Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: YCoEdKvuanPl6L0r4Z2NP41dVt7QIyIO3dFCY85bgDE=
Subject key identifier: 6E:9B:3E:E1:0D:DC:C4:F5:3E:70:12:9E:A7:1A:EA:5E:40:18:2A:E3
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 019F92B63EC2C070219296E74800B00A99B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 0653
Signing time: Fri 24 Jul 2026 06:00:44 +0000
Manifest this update: Fri 24 Jul 2026 06:00:44 +0000
Manifest next update: Sat 25 Jul 2026 06:00:44 +0000
Files and hashes: 1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: 3iTsGCaj0Lr3X5FxcMZ6i0V3K5wLbbXgjxLyQE1ngoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:3e:c2:c0:70:21:92:96:e7:48:00:b0:0a:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jul 24 06:00:44 2026 GMT
Not After : Jul 25 06:00:44 2026 GMT
Subject: CN=6e9b3ee10ddcc4f53e70129ea71aea5e40182ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:b6:4f:9d:57:b9:42:92:69:5d:3a:ed:20:
19:da:43:6e:df:81:d1:28:fc:8b:13:14:04:d5:8a:
67:cc:07:60:de:05:8e:3a:8c:2e:32:6f:f0:8d:b2:
90:a3:35:69:37:41:42:1a:16:fe:ec:8e:33:b1:37:
0c:be:03:7c:37:03:1d:5f:b7:43:92:6f:7c:44:93:
39:5c:8d:d5:71:95:ba:42:55:a7:15:6d:a7:d6:2c:
49:08:1a:3b:05:85:9b:dc:4e:13:7e:ee:3b:85:d7:
5b:fd:b3:40:7c:f4:7a:c6:7b:7d:95:a2:64:46:00:
0c:0f:6b:21:a5:08:96:72:88:b8:70:90:b2:dd:35:
41:0f:ea:94:42:77:fc:08:a3:4c:ab:ac:b2:38:ec:
24:31:de:8c:4e:6d:94:37:92:cd:17:64:ca:80:e6:
15:6f:94:73:0c:5b:f9:11:f2:11:2c:e0:11:af:a0:
8e:7d:f4:8a:3a:16:17:fb:37:e4:23:2a:a5:26:22:
6a:c3:8d:3a:d0:d3:b3:d7:34:8b:08:56:56:ea:42:
76:68:63:00:49:77:d2:8d:f8:6f:cd:d3:63:05:e1:
29:f4:b3:6d:84:2c:8c:95:45:43:6f:f8:f2:82:80:
bb:ca:81:a9:9d:9a:70:ce:9b:36:32:4f:90:94:a3:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9B:3E:E1:0D:DC:C4:F5:3E:70:12:9E:A7:1A:EA:5E:40:18:2A:E3
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:bc:68:2b:df:3f:79:02:71:2f:c0:e2:b7:94:36:71:bd:
6b:ea:db:b5:16:66:02:09:93:6a:f3:a7:4c:f3:38:db:a7:dc:
99:5e:62:02:3e:8c:c2:ba:cc:c2:ed:c9:c9:e3:d6:6e:91:ae:
c5:54:61:22:d1:68:1c:0f:e8:c4:b8:95:47:99:4e:e9:bc:e6:
b5:6a:8e:4c:e2:61:58:ea:ad:b5:fe:2f:83:f2:01:b0:aa:a5:
48:68:9b:58:45:b0:88:f1:ae:b3:50:aa:f7:22:e6:76:f2:cb:
05:d9:15:b5:2e:a5:a6:8e:86:91:ad:9c:a1:71:90:2e:0c:52:
f6:a1:9a:5f:4e:6a:ed:8b:9a:36:fa:b5:b4:3c:3d:49:e1:8f:
58:a8:23:93:94:80:41:36:59:e8:03:83:be:93:22:c8:0d:13:
0c:68:10:b5:39:f8:6d:ee:3e:9f:36:8f:88:7b:9d:ca:12:da:
a0:9c:a9:d0:a4:a6:95:a1:65:67:ae:f9:89:a5:e3:0a:f8:7f:
7f:b8:d9:03:f9:ca:89:7b:4b:45:96:03:f9:f0:33:4c:ca:c1:
30:c3:f4:b5:fb:3f:9d:5a:6b:23:77:a0:a8:fe:28:c5:ea:eb:
08:8a:0f:7b:fa:c6:eb:16:69:ed:09:fd:cb:6e:19:d0:e2:22:
80:5c:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:05 2026 by rpki-client