Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File: nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier: VHyi7zJzsTBXQt0mbXFFe4Vz5IXAej9vOqNFC+B1jFw=
Subject key identifier: 92:3C:27:22:42:89:16:6A:0A:69:B0:D2:73:1F:E9:90:00:88:73:3C
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer: /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial: 019F8FEBE4FCE67070C5B6C61EC6CFDE9DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number: 9C
Signing time: Thu 23 Jul 2026 17:00:29 +0000
Manifest this update: Thu 23 Jul 2026 17:00:29 +0000
Manifest next update: Fri 24 Jul 2026 17:00:29 +0000
Files and hashes: 1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: hy645qoyNaBGM/zu1lxrEyV5Ru/VY8tEVYrx+/Y5Lx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e4:fc:e6:70:70:c5:b6:c6:1e:c6:cf:de:9d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Validity
Not Before: Jul 23 17:00:29 2026 GMT
Not After : Jul 24 17:00:29 2026 GMT
Subject: CN=923c27224289166a0a69b0d2731fe9900088733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:14:16:90:8f:7f:4e:83:47:0a:fa:14:e1:
bb:65:17:2c:1c:b5:cc:a2:52:36:a4:17:60:4a:46:
7c:f0:bd:db:ef:0b:da:7e:cb:a3:8b:01:61:3a:83:
ee:be:c4:fc:4f:88:57:ab:3c:a6:46:3b:01:1c:ce:
62:6b:a3:ff:1a:d5:28:a2:e7:8b:8a:c9:31:cb:f4:
4a:3a:28:ee:2f:8d:fe:7c:98:54:bf:88:81:37:82:
a3:43:2b:33:e6:ef:43:2f:f5:df:1f:c5:e7:3a:70:
27:5b:a8:9d:08:3d:cf:38:d4:92:b5:e1:ec:5b:ea:
41:9e:3e:65:ac:d7:19:ea:d7:12:2d:95:19:ea:32:
cd:c3:20:88:de:5c:67:a4:8d:96:f6:b2:4f:67:4a:
49:93:00:27:13:2e:d2:75:8f:3a:ad:30:19:a1:e2:
ac:a1:35:af:5c:94:68:5a:79:a5:88:6f:e5:79:29:
db:3c:7b:18:83:6c:92:ab:40:a3:da:16:ba:0d:f7:
3a:82:76:82:78:73:7c:de:cd:a5:b1:76:40:f7:64:
b4:d6:fc:53:ea:ad:11:58:67:9a:06:dc:2f:d0:1c:
58:68:fe:3b:d9:09:d3:f0:c6:81:5a:b6:e4:7a:cb:
10:af:e6:5f:2c:4f:1b:3f:66:0f:36:6a:ce:21:0e:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:27:22:42:89:16:6A:0A:69:B0:D2:73:1F:E9:90:00:88:73:3C
X509v3 Authority Key Identifier:
keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ca:f1:fe:27:26:ee:db:1d:e5:1a:93:10:19:ba:fd:89:89:
70:0c:92:b9:51:e7:eb:b1:35:ba:89:be:7b:c9:b5:4c:72:78:
fc:39:3b:2d:e9:b2:a3:6c:ec:8f:99:25:04:51:a8:cc:05:f4:
85:5a:cc:5f:e4:31:a9:60:46:64:1a:6a:66:0a:f5:86:34:eb:
82:1b:1b:f8:03:f4:dc:98:48:ec:c5:11:d9:2d:dc:28:d7:f5:
c4:95:0a:41:8d:54:70:ab:94:86:d7:5a:20:eb:0f:8b:df:68:
2c:26:5a:76:dc:1b:b0:e2:e7:d5:44:1a:45:eb:17:e6:1a:20:
9d:46:20:10:a3:a9:d5:4a:d5:f8:a1:bb:76:11:33:8b:8e:4a:
1a:9b:68:6e:3a:dd:cf:84:f6:c3:32:79:32:41:2c:8a:b1:c7:
22:06:67:e9:88:61:8c:40:80:be:e0:43:27:ea:e5:55:c2:f4:
42:61:91:56:55:6a:e2:f9:95:6a:20:c2:cc:7a:e2:0c:ad:d7:
8b:6f:b1:aa:54:75:f6:2f:c5:dd:50:38:19:da:21:e6:c9:75:
41:9c:df:b7:4c:5a:ff:28:81:17:26:1e:8f:64:17:b9:ee:14:
31:d8:32:fc:17:19:75:b9:27:da:62:65:cb:03:bb:f8:e5:68:
24:01:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:32 2026 by rpki-client