Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: 06IIV1QbUK2aCoj6mVtqfNX1vJdB+2mcyf0ljPgT9c0=
Subject key identifier: 9A:2D:32:A8:FC:B4:5C:6D:D4:F5:96:51:6B:90:7D:9C:38:AB:93:19
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 019F92489021EA89A46A05883C401A5246A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 13D1
Signing time: Fri 24 Jul 2026 04:00:56 +0000
Manifest this update: Fri 24 Jul 2026 04:00:56 +0000
Manifest next update: Sat 25 Jul 2026 04:00:56 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: BVxbiRfYqQGiDTgBk8+v9kJL9WadDyAacqkIbVVpvmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:90:21:ea:89:a4:6a:05:88:3c:40:1a:52:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Jul 24 04:00:56 2026 GMT
Not After : Jul 25 04:00:56 2026 GMT
Subject: CN=9a2d32a8fcb45c6dd4f596516b907d9c38ab9319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:6a:ac:69:46:a8:58:7d:cf:af:ee:d0:89:
cb:62:ce:71:f8:0a:f4:b1:47:48:8f:67:94:79:e3:
b2:66:1e:a0:c4:b6:f0:1b:02:b4:b4:79:c8:2f:e1:
3d:05:dc:76:2b:3e:9c:fe:c7:6d:fa:56:90:a0:9f:
82:8b:d1:e4:ca:68:8f:8f:8e:6f:65:2b:08:e9:9f:
3e:fa:9e:f3:5b:cc:73:1a:e5:54:db:ce:f3:43:4c:
1d:5f:23:a6:eb:a7:80:ab:d7:f1:d5:78:a8:82:84:
e9:2d:e3:35:4d:e5:0b:d2:6e:94:84:c5:c9:8c:98:
bc:c4:d9:17:ee:6b:72:76:bf:24:30:5d:b7:99:60:
a7:32:44:a3:34:07:bd:3a:0d:41:a3:34:fe:6f:8f:
b9:c0:02:45:b5:86:b8:16:93:a1:9c:82:65:fb:17:
69:a2:b8:a0:ac:19:c9:f2:77:c5:d5:a3:c1:6b:38:
c7:f8:32:51:88:4c:88:72:a4:bc:77:89:58:66:82:
99:44:6b:1d:d6:c7:30:b0:81:b6:ec:90:9e:b4:66:
80:c2:03:8b:bd:eb:54:66:bb:40:d2:f3:9d:3e:d8:
ee:3d:16:fc:d9:dd:dd:38:28:79:97:8c:5b:9b:06:
0c:cf:f5:f3:53:31:b6:fa:d4:ca:8a:ae:d3:17:59:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:32:A8:FC:B4:5C:6D:D4:F5:96:51:6B:90:7D:9C:38:AB:93:19
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:ba:fe:5f:c1:a4:30:c7:c4:e4:63:b0:97:0e:fa:3b:de:
1d:e0:41:07:cf:9c:af:f5:d0:5d:5d:e8:dc:f9:85:5e:b0:fc:
68:2f:cb:07:3d:5f:9a:a5:52:b6:27:db:5f:e8:cb:39:39:48:
72:ff:42:f4:81:6e:33:cc:08:fb:ea:27:4e:41:3c:56:16:07:
96:83:20:7c:c2:db:81:f2:96:35:40:62:89:74:65:ad:d1:50:
4b:11:87:c7:e2:f4:bb:9e:3d:82:77:7b:30:98:59:6b:96:95:
99:51:bb:82:48:94:52:5e:7d:af:36:d0:10:8a:d9:5a:81:f9:
0e:4d:7a:1f:e0:06:c2:73:1f:73:01:f8:19:b4:73:3d:88:9c:
c7:2f:81:71:3d:a3:a0:df:4b:0e:91:70:8f:de:16:aa:ea:f2:
05:6f:30:96:42:a1:d3:19:ac:36:65:9d:30:2b:71:1e:38:be:
af:0a:ca:f4:96:b6:41:6b:0d:1d:35:2e:da:3c:59:05:a7:0e:
cf:4a:7e:2d:2f:65:6b:75:21:56:df:a0:9d:1d:03:0a:dc:93:
72:7c:99:20:4d:2e:4e:d1:f3:44:9c:97:5b:e6:e0:49:e3:62:
3f:87:e4:a2:a4:64:6e:d1:7a:58:1b:b9:b3:80:d2:a1:79:04:
b9:57:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:32 2026 by rpki-client