Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: 02ItITvrhgLjFpZQzT2XlaR/4qQ5l+3sBVxYbfPz9aw=
Subject key identifier: 4C:10:C4:D0:B0:B0:51:AC:E1:2D:0B:5A:1F:7C:47:7C:83:58:1A:26
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 019F94366CADF7352AD33C5278C0764150BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 099A
Signing time: Fri 24 Jul 2026 13:00:22 +0000
Manifest this update: Fri 24 Jul 2026 13:00:22 +0000
Manifest next update: Sat 25 Jul 2026 13:00:22 +0000
Files and hashes: 1: nUE0Oddv4YkeQI7iXvreM5ZLtJg.roa (hash: e35k/hWFhNoP6OXE0gOQ2vpFvd0hf+wf6J6udXQDs0w=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: v/fqXWKTNji/bSAw8WDUe7KTFImLwDmPFN6fVsr7RBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:6c:ad:f7:35:2a:d3:3c:52:78:c0:76:41:50:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Jul 24 13:00:22 2026 GMT
Not After : Jul 25 13:00:22 2026 GMT
Subject: CN=4c10c4d0b0b051ace12d0b5a1f7c477c83581a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:c0:4d:4e:ac:1c:68:48:41:e7:8c:b9:9c:
23:40:ae:83:ef:26:a6:01:66:75:54:9d:a7:15:e1:
f3:33:25:1f:e8:9e:68:f0:be:0e:0c:34:71:73:ae:
9c:76:1f:19:6f:d9:3f:db:c8:90:52:c0:14:4f:ee:
e5:1e:0a:07:cf:63:24:30:5b:47:b1:fc:35:49:e2:
fb:d2:14:5d:ef:68:32:35:8f:b3:9b:f1:9d:aa:ef:
d3:ae:7b:16:92:d3:53:17:9f:53:44:e5:ad:f1:37:
0c:ba:23:2e:15:5e:60:a5:eb:be:27:cd:9a:6d:5c:
30:27:ea:ea:fe:33:ea:f6:bc:7d:24:c1:36:c9:41:
b7:60:be:ed:83:db:ef:d2:31:0e:08:41:0f:f3:74:
6b:2f:28:79:bb:96:70:df:26:7a:ba:90:95:e9:15:
ae:d8:88:7c:ad:35:90:c9:60:77:2e:6c:16:ef:9a:
f5:24:a4:b8:27:24:44:5b:f4:1a:e4:60:8c:44:47:
5b:cb:ad:ce:8e:79:9f:fa:8e:93:c2:cc:cf:1a:cf:
4c:1f:45:37:e7:2b:7f:5b:ae:dc:0f:38:62:c5:15:
81:be:c7:7d:66:2e:05:d6:73:e2:38:96:2d:9e:3f:
42:ad:4e:fc:9d:c5:27:47:fb:76:42:07:5b:bb:5b:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:10:C4:D0:B0:B0:51:AC:E1:2D:0B:5A:1F:7C:47:7C:83:58:1A:26
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a4:60:79:7b:86:2c:9a:99:f3:1a:82:64:da:51:ad:fb:22:
09:d3:28:13:88:a0:2d:dc:07:af:ea:66:eb:e6:1d:6e:74:af:
2c:e2:8b:d7:7b:62:db:1e:d5:66:cd:7a:50:1b:ea:3c:e7:30:
1a:f7:97:8e:1a:c4:1f:ef:30:26:c4:2c:67:71:81:8b:4c:a2:
d1:52:85:7f:79:eb:09:ba:37:98:5d:b8:ad:bb:c7:f9:af:d5:
0c:39:14:52:d6:2f:79:9e:ed:7b:f7:15:75:02:1d:e8:2e:4d:
f5:13:9f:44:3a:42:0e:cb:a6:b2:30:7a:da:47:a9:37:47:bb:
f9:bc:e5:78:f8:df:74:79:c9:4f:04:31:44:ff:fa:99:45:64:
91:c3:a7:c7:b2:30:c8:79:43:3c:8c:85:8a:f0:6f:0e:14:21:
8a:0d:12:81:f5:84:1d:91:0e:ed:53:8e:b4:8f:a8:ab:85:48:
d2:32:f0:d2:49:cf:67:38:2d:4e:df:f1:af:d3:ee:bc:ca:00:
24:e7:ae:ff:5b:bc:35:7c:02:97:63:60:89:58:f8:3c:5e:3c:
23:ee:bb:63:b1:d2:e5:f7:bf:8b:a8:39:00:54:5d:15:f7:26:
e9:49:d6:a1:41:38:d3:9c:26:60:6f:35:e9:b2:8c:c1:c3:b2:
85:92:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:56 2026 by rpki-client