Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: yTEpp8RqGdSShSSHO/SA/W9aNHpdLeQXcQx50cWGsko=
Subject key identifier: FA:05:C8:5E:0C:1C:D6:60:5D:3F:A2:23:DB:9E:9B:81:7C:B3:FF:CD
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019FAD1AF996708A15DA98639CD615F92A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 135C
Signing time: Wed 29 Jul 2026 09:00:53 +0000
Manifest this update: Wed 29 Jul 2026 09:00:53 +0000
Manifest next update: Thu 30 Jul 2026 09:00:53 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: Zq8AjHxCv4FTGqPd4LKVALKStFc.roa (hash: +Wgeeo4qZQi4AfCHDA8NNz4m0OfIuxblNCKxxi1fR7Y=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: 8GJCKLDAZ2I3aW3H/wHxD+98ZktpwMpvmJO39Re2Ous=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f9:96:70:8a:15:da:98:63:9c:d6:15:f9:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jul 29 09:00:53 2026 GMT
Not After : Jul 30 09:00:53 2026 GMT
Subject: CN=fa05c85e0c1cd6605d3fa223db9e9b817cb3ffcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:0a:46:19:f1:2d:97:9d:b2:9e:2e:55:90:
c2:b0:aa:e0:51:a1:57:88:3d:e2:4a:3e:49:ae:63:
e7:26:5d:41:99:7c:fa:80:b4:d5:4b:e1:94:ef:bc:
b3:ec:1d:19:ec:91:92:2c:8d:01:14:e7:4a:c1:6f:
3e:e8:ca:82:9d:f9:0b:de:d9:5a:a9:7b:90:ac:43:
87:c2:ad:66:51:75:56:ae:7e:01:df:ad:0f:d0:d4:
66:1e:cb:a1:6e:d7:b4:62:9f:42:99:4b:46:33:e2:
59:3f:de:57:4a:da:6d:06:07:ec:e2:e6:a6:31:5e:
be:ae:91:49:df:f0:a5:6e:9d:d4:c6:51:c9:df:b9:
61:22:bd:34:d5:2d:3b:59:7f:ec:e5:df:2c:b9:30:
ae:23:f9:44:2f:44:b0:81:3e:c6:dd:fb:8e:b7:2e:
72:94:b5:d1:6c:54:4a:26:3f:76:fe:d7:c1:89:4f:
a4:dc:d4:4e:53:7f:4e:51:5d:ab:23:8a:94:ab:21:
04:b1:a2:fa:25:82:62:d9:3b:61:4d:28:fc:39:8b:
9c:1b:35:3c:bc:56:cd:72:24:a9:06:8f:01:a8:8c:
95:ed:2f:82:98:48:e5:b8:d7:fe:71:fe:c0:8f:64:
c9:c1:31:d1:59:db:d8:38:2d:7a:7d:50:aa:9a:2a:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:C8:5E:0C:1C:D6:60:5D:3F:A2:23:DB:9E:9B:81:7C:B3:FF:CD
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:52:71:1c:68:dc:58:66:a9:af:89:4d:51:ab:cb:e5:fa:5f:
d4:b5:89:4f:9e:5b:67:92:b8:26:8a:2b:f2:a4:ca:fe:f7:e3:
e2:0c:d6:b4:a2:b1:dd:e7:f8:4a:e9:9d:dc:1a:cc:93:dd:e3:
ac:4a:9d:64:ca:d1:15:ce:6a:0f:9f:c7:80:96:ce:26:2d:65:
8f:23:98:a9:af:11:6a:37:9e:76:ef:3f:56:da:9d:63:bc:70:
5b:18:70:03:9d:ff:fd:b0:36:ee:65:7f:92:69:86:a5:35:bc:
74:53:68:74:a5:ad:0e:f8:4e:bc:77:99:25:10:3a:3e:c8:08:
c8:91:6e:f2:30:0a:06:ef:ea:a7:7f:78:43:eb:72:92:c2:21:
ec:c9:36:13:1a:82:dc:2b:cb:bb:a4:81:3f:b1:9d:57:bc:0b:
a7:9e:0b:e4:5f:b2:c8:8d:71:ba:33:09:76:a8:33:4d:6a:c2:
cf:2f:23:da:36:b3:5e:78:37:ca:42:6a:c2:2f:dc:d6:b4:58:
61:c9:cb:a0:e2:04:2d:ed:e8:56:e2:97:f4:7d:32:a3:46:94:
ee:f1:00:ec:95:f8:0c:b4:de:9d:6e:03:08:21:0e:a6:3b:1f:
ba:ed:bd:0a:05:6e:b1:52:65:11:df:00:bb:c9:23:9a:06:c8:
32:48:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:53:18 2026 by rpki-client