Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: 4pqWLJUA/bXl5FUBXBTq4VCjD8/ZqS9QKrCJ+MuN278=
Subject key identifier: B4:C6:27:37:8A:A9:90:8A:43:3A:35:72:9E:25:8E:AE:95:3B:45:C1
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 019F94A4A123C0851E4D2F1836E9BE1F25F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 05BB
Signing time: Fri 24 Jul 2026 15:00:44 +0000
Manifest this update: Fri 24 Jul 2026 15:00:44 +0000
Manifest next update: Sat 25 Jul 2026 15:00:44 +0000
Files and hashes: 1: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (hash: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: bVgiwIbaoCJx2J9znealkDIB9qfHx7AHOSuc5+mfA1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:a1:23:c0:85:1e:4d:2f:18:36:e9:be:1f:25:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jul 24 15:00:44 2026 GMT
Not After : Jul 25 15:00:44 2026 GMT
Subject: CN=b4c627378aa9908a433a35729e258eae953b45c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:5d:6a:2f:16:13:7d:e2:8e:1b:04:1c:bf:
e5:3b:03:43:d4:fa:03:5b:2a:eb:42:5b:cd:3f:b5:
2a:a4:d1:49:63:31:f0:dc:bf:5c:4c:e4:5c:72:03:
c4:b9:ab:e3:fe:65:50:fa:e1:35:69:92:f7:d6:72:
52:8e:5d:52:66:b1:b6:d9:71:0c:7b:a0:d2:ce:46:
35:fc:53:94:d8:28:33:f6:23:c5:2b:af:f8:7d:1a:
93:b1:5e:7f:07:5f:db:b5:22:97:c2:41:ef:ea:c0:
76:65:a9:51:55:c2:e1:83:6c:a0:cc:21:58:a1:0a:
8a:56:d6:89:b4:7c:d2:8b:d0:9c:6c:5f:f9:87:3c:
c0:ca:ff:a3:38:99:78:a2:29:96:e2:40:f6:65:78:
8f:90:5f:1d:e1:e6:be:46:83:83:f1:58:7e:6a:70:
ea:ff:0b:37:b4:61:f6:f9:c2:32:07:ab:d5:1f:0a:
ab:0a:ea:11:93:9d:60:8f:0a:ee:e0:0d:da:16:cb:
85:ec:30:be:f6:de:d6:7e:31:31:c8:ce:9f:6c:31:
5b:9b:2f:75:c5:be:07:b6:5a:58:1f:55:ac:c3:2b:
8f:b2:2a:94:03:b4:5a:03:1a:4c:82:7a:59:46:bb:
c6:a0:27:d3:be:5b:bc:05:7d:51:93:8d:b6:7c:e7:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:27:37:8A:A9:90:8A:43:3A:35:72:9E:25:8E:AE:95:3B:45:C1
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:d9:4e:0d:e1:6c:ec:54:7a:1d:4f:e9:88:87:f6:df:8e:
56:cc:35:03:91:a9:37:fc:75:40:2a:7d:7e:a0:3c:6c:dc:73:
f9:a1:53:29:50:87:81:ca:95:1a:19:eb:ef:f2:78:de:48:ce:
6d:9f:51:3b:b8:a3:2c:35:cb:28:62:14:a5:6f:e5:65:ba:52:
ee:ff:1c:6a:8b:19:c3:e5:6c:ef:0c:b5:76:ea:38:7d:47:87:
d8:2e:4b:ef:fc:a0:f5:7e:fc:39:0b:ca:06:bf:bc:fc:92:ab:
a5:50:4f:cb:83:37:dd:c5:ee:3c:16:c8:90:f7:85:44:7a:68:
16:f7:08:b8:64:22:72:37:4e:ec:60:6f:cf:9e:2e:0f:78:71:
62:10:c0:61:6e:ae:d7:5c:45:a6:bf:2a:4c:a1:35:b1:a3:f6:
89:2b:4b:db:f2:c5:41:14:da:bc:65:e8:72:b1:1e:22:ce:1e:
81:c4:41:b8:46:8d:7c:8b:34:42:2b:a7:e5:4f:df:65:de:07:
9b:47:c9:72:ca:7e:43:6a:c3:af:32:16:f0:bd:14:85:61:8e:
0d:6b:a5:8c:ce:1e:7e:d9:7d:1a:bc:50:05:19:47:a4:4a:65:
f0:69:8c:e8:e6:d0:f1:f6:8b:64:b0:19:7d:59:c7:c6:ad:ce:
e6:95:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:24 2026 by rpki-client