Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: Hhv1i1oo2YgwR2JLy1oeN9jB2/TxhjHGgcflq7k9Eus=
Subject key identifier: 05:8B:C3:5B:AB:68:E4:55:6B:94:FA:F6:87:17:29:A7:04:0C:12:E7
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019F93FFDD68788FF678936C46C7E901A952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0CE4
Signing time: Fri 24 Jul 2026 12:00:46 +0000
Manifest this update: Fri 24 Jul 2026 12:00:46 +0000
Manifest next update: Sat 25 Jul 2026 12:00:46 +0000
Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=)
2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: uV3T2r1u8AhDgp76Q6CpI7+ECHBI7AJwrTNlKO1CWeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:dd:68:78:8f:f6:78:93:6c:46:c7:e9:01:a9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jul 24 12:00:46 2026 GMT
Not After : Jul 25 12:00:46 2026 GMT
Subject: CN=058bc35bab68e4556b94faf6871729a7040c12e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:2c:68:63:d8:3e:2a:5e:83:80:d2:63:c0:
71:a4:ae:42:8e:ba:dc:46:a5:d3:57:c4:b2:de:35:
fc:37:5c:22:b2:a6:91:f1:14:d4:b4:be:9e:3c:7f:
72:06:aa:92:64:24:71:9d:bb:6a:20:62:4e:f7:21:
5c:0b:86:cb:44:97:52:89:ba:fc:7f:ea:db:cb:57:
da:05:d3:e0:72:aa:fa:62:d6:db:23:95:eb:c2:62:
cd:ce:2f:84:d3:5a:7a:de:4b:31:9e:4c:2f:c9:01:
81:91:70:47:1f:c9:34:d9:0e:a5:4e:44:67:ae:29:
b6:d4:26:0c:e8:e3:9d:96:52:e9:4a:61:54:53:71:
bf:68:17:10:ca:9a:dc:fd:8d:93:9c:cc:cf:f2:b5:
e2:97:8d:88:6f:9a:a9:c4:99:f9:ed:65:e0:a2:e3:
75:2d:db:42:d6:63:6b:90:c0:ca:8d:fb:9e:43:5c:
c9:ec:ee:ba:ef:af:55:06:cf:b3:b2:32:a4:eb:20:
e7:84:91:a4:c7:b9:f5:4c:44:b6:63:af:f6:15:3f:
00:50:bf:4f:f5:e0:77:c9:53:34:2b:eb:23:90:0a:
44:ee:cb:56:48:44:bc:0c:06:75:66:84:ae:41:0f:
d5:48:ee:d3:7d:2b:8d:54:4f:0c:33:c4:95:84:32:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:C3:5B:AB:68:E4:55:6B:94:FA:F6:87:17:29:A7:04:0C:12:E7
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:86:7b:d6:51:04:2c:ce:f7:ea:0b:06:94:a2:16:3e:e3:
3c:65:26:f0:bb:57:37:75:d0:1f:56:2b:66:39:31:49:7a:72:
ee:b7:f5:53:1e:17:48:d7:25:3d:5f:0e:b3:fb:ac:26:ff:ca:
0b:4a:c0:88:c0:47:88:5f:d9:9d:85:c5:dc:9b:81:de:be:fe:
5d:b2:59:18:e6:a6:46:f5:7f:8d:60:b3:5a:83:e9:c1:f9:56:
da:9a:12:90:f1:9f:28:11:fc:3a:86:ee:6a:92:7d:ad:9f:9f:
11:c5:1f:24:44:11:5a:af:e8:50:26:f2:ba:4d:d1:15:67:b2:
61:64:2d:41:23:a8:87:23:3f:fd:27:a9:9e:9d:c7:1a:bf:30:
bf:21:e4:4b:2f:d2:74:c7:3b:1d:f1:d2:1b:e4:af:3a:ab:e4:
3d:d1:b6:41:12:67:f7:57:e6:18:3b:84:c9:5f:08:4d:e0:51:
02:26:b3:2e:6b:c9:55:a5:b6:12:b8:86:e8:c7:f3:57:d3:03:
d5:f1:50:48:45:4d:b2:e6:1a:03:af:b6:63:f0:f6:b6:ac:62:
4b:09:d8:62:6c:f0:65:3c:2f:bc:45:77:91:ac:a9:da:4f:a0:
c2:bf:5f:1c:d8:80:fd:02:b2:80:14:56:04:eb:48:8c:8d:ab:
2a:34:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:10 2026 by rpki-client