d:be:6e:91:28:5d:5d:dd:7e:f6:d2:5b:91:b0:
5c:9c:93:99:d6:56:02:b6:84:2b:c8:4c:f5:b9:13:
e9:8f:ca:ad:64:a4:1c:bc:c1:31:e7:91:23:f8:3c:
3a:44:c7:5f:08:17:3e:ee:99:79:03:aa:4d:e6:82:
9b:c2:00:c7:49:d7:98:19:86:09:eb:d9:47:29:44:
9f:3e:be:bb:2a:f2:c3:5c:3a:12:6f:3a:be:ac:08:
3a:50:f9:20:90:33:5f:c6:1e:a2:c4:0f:77:5a:98:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:28:D0:0A:B7:E7:C9:71:4D:9D:DF:6D:C8:6C:43:49:5C:AC:F0:E5
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:83:3a:16:e1:65:36:fc:44:29:06:cf:41:ce:35:74:59:
18:1d:53:d0:91:45:9c:c5:5e:46:13:f1:7a:f8:b7:20:b2:24:
39:43:98:3c:14:6b:fa:ce:31:64:69:4a:de:1f:bf:c0:b3:54:
62:30:dc:45:fe:75:48:9e:c4:de:a6:66:89:74:69:a2:73:de:
48:1c:80:48:4e:24:a5:b0:f4:0a:8e:10:1f:1d:49:75:f1:a1:
50:48:08:68:e8:99:29:82:bc:73:61:4c:b1:7b:6b:c5:f4:5c:
11:e6:77:61:0a:52:ec:38:0c:c3:9e:95:19:0d:97:32:a5:a5:
c5:75:0d:68:f6:ac:61:6e:7b:c1:19:b2:c4:56:fc:e4:bd:48:
6a:94:36:ed:e1:e8:48:4f:27:5f:4c:4b:59:87:4d:73:da:9c:
18:3d:5c:3f:fc:9e:f8:85:ea:20:f5:7f:99:9c:a4:9a:1e:fd:
de:a6:68:28:d5:78:2e:b5:c4:5c:98:40:68:94:a5:e2:12:cb:
94:c7:e5:24:32:e4:4a:b5:ff:aa:71:3a:b3:8b:87:d3:c5:21:
89:4f:1a:96:0b:3f:ef:66:f1:dc:4e:39:55:de:21:3c:f5:f9:
4f:5e:a3:b2:f5:5a:3f:9d:f8:7b:22:a4:8d:ac:b9:56:35:c8:
58:aa:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:23 2026 by rpki-client