Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: nsZBB2YH2MfgE/gsTevp8wC9Q4fg0M5jYWcc4iW29m0=
Subject key identifier: C6:EC:3C:DB:B2:3E:2A:21:F4:49:37:D8:37:B5:BA:C1:0B:34:6E:D0
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019F9391EF7DF81A8A7903F473FFD6167691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0A1C
Signing time: Fri 24 Jul 2026 10:00:42 +0000
Manifest this update: Fri 24 Jul 2026 10:00:42 +0000
Manifest next update: Sat 25 Jul 2026 10:00:42 +0000
Files and hashes: 1: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: 24GcokPd2QENvltHFxF4BxChet2aJqw9OpCCxT91BBI=)
2: rZZQYoQ-ii1ULymg1gCODzd0s4o.roa (hash: sgyKwwfW2KwaDdlaRSgHtW+s4rE3CgoGYd/sjsljqxY=)
3: vJI0zjSupe8L2btdgObTHN_0uMI.roa (hash: t1tDTpvOlNLAVNfscJvGfDoocyToS/t9xpe8zMWNV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ef:7d:f8:1a:8a:79:03:f4:73:ff:d6:16:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jul 24 10:00:42 2026 GMT
Not After : Jul 25 10:00:42 2026 GMT
Subject: CN=c6ec3cdbb23e2a21f44937d837b5bac10b346ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:09:e4:4e:96:ea:dc:71:30:c4:f1:38:dc:
f7:35:95:cc:2f:3f:e0:42:bc:d3:e5:fa:32:9b:93:
6d:66:26:df:55:44:0b:ef:25:80:c8:1b:6d:89:91:
a2:96:57:62:11:d3:ab:63:6d:57:65:4b:30:23:9a:
90:83:0b:22:03:ce:cd:53:b5:e2:ef:97:15:14:d8:
ab:8e:3a:37:3a:c3:6d:5a:03:7a:e2:54:12:8b:e0:
38:89:48:b8:18:82:61:15:e3:be:8b:56:f4:e8:40:
a6:c3:40:dd:59:3c:12:64:5a:42:13:15:e9:4e:cd:
6b:4a:9f:72:4b:56:78:16:9d:68:ac:8e:6c:97:a1:
2e:02:c5:c3:7c:85:1d:98:b7:97:97:e7:92:11:57:
79:0f:e9:32:98:13:60:c2:ed:f1:56:47:e1:1a:b4:
27:42:ca:ca:35:09:df:3c:57:fe:85:7f:41:03:9b:
8d:f6:6f:5e:52:fd:20:ca:16:50:29:8e:14:03:bd:
2c:51:24:44:7c:8a:71:29:13:89:7a:d7:32:d1:18:
70:83:ff:16:42:9c:34:aa:64:01:55:20:97:2d:99:
a7:76:b8:f0:34:6f:fe:6a:6b:50:a1:b4:72:58:13:
1a:15:31:2a:9d:0a:45:22:05:b4:ef:74:b8:c9:c8:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:3C:DB:B2:3E:2A:21:F4:49:37:D8:37:B5:BA:C1:0B:34:6E:D0
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0b:36:58:1b:8f:4b:d7:5c:02:8a:17:82:22:a8:af:cc:09:
c2:7e:c9:a2:83:4f:5d:0f:1a:31:f9:9c:b0:eb:3b:e5:01:2a:
2b:2d:d9:08:06:4b:72:2d:29:0a:96:0d:af:04:98:71:b3:cf:
70:36:c8:4a:dc:04:8a:36:bb:20:e0:a2:96:06:fe:df:36:56:
cf:29:73:83:8f:b6:95:d9:ae:2b:93:b2:0c:a2:94:02:e2:44:
71:c8:b0:1d:59:4d:fc:d8:2f:a0:67:24:75:e0:56:97:40:98:
7b:d0:f8:fb:80:78:14:ba:8c:e6:52:a9:34:59:96:8f:d3:74:
1e:e4:2c:b1:e5:ab:d8:a0:a9:54:fe:cb:46:d6:9b:30:fb:47:
64:c3:2e:bd:e0:64:07:4e:75:07:17:31:91:05:ab:f4:58:5c:
79:1b:02:91:23:5e:87:89:13:6e:83:dd:17:7b:9f:25:4f:20:
c7:3e:85:33:82:0d:42:62:80:2a:86:68:a2:85:91:18:b3:bb:
79:b9:1d:73:da:8d:aa:02:37:78:62:6a:1b:c2:14:ce:81:2d:
a3:3b:de:79:48:29:f0:a5:5e:21:25:12:7b:04:78:af:0b:4c:
27:98:fd:9c:dd:7a:a9:0c:39:9b:01:ab:1a:91:66:81:da:05:
d1:dd:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:29 2026 by rpki-client