Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: uikVmcWRFg9Utt6dXBxT2BWXUNID1TZrXdkhEga+bi8=
Subject key identifier: B5:48:B3:D7:2F:5E:3C:E6:5C:2D:BF:A7:58:FF:0E:5D:A5:D9:90:EB
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 019F8E6C33CB841953396A8F2ABAD997A0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 1061
Signing time: Thu 23 Jul 2026 10:01:23 +0000
Manifest this update: Thu 23 Jul 2026 10:01:23 +0000
Manifest next update: Fri 24 Jul 2026 10:01:23 +0000
Files and hashes: 1: Og8b6mn9T1akZjxc4TVcMnSz1As.roa (hash: MZENTXsLseNKZbHPbPVFQM4cXWctRVemJxC3RSLuLEk=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: 5TXji1tKGhsj8K48jv7GqcW3ym27zk8NL5QOGoXwri0=)
3: qpf2jrPnGEdSelRtM1fGztVUn_M.asa (hash: T6+awxj1fPEBE6Cn0I06mdbSa3YDzKpDM/bjQAsbn8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:33:cb:84:19:53:39:6a:8f:2a:ba:d9:97:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Jul 23 10:01:23 2026 GMT
Not After : Jul 24 10:01:23 2026 GMT
Subject: CN=b548b3d72f5e3ce65c2dbfa758ff0e5da5d990eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:c0:2c:62:f0:9e:f3:69:92:63:5a:1f:8f:
06:3a:e4:5a:d0:93:72:69:61:af:42:26:b9:8b:5e:
d3:c5:2d:7b:d9:51:e9:d4:64:68:72:94:4c:6b:41:
33:d9:37:9c:d5:75:8b:45:fd:9e:26:b8:95:69:6c:
51:58:08:c9:01:b9:43:a4:ef:c7:65:dd:9c:9a:75:
fa:ac:b3:e6:d6:0e:d5:18:8f:2b:ae:31:31:8e:7e:
01:4d:52:ca:c8:a3:df:22:9c:0b:33:6c:7d:5b:d5:
b5:c5:25:b5:8c:de:f3:59:9d:b4:d5:9c:1f:52:2c:
7c:51:ca:9d:20:d0:b3:84:a0:90:c6:9f:1f:00:74:
93:51:1c:85:c0:c5:8a:a2:8c:ec:a4:ac:99:e2:32:
c4:3c:2d:f4:76:85:e1:c6:bd:c5:8a:4f:78:cc:63:
c3:57:39:85:0b:f9:1a:f1:68:bf:0e:31:25:7c:41:
25:1c:a9:4b:98:6f:24:96:25:ff:f6:de:2e:b1:7d:
16:0e:54:c0:41:66:2b:ff:83:ca:d5:89:83:f8:b9:
6f:26:74:81:cb:52:5a:13:52:e5:91:af:6d:d1:8f:
0a:b8:93:40:c5:66:e7:2e:a8:f9:38:fa:39:8b:84:
ad:1f:e5:8b:ec:a2:5a:92:7a:f2:b7:fe:18:c7:a1:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:B3:D7:2F:5E:3C:E6:5C:2D:BF:A7:58:FF:0E:5D:A5:D9:90:EB
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4b:b7:73:53:0c:c4:f8:07:ec:14:31:fa:e1:24:7b:98:38:
f4:ee:ba:35:f5:b7:0d:78:4b:ff:76:47:58:08:ea:63:d4:a3:
a3:02:8d:69:6f:89:0f:2c:ce:aa:b6:d7:67:67:c7:06:50:3e:
08:db:7d:e8:06:87:43:12:0f:54:db:56:58:2e:01:2a:ae:83:
95:c3:40:17:c1:93:4c:a9:aa:2a:a6:f5:a0:3c:79:af:66:35:
86:b0:55:94:20:1b:30:8d:fa:98:9e:f8:2f:3c:10:3f:43:77:
ae:47:1d:95:a7:42:a1:4e:47:ec:a1:ec:43:a1:11:8f:9a:b6:
df:6c:81:b1:73:ce:41:66:dd:e2:e9:2c:20:ad:cf:df:49:09:
51:49:61:ff:95:81:be:4b:c8:d2:cf:ff:ce:a9:58:da:ca:e3:
37:e0:b2:a3:58:a1:d4:5a:67:1b:1f:be:97:ea:56:22:a0:d3:
ce:0a:1a:43:4a:fe:d3:4b:d1:ea:cd:00:ea:3f:68:e9:ef:23:
40:09:04:fe:2f:2b:29:bb:0b:af:4d:a8:3a:b6:12:f6:f9:bc:
1e:7f:40:30:2b:27:b8:91:4b:fc:4d:5b:64:3e:f4:cc:39:3d:
da:ea:d0:a9:c6:5f:ac:85:81:f7:45:b1:0a:86:c1:ed:29:a6:
9d:fe:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:16 2026 by rpki-client