Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: 2iM4yjepieJRpsPJVm99Vz1PzKPuSrZibQVBnNmb7KI=
Subject key identifier: 07:58:42:4A:72:F7:88:2F:CE:90:A0:B0:25:E9:58:C6:81:4C:74:A7
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019F905988E9C77E86192F20185265C04DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 047D
Signing time: Thu 23 Jul 2026 19:00:14 +0000
Manifest this update: Thu 23 Jul 2026 19:00:14 +0000
Manifest next update: Fri 24 Jul 2026 19:00:14 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: NpPPvehZEYUeEERZVbhjXXCR3S3cLHMKQtIhnYkH7U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:88:e9:c7:7e:86:19:2f:20:18:52:65:c0:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jul 23 19:00:14 2026 GMT
Not After : Jul 24 19:00:14 2026 GMT
Subject: CN=0758424a72f7882fce90a0b025e958c6814c74a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:95:44:2a:6c:12:44:de:4a:cb:0a:dd:c2:
72:f5:c9:63:0a:78:86:d5:96:41:e4:26:a5:0f:40:
a0:6f:3e:55:5b:49:68:1e:1a:f9:59:e3:e1:84:a4:
f1:ef:df:e6:91:d1:43:7f:fe:92:4c:90:99:44:d9:
80:5d:7a:4c:66:50:8c:2d:a1:63:ef:45:cd:5b:f3:
ea:08:a6:9d:12:86:47:44:6f:eb:aa:25:e9:d9:8e:
25:c2:33:b4:95:5e:1d:aa:8b:c1:05:2e:28:75:ba:
0a:c2:96:f2:f5:eb:15:b1:33:c4:83:d6:f0:7c:c0:
ee:ee:33:aa:ff:73:36:0d:96:17:6e:12:f1:49:0d:
0c:80:80:51:3e:24:73:87:6a:aa:66:60:ef:13:6a:
10:87:db:27:e0:76:f4:46:71:3a:0e:ab:b7:e0:37:
ac:65:e2:79:ea:06:90:ee:89:7f:e1:6c:a8:f4:bc:
98:f3:ef:e2:04:60:4f:bf:26:6e:85:b6:ab:db:12:
0d:0f:a6:7e:e4:49:f0:ea:44:4b:fa:e4:51:41:d7:
17:cd:bd:13:51:97:2b:6e:75:2b:74:5c:b4:f0:9d:
27:29:4c:77:10:b5:f4:ce:ef:f6:56:ce:2f:d6:e0:
2b:21:62:79:ff:6a:2d:bd:0e:fe:78:29:4b:e3:84:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:42:4A:72:F7:88:2F:CE:90:A0:B0:25:E9:58:C6:81:4C:74:A7
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:2b:42:27:f6:fd:9c:e4:66:8b:b0:28:e0:d7:8a:b1:75:
39:82:12:8c:f8:02:5b:14:a4:b5:9d:2e:b6:e5:f2:5a:93:9b:
fe:af:50:86:6c:b2:72:bc:1d:0b:50:a7:0b:e6:c4:8f:87:77:
f5:b0:ab:f8:ff:4b:b0:fc:d4:53:0e:97:c1:07:dd:ac:c7:d8:
aa:97:ca:20:d4:ad:7a:7b:dd:4f:53:f0:4d:f2:d8:72:d9:40:
a8:f0:86:68:2c:15:c4:f6:61:84:5f:29:6a:2d:a6:1c:0d:5e:
3c:30:49:50:5b:77:9e:9a:5a:e2:50:2b:fb:d2:e6:25:c8:06:
23:5e:2a:36:fc:0a:eb:8e:41:17:7d:49:54:71:80:b4:f5:6d:
23:21:64:df:e8:b5:40:d5:b4:03:15:02:0c:8a:04:60:f3:a5:
a2:9a:41:b2:2e:a8:34:a5:ec:c8:7f:34:d0:27:eb:6a:3f:e5:
d6:e4:78:9f:8a:79:8e:04:1c:6c:c5:fd:bf:cd:35:8a:b5:b0:
15:21:bd:9c:98:cd:34:17:0d:8b:ce:4f:c4:be:20:7f:be:53:
50:b5:07:95:1c:6c:d5:14:39:d9:8b:5b:37:a9:6b:ec:c3:a3:
bb:a6:7a:0a:71:a5:3d:88:db:f8:14:a2:a3:6e:db:d8:2b:67:
31:51:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:12 2026 by rpki-client