Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
File: nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft (raw, json)
Hash identifier: /VALKQBh1L9zIYcOT80N8N88sb2pqihwdkZqGl7plM0=
Subject key identifier: 66:06:B8:AB:4D:EB:08:36:3F:4F:C2:5D:5B:BD:EF:7D:64:C5:39:D1
Authority key identifier: 9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
Certificate issuer: /CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Certificate serial: 019F946E37D81539A046CB95663E36425D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
Manifest number: 36
Signing time: Fri 24 Jul 2026 14:01:18 +0000
Manifest this update: Fri 24 Jul 2026 14:01:18 +0000
Manifest next update: Sat 25 Jul 2026 14:01:18 +0000
Files and hashes: 1: L0tuCjuCLhjPSF5HtdtxLxQpvLk.roa (hash: 9nbYmoJhoa2yk/1ARwX2HbvkSwOAKvIa7oZoUwwmhUA=)
2: nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl (hash: bpj719RJBI675NyDbvcpKp+3P7RRW2W74ZQfJgh3wMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:37:d8:15:39:a0:46:cb:95:66:3e:36:42:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Validity
Not Before: Jul 24 14:01:18 2026 GMT
Not After : Jul 25 14:01:18 2026 GMT
Subject: CN=6606b8ab4deb08363f4fc25d5bbdef7d64c539d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:f2:c8:b7:da:98:f1:81:48:68:fe:20:cb:
c6:55:06:00:5d:d7:e5:28:ee:a6:bd:2a:62:df:4c:
e4:50:30:85:54:89:f2:fa:43:1b:17:50:8f:ab:d7:
95:48:2a:62:05:ec:1b:fc:91:93:9b:00:05:e8:28:
32:ef:7f:cd:59:c7:0c:52:a8:f2:0a:3d:a1:d3:e4:
b0:d3:97:f1:58:39:a8:c4:4c:2d:4d:62:fa:8e:a0:
18:5d:91:93:4f:6f:7e:3f:45:a1:1f:64:df:50:5b:
16:8e:b3:9b:b6:d4:b5:46:fe:39:cb:b1:ae:bc:1c:
fc:12:ac:bb:86:88:a7:bf:10:b1:f3:1f:eb:84:00:
f0:60:88:72:17:36:bb:3c:09:ba:bc:7b:08:15:2a:
c6:4b:40:3d:72:83:88:a5:d1:a4:d6:a2:e8:dd:61:
90:ed:7c:10:e5:61:35:5d:25:60:14:ad:91:78:b5:
61:b0:dd:02:22:48:a7:af:bb:2f:45:bb:69:e9:de:
e5:7b:ca:28:2e:e1:8a:19:35:f3:e9:b4:b8:f8:5d:
d9:67:0a:79:ec:1f:a6:f7:d2:41:74:32:88:e9:69:
32:95:4d:38:48:a3:58:0e:ad:7e:c1:bd:be:fb:76:
27:eb:19:57:8e:4a:66:cc:01:8e:eb:f2:9b:8e:ee:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:B8:AB:4D:EB:08:36:3F:4F:C2:5D:5B:BD:EF:7D:64:C5:39:D1
X509v3 Authority Key Identifier:
keyid:9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:21:61:a2:fe:c3:cc:07:f1:c1:ff:b9:30:17:6d:e4:40:
4f:01:9c:22:15:8b:a2:10:cd:8a:72:2a:87:05:c6:72:d7:de:
bb:c7:ce:cc:5b:53:36:05:3f:3a:90:f0:0e:bc:bb:2c:8c:54:
b5:0b:98:7f:02:07:d0:96:e8:c7:52:f4:13:8e:d6:57:a8:a6:
45:3b:c3:aa:ee:82:d1:94:9d:0e:84:2c:12:b5:37:b7:68:7f:
90:55:a4:23:19:26:68:f6:9d:4f:3d:1d:a8:12:03:48:bd:3c:
a6:3c:ce:57:01:d7:47:4d:51:6a:b6:91:41:57:66:06:53:f7:
6e:80:a7:9f:10:b6:9f:7e:52:2b:77:a5:11:ac:1c:a7:d9:ff:
42:a1:30:4b:e8:7f:cc:22:0e:31:90:51:bc:4e:66:8d:b0:2c:
47:9b:a5:66:62:dc:43:ae:fe:4d:5e:db:76:63:02:e6:43:ed:
8f:c5:a2:78:b1:19:4e:01:35:c9:70:93:bd:25:4b:59:67:46:
6c:35:bd:32:6f:c1:74:f1:27:ee:59:ae:12:85:63:af:7b:1a:
4f:1d:14:43:cc:98:51:1b:5b:b8:ff:51:c9:0a:63:63:39:d0:
2d:ff:ca:75:de:1d:4f:50:ca:cc:87:4c:51:d2:1e:60:12:8c:
1d:00:62:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:30 2026 by rpki-client