Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: tGFhv8x6nI/4VBcvQhbFkBihxu0CYMqLuffBcvMofug=
Subject key identifier: EF:2E:35:D9:02:10:F0:24:88:21:E4:FD:1B:B9:B3:65:6D:FB:B8:C1
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019F8F1052F40EB8B58ED1738673781FE5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 13:00:39 +0000
Manifest this update: Thu 23 Jul 2026 13:00:39 +0000
Manifest next update: Fri 24 Jul 2026 13:00:39 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: kD+08Vrj1Vg40YE7Vce+4q+XoOjpyRXa/jyo9heaLKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:52:f4:0e:b8:b5:8e:d1:73:86:73:78:1f:e5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jul 23 13:00:39 2026 GMT
Not After : Jul 24 13:00:39 2026 GMT
Subject: CN=ef2e35d90210f0248821e4fd1bb9b3656dfbb8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:6a:22:c8:f2:d9:15:63:71:af:a6:e2:29:
27:9a:c2:80:11:db:04:85:9e:fa:02:b1:34:0e:f7:
ba:55:ab:88:40:a6:68:e3:91:d6:ea:13:73:5d:23:
47:41:da:a3:aa:f4:91:27:e7:47:c9:1b:26:c5:11:
52:d4:82:d9:e6:8d:44:21:82:a6:1f:2e:62:17:75:
e0:d8:43:bf:a3:55:e2:fc:05:a3:07:14:fb:ff:00:
32:12:41:be:8a:fc:3e:5e:e4:7e:63:14:c6:62:af:
a1:03:c5:ad:58:73:1c:52:f4:d3:85:78:c6:14:43:
85:ca:31:fb:84:c7:95:4f:d8:ff:49:10:41:15:a7:
16:6b:42:cd:f3:d2:ca:04:b4:ab:72:7e:3a:04:d1:
77:4b:e5:e1:8b:50:2f:34:4d:a4:3a:d5:92:4b:28:
26:97:75:a0:d1:3f:9f:1f:d3:72:3e:f7:c8:69:2e:
6c:63:91:96:1b:41:7c:63:57:96:17:15:46:b9:12:
97:ae:21:94:b6:04:7f:ef:dc:6e:11:0a:19:1b:b8:
2f:49:d2:aa:ab:32:f6:f4:5f:9c:e6:71:39:a9:39:
7b:78:65:3a:b2:42:f1:5a:f6:29:ac:01:dc:7b:28:
5a:dd:90:0a:31:19:c4:bf:89:fd:c0:ae:99:89:f3:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2E:35:D9:02:10:F0:24:88:21:E4:FD:1B:B9:B3:65:6D:FB:B8:C1
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f1:88:88:03:ae:e5:80:bc:23:47:d9:bc:c8:21:36:4d:6b:
47:f8:2a:27:0e:81:12:b0:07:d3:b2:fb:0a:d0:27:8e:50:cb:
a2:ca:fc:f5:d8:27:fa:7b:2e:c1:a5:e7:08:4b:cb:8f:8c:24:
a8:81:a9:4d:59:0a:c2:74:f3:3b:39:8e:2a:1a:59:dc:9c:7b:
d2:72:1e:63:d1:1b:a0:46:56:b5:a7:81:83:be:20:7e:9c:ef:
35:f8:c5:17:7c:8d:3d:80:b0:cd:32:ec:49:35:ed:20:a9:5b:
a5:11:b2:f1:8a:34:94:ca:93:82:63:66:78:14:41:6b:f1:09:
16:77:97:c2:2a:57:f7:ea:99:9c:d2:c1:15:04:1a:b9:83:27:
72:c3:75:af:0e:67:35:fb:19:4c:b2:d2:28:70:9f:f1:45:0c:
c5:e8:9d:e4:ef:30:99:a5:f1:dc:af:5a:49:e7:c5:e0:6d:22:
a5:c5:b8:d3:25:ea:0b:4d:f7:3a:45:17:14:79:f5:b5:80:3e:
f2:65:a9:cb:50:b8:00:68:73:70:97:ca:68:9f:3e:ce:70:99:
25:b0:81:41:29:63:e9:67:c4:5a:98:02:0e:2e:03:bb:c0:99:
a4:2c:b2:a9:05:32:3a:80:19:a5:fa:47:35:a8:eb:18:69:4a:
d5:6f:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:09 2026 by rpki-client