Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: g9Zg3lK+aQU5PGHHvh1JZTg9sxJhrtjAsqYj5f7PLHg=
Subject key identifier: 75:31:E1:7A:1C:ED:20:A7:34:CF:9D:2D:E5:5B:01:2E:4E:7C:56:40
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019F935BA7BB645008A972E7DE073E11868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 10A8
Signing time: Fri 24 Jul 2026 09:01:25 +0000
Manifest this update: Fri 24 Jul 2026 09:01:25 +0000
Manifest next update: Sat 25 Jul 2026 09:01:25 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: l/bZsPs328lijJ7oS+unbB7L6fHPAtScza7//hv3hLg=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a7:bb:64:50:08:a9:72:e7:de:07:3e:11:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jul 24 09:01:25 2026 GMT
Not After : Jul 25 09:01:25 2026 GMT
Subject: CN=7531e17a1ced20a734cf9d2de55b012e4e7c5640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:f1:f2:92:ec:5e:8b:fe:43:2c:c1:fc:70:
00:c2:4d:60:42:ea:ee:ca:ef:ed:86:3c:c6:b1:8e:
9a:42:6f:08:50:91:b0:1e:af:2d:a5:fd:70:44:83:
a8:62:76:9e:0a:53:77:e2:6c:27:2a:9f:ac:0b:03:
f7:b2:92:4f:1b:e9:10:da:42:d3:69:58:a9:77:1a:
36:b8:97:82:de:7c:a2:84:0a:b8:ca:71:8c:f8:79:
3e:ee:43:31:3e:06:3a:31:bf:f5:9f:bf:a4:28:ef:
3a:71:8e:09:f3:fc:fa:c5:70:1b:d1:33:e6:66:a3:
05:7d:29:c1:83:d5:11:55:a2:cd:ac:86:82:8c:61:
71:68:27:7e:9f:db:55:4b:9c:e8:2c:63:d5:bb:55:
3d:7d:f3:a0:b3:01:e8:e5:13:9b:1e:5c:a7:c8:05:
cc:11:da:fa:10:9e:43:7c:13:3b:2f:99:33:91:c3:
5d:71:5b:12:cb:39:7b:c0:fb:b7:d1:b5:87:eb:a6:
48:e2:75:ba:35:ca:17:84:6f:31:79:7f:b3:07:47:
9d:79:f7:2e:6d:43:7b:f1:8f:6a:d1:2e:35:8c:f0:
11:a7:4e:e7:98:5d:8b:26:96:0e:72:48:d9:33:6c:
35:13:fe:5d:b7:02:c3:9a:45:9e:d1:2d:26:a1:c3:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:31:E1:7A:1C:ED:20:A7:34:CF:9D:2D:E5:5B:01:2E:4E:7C:56:40
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d4:c7:6d:95:b4:3f:6a:53:54:02:a3:16:14:4d:fc:f1:82:
b3:65:db:ee:34:f9:2b:bc:b5:64:61:a9:6f:31:ea:ee:66:b2:
fb:a2:48:88:a1:b0:92:6e:b0:1b:82:a6:df:5c:e2:e2:ab:0d:
78:f1:88:ff:de:dc:4a:04:4b:00:ec:b3:7c:e6:4e:01:d4:49:
20:2f:e2:eb:46:53:b6:67:fd:ef:ef:87:0c:79:81:d8:8d:61:
ed:30:b7:e9:a3:30:9e:d0:94:93:ac:77:50:9e:06:38:1e:3b:
7c:4f:f9:05:ab:6d:53:15:85:6f:24:fe:4a:f7:6e:e0:40:e2:
bb:0e:cc:b0:55:90:9f:26:a1:59:3e:c0:c0:06:05:d6:55:1d:
56:7f:6b:71:da:80:96:39:bb:53:2b:d0:2a:15:8b:12:b1:e2:
ac:af:43:b4:bc:b0:40:43:a6:76:ef:39:dc:9b:07:81:bf:8c:
0d:2d:21:f3:ab:a4:54:a8:1c:82:de:be:37:d9:d5:f3:a9:f7:
13:b0:16:6f:ed:db:7d:a8:e3:64:5a:08:8b:4d:c7:ec:3d:e1:
89:af:1f:0b:27:c7:e1:46:0c:dc:1c:62:c7:77:94:0a:eb:1c:
4b:a9:c7:03:a7:c9:ed:33:74:ce:40:40:97:2f:13:1c:e1:6b:
41:0b:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:58 2026 by rpki-client