Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: Tkwsh4iTt6AMjgHXh9lz+/gqZz523qfSCTN/zu8UTOA=
Subject key identifier: 42:2A:D9:E5:B3:DC:56:B4:64:C2:D4:33:97:E3:5D:E6:13:D2:7D:FC
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 019FAA87423ADC7826B5034088AA311D9BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: 2peuBCl5Njy08LPAGsOMw36bgFzdoTr0kcQQzj65jEg=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:42:3a:dc:78:26:b5:03:40:88:aa:31:1d:9b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=422ad9e5b3dc56b464c2d43397e35de613d27dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:39:2d:9f:37:b9:2c:fd:9e:86:5c:ed:9c:
b1:08:2f:b3:3b:c4:aa:be:41:9f:bd:82:bc:51:33:
7b:7c:57:a6:9d:fa:ea:4e:b0:47:b9:21:62:7b:de:
4f:e7:55:cf:dc:3d:6c:fd:a2:9f:25:c6:b9:19:4d:
2a:59:36:94:ab:d6:d5:c4:3b:a2:8a:5d:b3:85:7e:
ee:9d:c1:2e:26:cb:84:ec:35:f4:1e:42:37:a9:0e:
f6:da:58:a4:48:7f:d9:b2:05:e0:e6:a0:a2:d4:64:
37:48:94:b7:ba:eb:28:8b:74:1e:bc:c6:48:9c:f3:
5f:21:9b:fd:ed:dd:6f:ad:c4:54:3c:3c:8c:ab:c2:
4a:96:d1:0a:3e:d9:83:b1:1f:8e:42:be:bc:1a:08:
de:9f:b9:50:25:60:24:c7:3f:5e:3a:49:f6:75:67:
bf:89:e0:05:c4:61:cd:37:85:6b:4c:70:7d:b1:cc:
18:29:d7:62:40:dc:48:ea:68:fa:de:b6:23:a9:39:
48:bd:77:a3:11:0b:63:ca:c7:ed:e9:b8:e5:e0:df:
ed:75:d3:59:35:08:13:b2:73:86:02:52:2e:a5:f4:
05:15:30:79:cc:5d:5f:f2:4a:95:4c:2e:9b:ad:78:
79:90:60:ac:e2:cb:7c:03:d7:23:46:ae:f6:cb:f2:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:D9:E5:B3:DC:56:B4:64:C2:D4:33:97:E3:5D:E6:13:D2:7D:FC
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ad:ac:09:bb:07:53:38:7f:a9:a7:d0:a4:f8:79:5c:f4:f4:
35:6e:be:35:40:6e:b7:78:a3:1f:79:49:6f:69:6e:95:4b:7e:
46:fc:f0:83:a2:9c:ae:2f:f2:d9:0e:9e:a3:e7:07:19:d7:8c:
5e:18:a9:b1:5c:df:bb:34:ec:90:6e:e7:c3:87:59:b5:d0:70:
c1:90:d2:66:43:13:ea:97:00:67:9f:00:f7:9b:6b:09:af:41:
b9:3f:85:cd:13:06:fd:ab:2f:17:29:07:bd:96:5d:b9:b7:70:
bf:69:61:73:95:c3:fe:c5:01:fe:52:4b:5e:c1:65:6d:e4:0c:
06:11:6d:12:e4:3b:5b:58:30:2a:80:11:23:f2:9a:e2:33:cd:
58:55:cd:af:69:88:99:17:4e:fa:b2:12:ea:d1:5b:32:af:a1:
12:c5:a8:dd:4d:16:10:72:dc:4c:83:f9:41:cd:45:26:6f:f8:
a8:66:35:03:76:a0:a5:e8:e4:ad:7b:2d:c5:b3:18:0a:21:cc:
3b:79:2b:0e:8a:b1:e0:f9:c5:ad:24:f3:f7:ef:37:30:fc:ce:
c9:48:fe:40:a0:6b:6e:d2:d4:f0:5f:4a:c3:4e:3f:ec:4c:58:
d6:b0:54:9a:4c:5b:46:bf:f6:31:6b:d2:c5:98:72:0b:e9:92:
a9:97:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:37 2026 by rpki-client