Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: D2kql2t++ptAeujQ7zUMljNiGyuiyTWTqu/Ef3/Pbtg=
Subject key identifier: 54:11:7F:34:E6:CF:64:F9:F0:65:B3:B7:8F:25:F7:96:27:B3:50:B2
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 019F94000D140BC42C3B0C399D5616BF74D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 1739
Signing time: Fri 24 Jul 2026 12:00:58 +0000
Manifest this update: Fri 24 Jul 2026 12:00:58 +0000
Manifest next update: Sat 25 Jul 2026 12:00:58 +0000
Files and hashes: 1: R7Ev9HH_K9DOIOMp6xmYQSBJ3LQ.roa (hash: X1Rxis2xsh9D70KdlclAD1iUcJEca7H7zmBLpXbXixs=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: H6vgzgh/2R8UH2fC3MUMkDHzKvyzydnkbE1bpHnt45w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:0d:14:0b:c4:2c:3b:0c:39:9d:56:16:bf:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Jul 24 12:00:58 2026 GMT
Not After : Jul 25 12:00:58 2026 GMT
Subject: CN=54117f34e6cf64f9f065b3b78f25f79627b350b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:f9:d0:2f:e8:a4:ae:00:e3:c6:9c:69:e7:
3e:fa:f6:28:93:b3:e5:62:55:80:95:e4:bf:52:a9:
84:0d:09:9b:46:11:8d:6c:da:55:86:4d:52:69:98:
2e:e8:fc:62:ad:36:b6:e0:56:2c:9a:a0:37:73:64:
4e:65:8f:32:9b:b8:f1:e8:38:be:76:ed:4a:68:3b:
c6:49:b2:03:43:41:d4:36:d0:d8:0c:20:a3:b1:8a:
13:1b:84:22:30:97:08:63:53:f8:ec:3a:24:4c:a3:
3c:38:04:aa:58:68:31:a0:55:be:3d:54:18:8a:6d:
e0:ba:b8:81:e4:44:ef:d7:7e:17:28:10:fb:02:fe:
2a:ef:09:3e:4c:54:29:53:9a:19:26:38:51:f3:31:
a6:bf:2c:7a:2c:c0:40:1e:df:99:66:cc:58:3c:1f:
d1:6b:8a:10:3c:89:ae:6b:6c:4e:a0:f9:95:f2:92:
7f:a7:d1:f2:b7:b0:7d:d6:e6:bd:28:20:0e:f5:ed:
c8:e4:39:cc:5d:47:67:8d:fc:29:5a:b0:39:bc:03:
14:18:49:a8:17:f4:77:00:3e:20:d6:5f:ab:af:98:
01:03:aa:ea:89:c3:3d:c4:0d:2f:51:bf:18:3c:c7:
f8:ca:47:ef:ac:69:b8:35:7d:31:19:d2:d9:2c:aa:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:11:7F:34:E6:CF:64:F9:F0:65:B3:B7:8F:25:F7:96:27:B3:50:B2
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ed:8f:66:91:d8:7d:c2:14:08:36:9a:eb:11:75:79:b4:3a:
89:eb:14:b1:50:cc:2b:8c:b1:94:72:1b:ce:48:d1:f2:5b:19:
2c:a3:c4:7b:b5:52:10:98:f7:77:1f:f1:e3:eb:59:87:9c:2a:
e4:8a:8b:c1:a6:23:10:9b:47:0f:d8:47:e3:c6:66:bf:de:d4:
30:b0:57:85:dc:0d:5a:d3:72:88:60:f0:0c:32:f3:5b:5a:d1:
d0:e7:6a:56:06:91:71:1b:75:a5:9d:3d:f9:4e:a5:21:ab:07:
7e:1f:74:3a:fa:57:9e:33:6f:41:ac:5b:04:fd:37:05:6c:50:
1e:6d:15:c4:7f:1e:fa:34:c5:40:bc:31:a4:1d:2d:cd:ba:6f:
a7:07:fb:f9:27:eb:46:7b:8f:f8:e2:7a:58:c4:5f:a5:6d:6a:
89:9c:ee:76:44:e2:1e:71:7a:18:82:71:dc:38:d4:97:8d:7f:
b3:60:bd:7b:67:4e:a4:13:40:fe:e0:de:83:82:b7:3a:53:73:
0a:76:89:95:fd:06:0a:46:26:55:f9:64:ca:85:6b:aa:0d:e2:
f4:09:bc:c2:eb:e2:92:b3:68:e4:33:85:db:fb:55:84:be:51:
a2:aa:37:be:6e:36:c3:56:2e:a3:cc:b4:e7:fb:06:22:37:39:
72:9a:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:55 2026 by rpki-client