Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: Vzol1qkfwYncSGSPq6RzfUCysIjy9BLE+RRxevPmyVY=
Subject key identifier: B3:98:7C:E7:7E:3B:20:6D:54:CB:56:3E:FE:BD:63:95:A8:CD:B1:39
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019F95EDDE8006BADAE0EDA058D1FF1D5C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 154F
Signing time: Fri 24 Jul 2026 21:00:21 +0000
Manifest this update: Fri 24 Jul 2026 21:00:21 +0000
Manifest next update: Sat 25 Jul 2026 21:00:21 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: 6qpqFm5GPFbjsjXAdXfuptT9b3A7EPNjsGI0h05GsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:de:80:06:ba:da:e0:ed:a0:58:d1:ff:1d:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jul 24 21:00:21 2026 GMT
Not After : Jul 25 21:00:21 2026 GMT
Subject: CN=b3987ce77e3b206d54cb563efebd6395a8cdb139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7c:bd:ca:29:a6:cf:2a:b1:2e:1d:27:1d:ed:
ac:09:39:48:fc:56:62:dc:5e:02:f9:da:72:26:14:
95:a2:41:e3:06:9e:98:66:6c:2a:de:96:d2:a2:b1:
26:c8:e6:b4:e3:12:6a:5d:fa:fa:e5:64:a3:85:4b:
5e:3b:c6:d8:41:33:3d:6c:50:98:4e:7d:01:cd:ec:
4b:25:7f:bd:92:5e:db:99:24:79:40:73:09:c1:78:
c8:d8:63:9c:0e:d0:f2:47:b2:bc:75:db:20:eb:f8:
c7:9b:92:ed:ba:3b:95:cb:7e:f5:b1:51:36:9d:82:
4c:e4:99:40:40:b2:ef:35:26:20:a5:e7:2d:2c:29:
76:c7:c8:8f:bf:fe:3c:32:78:1f:67:a6:e9:11:74:
2e:e2:02:bb:12:5d:d1:0d:9b:7c:fb:3d:03:07:c4:
51:8a:a0:f9:c0:b1:96:f5:23:b9:05:d6:05:ea:41:
f0:90:89:c8:cf:de:1d:e6:50:fa:e0:2d:c5:ca:d8:
99:73:f9:1a:b3:a8:ef:0b:c8:e6:16:47:52:8d:cb:
d4:0e:09:7b:46:6a:7d:c7:6c:17:5c:2b:5c:7b:f6:
a7:fc:e3:57:86:3d:5d:64:dd:41:51:7a:1d:2d:3a:
ed:88:ed:23:8f:de:00:f4:3d:78:70:52:79:3f:72:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:7C:E7:7E:3B:20:6D:54:CB:56:3E:FE:BD:63:95:A8:CD:B1:39
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:88:b4:c5:12:93:a5:84:de:fb:b1:98:30:b0:c3:f4:9d:6f:
8f:9b:fa:06:a5:1b:14:d2:22:ff:1c:51:92:83:89:b3:6d:25:
67:3a:43:31:af:21:a1:6d:ab:2e:1c:26:9c:bc:4d:19:06:13:
cf:04:8b:98:f1:6f:b2:84:16:3e:d2:c7:dd:4b:ac:5d:d5:ea:
c3:56:5b:61:7e:81:97:75:b2:3f:96:60:5b:07:fa:61:47:64:
44:8c:84:3f:f9:d8:a8:3b:3e:11:fa:5b:eb:41:b1:94:b5:d9:
e4:dd:d5:7a:12:5f:18:f5:c1:9b:0b:36:c3:09:df:10:30:ac:
db:d6:4c:00:ad:7a:27:27:06:3c:b0:3c:cf:2a:dd:aa:d8:de:
d4:f9:36:66:80:a3:aa:22:cf:9a:2b:38:a0:c7:44:9d:e3:9b:
ad:3f:8a:00:1a:b3:02:95:8f:16:90:a2:fd:fa:49:14:58:e2:
a4:be:e3:32:97:2b:89:2a:41:0e:75:e0:8e:62:3c:38:5e:44:
8f:a2:86:d6:44:b2:29:48:e1:91:02:7c:59:2f:35:8e:3e:82:
c6:fc:7e:d0:cc:b9:91:51:d1:a6:06:4a:53:9c:82:cb:07:38:
ae:c2:b0:64:60:8a:2a:21:b2:74:0a:78:a8:2c:2f:e5:10:2d:
28:f2:98:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+V7d6ABrra4O2gWNH/HVxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3
YjM5OTEwHhcNMjYwNzI0MjEwMDIxWhcNMjYwNzI1MjEwMDIxWjAzMTEwLwYDVQQD
EyhiMzk4N2NlNzdlM2IyMDZkNTRjYjU2M2VmZWJkNjM5NWE4Y2RiMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73y9yimmzyqxLh0nHe2sCTlI/FZi
3F4C+dpyJhSVokHjBp6YZmwq3pbSorEmyOa04xJqXfr65WSjhUteO8bYQTM9bFCY
Tn0BzexLJX+9kl7bmSR5QHMJwXjI2GOcDtDyR7K8ddsg6/jHm5LtujuVy371sVE2
nYJM5JlAQLLvNSYgpectLCl2x8iPv/48MngfZ6bpEXQu4gK7El3RDZt8+z0DB8RR
iqD5wLGW9SO5BdYF6kHwkInIz94d5lD64C3FytiZc/kas6jvC8jmFkdSjcvUDgl7
Rmp9x2wXXCtce/an/ONXhj1dZN1BUXodLTrtiO0jj94A9D14cFJ5P3J5IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOYfOd+OyBtVMtWPv69Y5WozbE5MB8GA1UdIwQY
MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut
NmU0NTlhNThlMWQ2LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2
LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4i0xRKT
pYTe+7GYMLDD9J1vj5v6BqUbFNIi/xxRkoOJs20lZzpDMa8hoW2rLhwmnLxNGQYT
zwSLmPFvsoQWPtLH3UusXdXqw1ZbYX6Bl3WyP5ZgWwf6YUdkRIyEP/nYqDs+Efpb
60GxlLXZ5N3VehJfGPXBmws2wwnfEDCs29ZMAK16JycGPLA8zyrdqtje1Pk2ZoCj
qiLPmis4oMdEneObrT+KABqzApWPFpCi/fpJFFjipL7jMpcriSpBDnXgjmI8OF5E
j6KG1kSyKUjhkQJ8WS81jj6Cxvx+0My5kVHRpgZKU5yCywc4rsKwZGCKKiGydAp4
qCwv5RAtKPKYQQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:05 2026 by rpki-client