Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: YLaqiI9thC/rgcxj6nnRMtmvfua633MJbjIx+9x8mfw=
Subject key identifier: F1:7F:0B:F6:21:52:31:2D:07:75:BF:FE:76:F7:B9:AD:AD:32:E4:D5
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019F9247F4383B3121A8AF1139D1B0CC2FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 047E
Signing time: Fri 24 Jul 2026 04:00:16 +0000
Manifest this update: Fri 24 Jul 2026 04:00:16 +0000
Manifest next update: Sat 25 Jul 2026 04:00:16 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: QNz7NPjNys0SV6CujNt/P24mmUOD/pK6jQ4L32zudf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:f4:38:3b:31:21:a8:af:11:39:d1:b0:cc:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jul 24 04:00:16 2026 GMT
Not After : Jul 25 04:00:16 2026 GMT
Subject: CN=f17f0bf62152312d0775bffe76f7b9adad32e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:25:eb:23:0b:44:26:44:22:a4:97:85:91:
8b:06:37:8e:a0:6e:c6:d1:00:36:02:8b:36:e0:f0:
e2:8c:b8:3b:30:3d:22:46:12:29:08:f8:50:f4:6c:
e8:ba:1d:a9:b2:01:c1:1f:6b:e8:3d:eb:08:d5:4c:
ae:23:74:1c:6b:32:8c:7c:47:04:2c:1c:4a:1b:b0:
d8:83:aa:8a:ae:c1:86:19:3c:88:3c:84:17:c0:c0:
69:97:ab:df:c6:aa:aa:ba:64:8b:0b:bc:13:a8:69:
93:25:cf:7d:ae:d8:ef:d2:0b:a0:0e:9b:e3:35:f6:
45:00:78:09:4f:aa:b2:fb:16:ea:46:9e:c4:34:36:
9c:38:53:d2:8f:38:35:6d:5c:db:0a:7c:a1:45:ec:
f4:6f:6c:01:19:cc:4c:9a:61:26:ec:d8:aa:1c:86:
b1:0c:72:d0:1f:8e:53:9f:52:c7:9c:69:cb:91:f3:
a3:f9:dc:ec:9d:e3:7b:fd:83:3f:1f:e6:e5:9c:12:
9b:bd:f6:50:8d:5e:52:97:a2:11:42:10:0f:22:ac:
d7:99:6d:c6:ba:d2:94:11:7c:29:33:cc:88:9e:77:
74:4f:00:4f:c0:bd:c5:f4:6a:c6:6c:cc:40:fc:4d:
e8:8f:2f:6c:de:24:7a:b8:fb:c9:92:46:92:34:e8:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:0B:F6:21:52:31:2D:07:75:BF:FE:76:F7:B9:AD:AD:32:E4:D5
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:7e:c6:3e:a5:73:4e:b1:c2:65:32:50:97:81:4c:ef:7d:
f9:18:9f:c2:0c:7c:3b:b5:da:7c:de:7e:a7:02:2b:9a:5e:1f:
ab:38:42:51:38:97:39:2b:a9:f9:08:73:c5:54:3a:d5:7f:0b:
74:b4:73:9a:6a:7e:d9:f5:7a:3c:79:67:37:72:06:f9:65:14:
39:b8:02:65:08:f2:fd:db:28:eb:95:71:98:e1:a0:fa:a1:51:
65:ef:03:36:67:15:43:22:8c:fc:a8:3d:e9:98:4f:74:44:33:
4c:01:9d:44:5b:03:84:c7:28:31:36:05:76:2b:ac:97:ad:95:
57:ed:8f:d0:48:c8:b6:c6:93:d9:d9:c1:22:12:59:88:d7:c0:
ca:2d:ee:c5:3f:5c:06:9d:cc:16:37:13:0a:41:8f:30:3f:ea:
15:f9:df:5d:d1:a7:31:bb:ba:6e:e0:b9:4d:30:44:84:c9:3b:
6a:56:91:07:b1:f0:04:34:2b:85:da:8b:31:60:4c:1c:09:39:
1e:18:d7:4d:ac:49:43:ea:60:fe:5e:92:e7:0e:b6:4f:ac:eb:
d2:ff:87:e1:24:53:8c:2d:a7:c1:48:09:f1:71:93:f5:84:ef:
f2:96:b0:c9:58:39:1a:de:35:e6:94:52:b6:05:eb:48:26:0f:
24:dc:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:47 2026 by rpki-client