Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: Ty52kxyW9llWKLFSwBKdtmukq/vUDfPHsijIokZfGTM=
Subject key identifier: DE:E6:35:E3:25:0F:CF:59:82:D0:C9:F5:46:43:F1:8E:CF:58:23:29
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019F916D769A559C262375AE0FF2FC1DB00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 10A7
Signing time: Fri 24 Jul 2026 00:01:37 +0000
Manifest this update: Fri 24 Jul 2026 00:01:37 +0000
Manifest next update: Sat 25 Jul 2026 00:01:37 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: AkoE/JfI0yCVqRZmt5X10rK9IL8azMJzTF65/socmhU=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:76:9a:55:9c:26:23:75:ae:0f:f2:fc:1d:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jul 24 00:01:37 2026 GMT
Not After : Jul 25 00:01:37 2026 GMT
Subject: CN=dee635e3250fcf5982d0c9f54643f18ecf582329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:3c:00:7d:28:be:a8:df:98:dd:cd:fd:61:
e5:5d:b6:80:43:b2:bf:23:5f:ec:4a:26:68:6a:9a:
a4:b2:4c:6a:58:cf:e1:1e:92:05:e4:68:6d:4d:d5:
69:1a:84:10:3c:61:06:89:e1:2d:b3:75:71:d3:00:
34:e5:d8:65:92:93:62:3f:4d:cb:f1:c7:60:0f:ae:
9c:80:ee:49:4d:9d:7b:ff:c6:0c:8e:41:fd:75:d4:
1a:42:8a:c8:ce:24:a8:61:c5:d2:43:c8:cd:7e:24:
84:9f:4c:c3:c2:80:4c:7f:99:4b:59:fc:46:53:97:
6c:1a:01:5e:6d:fe:84:50:b2:db:14:b5:c3:12:2f:
b8:d8:de:99:1d:ef:17:0a:4d:7e:67:1b:0d:13:28:
19:47:0b:d0:af:6e:45:87:16:37:41:6f:86:6c:1b:
a7:46:bd:e5:7c:d1:83:4c:ee:79:ab:3d:e8:41:bd:
a8:ff:d4:42:4d:df:ad:c5:97:a6:20:77:a4:78:ea:
3d:b8:b7:3e:1f:8d:e1:ed:3a:5a:2b:b5:96:c3:25:
d1:fb:8b:f7:c1:5b:52:43:be:75:f0:62:b2:8c:42:
b8:ff:c8:77:32:0d:1f:4f:9b:79:19:22:70:67:82:
b0:89:12:94:c4:f0:58:25:a9:61:4d:e1:6e:61:20:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:35:E3:25:0F:CF:59:82:D0:C9:F5:46:43:F1:8E:CF:58:23:29
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0b:7e:84:1f:1f:45:1a:b4:49:b0:87:45:05:0b:cc:48:df:
2b:eb:02:aa:c1:81:3a:ea:08:21:73:e3:ad:79:0d:71:21:3e:
4d:6e:fa:d2:6a:46:f6:6b:9d:29:35:7e:b7:10:87:e7:96:e1:
56:c5:b7:9d:0e:4d:b7:71:a1:af:f7:95:11:48:51:46:42:4e:
79:9c:4a:0b:83:27:27:6b:54:05:b6:8e:b4:b4:84:b8:f8:80:
35:5e:0b:4f:75:be:03:1e:87:d8:ed:48:d1:f7:90:7e:1f:4c:
e1:5d:08:1b:91:ed:70:c5:13:59:22:44:dc:57:7f:6f:fa:68:
54:05:ae:30:10:f3:ae:40:82:24:6d:e8:00:bf:96:f7:dc:4f:
d6:87:a7:bd:4e:2d:33:97:90:bc:70:04:5e:7f:cc:c3:00:45:
1d:f6:bb:0c:b0:f1:52:92:e4:09:7c:ea:9e:a2:69:07:40:c7:
83:a3:85:8e:de:c5:83:1d:29:42:33:60:fe:f6:a5:08:64:37:
5c:b7:8f:f0:07:43:34:44:3e:84:d4:55:4e:81:5c:65:e2:5c:
fa:f5:85:d4:69:06:89:44:ec:7c:c8:21:04:3d:0b:52:49:40:
ef:e7:ba:31:7c:4d:3c:0b:8f:0d:26:58:bc:15:56:4f:25:70:
40:1a:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:44 2026 by rpki-client