Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: vXKoJQTrBWWDgK3wCb2UQVI49ZZCWn3scDljLA2VZXk=
Subject key identifier: 03:82:EE:BC:59:95:0C:56:0C:97:67:A0:F2:BA:A8:C3:1B:C4:CF:EB
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 019F92ECC925B4F35F383DE76C80D57D8809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0779
Signing time: Fri 24 Jul 2026 07:00:19 +0000
Manifest this update: Fri 24 Jul 2026 07:00:19 +0000
Manifest next update: Sat 25 Jul 2026 07:00:19 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: VGt7YHpiUdjwIQbzPAKrbkrQDWJQC/6vphxcERux+/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:c9:25:b4:f3:5f:38:3d:e7:6c:80:d5:7d:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Jul 24 07:00:19 2026 GMT
Not After : Jul 25 07:00:19 2026 GMT
Subject: CN=0382eebc59950c560c9767a0f2baa8c31bc4cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:69:a4:50:04:ad:a0:e0:38:63:d5:89:31:
d9:c9:b9:c3:3e:29:c9:b1:36:c6:f7:41:5a:84:57:
a7:42:1c:6d:e8:90:79:e6:9a:ab:2e:a6:be:e7:94:
4e:88:cb:a4:89:f2:bc:61:7f:59:61:dc:9e:47:cd:
ab:c2:0d:64:60:40:d1:26:0e:47:9b:07:a7:7a:ec:
51:e8:cf:ab:ea:8a:c7:21:54:35:b3:e2:a6:15:13:
43:33:c5:70:96:19:b3:b6:1f:11:b4:36:80:75:18:
f5:43:20:48:b9:17:86:40:52:31:1c:52:08:8c:f9:
32:e7:74:77:7f:db:f8:02:85:64:9b:ad:85:54:8b:
88:1a:d6:7f:d7:d6:c2:9d:3e:ef:7d:50:33:79:a4:
c3:00:5a:bb:ed:95:79:92:6b:4e:94:b9:46:8a:9b:
01:ef:76:3b:ce:fc:93:69:79:1b:7c:fd:7b:8c:90:
2d:7f:88:d2:7d:78:6d:93:ac:f5:fd:ee:8f:b8:48:
84:f1:6b:36:61:78:cf:b3:64:ed:db:fb:9c:30:b8:
27:a6:52:a1:40:b2:65:75:34:fd:e2:39:24:19:3f:
28:53:a2:57:46:10:66:4b:bb:25:b5:11:0c:ab:ee:
9c:fe:83:e1:b9:2e:78:0e:bb:ee:5a:1c:d2:25:87:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:82:EE:BC:59:95:0C:56:0C:97:67:A0:F2:BA:A8:C3:1B:C4:CF:EB
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:c7:86:c0:13:69:3d:c9:29:37:94:8d:ca:83:0e:ad:44:
e7:eb:9f:e1:f2:e9:fa:f3:91:04:9e:c6:0b:9f:31:d3:23:7d:
87:d6:0a:d3:bb:a5:52:f7:bc:86:db:cd:e0:24:97:60:62:92:
70:18:f1:67:f3:f8:89:e1:36:c3:b6:cd:9c:89:a9:2f:3e:63:
a1:75:24:b8:5c:60:5a:3c:43:7d:1b:fb:2d:f2:a6:69:2e:9f:
d8:bc:c8:ef:a2:b1:8b:5c:23:ba:9e:25:47:87:32:23:e7:b4:
2d:9a:00:78:d1:df:1e:80:8b:af:5a:99:df:b5:2c:14:dd:31:
f9:87:10:d0:14:92:59:3c:40:78:5e:29:9e:1b:40:43:da:1d:
db:15:a5:71:04:f5:7a:a6:fd:06:3c:2d:ff:5c:97:2d:e5:49:
7b:68:1d:36:46:16:6e:a0:0f:ee:2a:b6:62:85:b1:62:ed:e3:
00:2a:10:ed:30:1c:83:7f:72:60:a3:20:af:53:06:83:3c:7a:
e0:f4:60:02:5a:42:10:8c:eb:90:ec:37:0a:d1:65:a2:83:9a:
30:db:bb:37:7a:f8:12:6d:2c:ca:cd:6e:e8:29:89:43:b9:a4:
1c:2f:df:e1:ce:6f:6c:05:27:49:0e:c5:c6:99:c7:7d:a8:83:
f9:9b:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:09:38 2026 by rpki-client