Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: qnELjSVXJEeDGNvJ1Z+UEthkXt3B3Y/NUu3ixloGhfE=
Subject key identifier: 04:0C:20:0D:85:00:0B:CC:D6:0E:2D:53:C8:CF:A7:D9:92:30:CB:A6
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 019F946D4B3BCF8E5F745F5FDF118BDAD3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0C7B
Signing time: Fri 24 Jul 2026 14:00:18 +0000
Manifest this update: Fri 24 Jul 2026 14:00:18 +0000
Manifest next update: Sat 25 Jul 2026 14:00:18 +0000
Files and hashes: 1: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (hash: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: xKdKTNB5pjiE40jwOGng4vIhxUFN8li6v9hyGW296+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:4b:3b:cf:8e:5f:74:5f:5f:df:11:8b:da:d3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Jul 24 14:00:18 2026 GMT
Not After : Jul 25 14:00:18 2026 GMT
Subject: CN=040c200d85000bccd60e2d53c8cfa7d99230cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:fc:20:80:dd:c4:41:e2:25:ec:13:bd:52:
83:d0:fd:15:af:a0:94:f0:1b:57:78:3e:cc:03:28:
10:5e:3e:cc:a6:34:cf:b4:d5:45:2e:17:70:f7:0b:
0f:8b:31:87:bd:3b:67:90:aa:b7:0a:64:70:9d:9d:
d3:2f:fb:f8:2e:bb:28:cb:86:13:89:ab:a1:5a:45:
08:e3:30:f0:d6:26:33:c0:25:13:da:d1:be:32:fe:
14:8e:6e:e1:3a:98:6a:ac:84:ec:db:f5:5e:a8:f7:
11:c3:91:28:27:d9:84:00:69:c8:93:15:73:50:16:
b0:a3:e6:8d:fa:b7:3b:4d:5c:31:a7:42:87:7f:cb:
c5:08:ec:4c:54:06:49:a9:a5:d5:97:29:1d:5b:e5:
02:51:bc:cb:ea:85:d2:d0:cc:76:b6:a0:d5:4f:82:
9f:bc:60:8e:96:1f:2d:41:87:7a:e1:52:73:de:c0:
23:78:37:41:07:f5:fc:7b:ca:98:c5:11:0a:2b:20:
52:48:58:07:62:dd:5a:cf:2e:2e:7e:60:61:65:cb:
44:97:a3:f6:6e:4a:1e:ec:c0:78:39:38:02:d9:0d:
fc:b3:f3:ab:eb:de:bd:f3:91:68:12:f7:5e:3d:9d:
e1:ec:75:fe:29:04:75:93:58:76:6e:bb:4f:23:87:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:20:0D:85:00:0B:CC:D6:0E:2D:53:C8:CF:A7:D9:92:30:CB:A6
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:24:41:6d:fe:28:76:c9:d7:e6:e3:92:dd:8f:a6:15:85:c5:
ee:3a:84:50:a0:57:b9:ea:2d:49:0f:6b:74:33:49:d4:46:50:
b7:b0:54:f3:a7:ad:b0:95:a1:ac:b0:c7:6b:a0:d1:1b:ea:4d:
9b:e7:44:98:fc:22:2d:8d:88:fa:f4:b1:0c:ba:7f:d2:52:fc:
7a:da:8c:d2:04:ac:61:9b:26:c6:ff:cc:a5:b8:86:6a:d9:b8:
ad:67:87:b4:f3:7b:98:5a:8d:52:f7:ea:51:73:20:3e:32:a9:
7a:5f:dd:47:fa:5e:13:40:5e:82:88:8b:31:78:96:ed:be:2c:
50:3f:cc:16:c1:89:e5:1e:74:31:fb:c9:65:22:06:2e:f7:e8:
3e:68:d1:5e:f7:55:8d:a3:f4:ae:c8:7e:71:f2:2b:ed:c3:04:
39:35:b2:c9:aa:e4:a8:e4:87:c9:30:5e:28:1a:05:49:8f:b1:
2c:a9:ca:f1:f2:2a:82:a9:4e:c6:6e:af:9b:23:bf:20:f2:18:
2c:22:39:9a:e3:d1:c7:b6:b2:09:56:82:1e:39:8f:b9:2e:9f:
63:62:74:ed:80:a3:e3:e6:bf:c0:97:c8:15:75:c5:f5:57:5e:
26:99:e6:39:33:fe:62:e1:e3:4d:5f:71:c0:69:41:8f:05:57:
4f:4d:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:15 2026 by rpki-client