Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: TlnT4ZkLVsaU+QEQKyMM/4PXgE873vEBCwcExPRpzrc=
Subject key identifier: A6:4A:CB:47:42:9E:C5:32:25:C0:D3:57:C1:5C:CD:26:80:CF:EC:07
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019F8FEC5AD1BF8E61BFD77A90A0654AEA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0CF9
Signing time: Thu 23 Jul 2026 17:00:59 +0000
Manifest this update: Thu 23 Jul 2026 17:00:59 +0000
Manifest next update: Fri 24 Jul 2026 17:00:59 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: D6XDbGgyEZgCovLfE1QazBexv+eUauQgfhcN4lgK/IY=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:5a:d1:bf:8e:61:bf:d7:7a:90:a0:65:4a:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jul 23 17:00:59 2026 GMT
Not After : Jul 24 17:00:59 2026 GMT
Subject: CN=a64acb47429ec53225c0d357c15ccd2680cfec07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:76:0b:e9:4e:54:95:10:f0:ed:0b:de:07:
50:3d:0d:ee:ba:54:f3:6b:57:dc:58:1b:ff:85:aa:
8d:8d:dc:be:b0:e6:05:ae:69:f5:e8:3a:d2:a6:fc:
cc:46:f6:a5:f0:a2:af:40:2e:1e:32:db:d1:9b:a7:
a1:8d:75:e4:5f:de:52:32:43:f9:29:ac:9e:60:6f:
27:4e:04:65:95:47:0d:db:4e:56:9e:49:aa:97:c3:
97:cd:71:c0:af:a5:60:d9:de:61:f7:a1:df:a5:01:
ac:49:84:a7:84:2c:1e:ac:5d:6b:60:d0:06:04:a9:
5f:12:22:35:e5:17:d1:27:75:be:9c:c7:11:a2:8d:
dd:f4:12:c0:05:37:05:6c:dd:af:39:5e:ce:90:90:
35:b6:71:c8:16:ac:f2:bf:c4:9e:c9:4a:8e:93:f1:
a5:6c:1c:f4:03:0e:f1:0e:75:9d:a3:c7:51:bf:b4:
ce:c8:d2:80:97:af:6f:45:e1:ca:f1:d6:b8:21:ce:
fd:65:02:5b:42:27:13:d3:11:47:f8:ac:b6:2c:9a:
c4:62:4f:89:5e:ca:5e:7c:e7:91:68:34:52:34:80:
8b:01:cb:c2:ca:51:5e:6e:d6:08:6f:f0:ba:69:bc:
bc:6b:51:d1:b0:c8:08:9c:cb:37:b7:a7:c3:66:95:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:CB:47:42:9E:C5:32:25:C0:D3:57:C1:5C:CD:26:80:CF:EC:07
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:65:1c:14:c2:12:13:fd:f6:67:b8:55:dc:38:3a:1c:35:
47:39:4c:87:08:cf:38:2f:84:41:c3:f3:f2:36:b6:80:21:f8:
e7:9f:d8:6e:cc:83:5a:22:6e:25:17:63:08:ca:ab:4b:31:c8:
63:d4:0b:92:b0:b3:7f:46:bc:56:6e:3d:7b:8a:3e:58:cf:53:
f2:2b:50:eb:ff:e0:0c:2c:5d:fa:e3:aa:40:08:9d:17:14:9b:
e5:f9:a7:d1:6c:2f:b9:2f:ec:ae:ba:2b:08:1a:40:87:64:ce:
93:69:04:b7:b5:79:37:43:21:fd:97:f7:90:5c:d9:dd:ea:d1:
74:25:2f:50:46:1d:a4:c8:ee:fd:40:2b:f2:3b:2a:c4:db:ae:
e9:91:87:c7:2d:b9:1f:a9:98:b6:57:63:51:ca:29:b0:25:c4:
49:f3:a7:08:81:91:82:10:64:45:a6:18:78:87:15:ca:e2:96:
4f:2c:b2:45:36:f0:fe:b7:37:ea:99:46:a3:f0:27:f7:b2:6b:
75:1f:02:74:0d:f4:ed:3a:4e:8a:30:7c:70:93:65:b8:d0:c0:
03:1b:53:7a:d9:86:5c:c9:32:19:93:ad:9b:bc:fa:c0:7e:b2:
f9:8f:29:e1:33:31:bf:57:bf:3e:11:4f:8d:01:26:a5:72:ca:
9a:05:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:09 2026 by rpki-client