Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
File: n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft (raw, json)
Hash identifier: CNRNFFV6N8Uq1N8WvKnnnQTnWaN8i4iXK2jYzcmgMeQ=
Subject key identifier: 11:43:92:11:3D:DB:29:E3:13:F4:4B:9E:A5:A9:94:95:A2:4D:54:CB
Authority key identifier: 9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
Certificate issuer: /CN=9fb1f50fbf839488292b96fd93216f2001197546
Certificate serial: 019F935C20CFADE79AD686E4956E9F44B5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:56 +0000
Manifest this update: Fri 24 Jul 2026 09:01:56 +0000
Manifest next update: Sat 25 Jul 2026 09:01:56 +0000
Files and hashes: 1: Ts__go_5kraAxg_xlkVG1jwWF4s.roa (hash: SzNoYDdJ9H0cE2yBXjlxrXi58YXnSypRhyX9GFV3rA4=)
2: Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa (hash: 93kNfuvYg28fBjqCkSjdY9sAKzd0yWZzLdceU613wsQ=)
3: n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl (hash: rRurJMMjBLxNPRoo2BILBKikku9+/Fci6A0ndRdiPUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:20:cf:ad:e7:9a:d6:86:e4:95:6e:9f:44:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb1f50fbf839488292b96fd93216f2001197546
Validity
Not Before: Jul 24 09:01:56 2026 GMT
Not After : Jul 25 09:01:56 2026 GMT
Subject: CN=114392113ddb29e313f44b9ea5a99495a24d54cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:f9:1a:de:3d:0a:97:6e:08:24:f9:72:65:
f8:4f:9a:50:68:f1:61:4b:ba:12:cb:ec:80:b2:28:
2d:8f:27:4e:3d:e3:94:2f:1f:27:f8:7b:84:0e:6b:
7a:1e:3d:8f:e6:f5:5e:62:c7:a2:7b:52:59:bc:3a:
89:ff:a7:3b:35:b7:30:fb:f7:3e:10:f5:97:b0:06:
f2:95:70:db:f4:f8:71:46:da:d5:d9:84:59:43:ba:
29:f8:11:65:f1:e4:4f:e2:d6:6e:cf:f4:4f:b4:3b:
b5:f4:e3:fd:97:57:93:04:ef:8b:df:0b:61:db:67:
17:72:fa:4e:d0:17:39:5e:fe:53:98:f9:01:2d:d8:
a1:ea:91:6c:2b:b0:d0:ad:dd:64:ef:09:17:cc:96:
09:83:47:fa:70:f8:57:ab:7a:c2:4f:1a:ef:a6:18:
3f:43:e2:82:34:e8:0b:35:fb:5b:73:b7:19:63:b4:
d5:5f:3d:29:38:05:68:26:77:2c:44:e7:db:11:32:
37:c3:ee:8d:0d:c8:00:22:4a:f8:46:7f:48:25:51:
43:88:a9:a7:f6:2b:2d:dc:a9:81:b5:e4:db:29:47:
a4:db:f3:60:08:87:27:d8:7c:9f:51:be:b4:d7:20:
60:af:4f:38:75:d2:75:de:77:5e:22:0a:34:40:cc:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:92:11:3D:DB:29:E3:13:F4:4B:9E:A5:A9:94:95:A2:4D:54:CB
X509v3 Authority Key Identifier:
keyid:9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:22:03:73:38:4a:3e:00:dd:6e:ab:29:4b:5c:ee:ec:eb:a7:
44:60:f7:cb:32:c1:b6:5f:4c:74:5a:a0:30:f2:8a:3b:4c:68:
f8:4e:7f:8a:2e:52:52:8b:2f:92:87:1e:a2:aa:b9:e8:84:ed:
5e:a1:33:d4:52:d4:ef:1e:f0:eb:4f:d0:7b:05:ca:c6:83:58:
a4:6c:c5:8e:c2:16:64:3e:e2:3a:3f:bf:57:e8:4c:ce:35:ed:
59:66:e6:38:da:41:d1:b0:bd:e0:97:c9:ca:68:72:98:ac:9d:
41:17:0e:90:3e:92:61:01:45:bc:42:3d:0d:90:b4:01:fc:43:
c9:74:35:81:f4:d9:31:5e:b5:24:5d:14:dd:dd:18:97:47:44:
63:81:c7:61:19:bc:ed:a2:92:40:cc:3d:18:a4:a7:1c:91:ac:
2b:a0:a0:95:28:b4:d5:25:0f:a5:e0:7a:34:90:c4:86:87:bf:
38:5e:01:cc:1a:01:db:e4:8a:92:ce:46:78:de:ba:9f:93:8d:
02:14:b0:72:7b:0e:ae:e0:1f:96:98:8f:66:83:eb:a3:f7:68:
b2:69:43:28:b5:a7:e7:f7:68:2e:44:8c:29:77:10:ab:f0:13:
fe:38:fe:50:1f:12:fd:9d:cf:5b:e7:99:89:35:13:7f:32:21:
96:4c:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:24 2026 by rpki-client