Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: 2sEOl2qFa/Vz8+IFejHq0EokmzyKblA4fi12uT5CUuk=
Subject key identifier: 96:2F:48:85:59:00:D0:C5:3F:F8:78:92:DF:F3:88:4A:DF:28:78:1A
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019FAAF54033B3F127D4FDE7C5AFE534427A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0CA3
Signing time: Tue 28 Jul 2026 23:00:27 +0000
Manifest this update: Tue 28 Jul 2026 23:00:27 +0000
Manifest next update: Wed 29 Jul 2026 23:00:27 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: agBkq7okm/IwTpeR1DXiYd3+kmT7EQHmM0cXMh5RYD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:40:33:b3:f1:27:d4:fd:e7:c5:af:e5:34:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jul 28 23:00:27 2026 GMT
Not After : Jul 29 23:00:27 2026 GMT
Subject: CN=962f48855900d0c53ff87892dff3884adf28781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:21:97:b1:ee:a6:45:44:41:55:58:93:7f:
29:f0:39:ff:44:4e:40:1e:6b:e0:3e:15:ee:b9:67:
3b:bb:86:dd:2b:f7:ac:4a:eb:4b:0e:96:00:37:6b:
8c:aa:02:e6:9e:71:cb:62:60:42:f6:a9:b4:93:f3:
19:ea:20:aa:12:d1:b8:85:6e:38:31:40:33:09:71:
4a:2b:8c:56:67:cb:47:d7:7d:a3:1c:88:40:6d:4d:
4a:fe:1d:0d:d0:36:62:58:04:d3:f3:ad:5e:c3:27:
5e:50:fc:94:bb:b9:ec:a7:cf:c1:26:0a:b7:c0:f2:
be:f4:26:3b:a7:53:89:39:45:7d:11:3f:90:19:96:
6d:b6:96:15:14:05:44:4e:e3:b7:07:13:e7:aa:81:
58:ab:a8:c9:17:51:38:89:6c:91:d7:d9:50:39:04:
dc:3a:ae:22:ce:84:1e:c7:ac:5c:7f:b0:0e:c3:16:
af:0c:5e:28:fa:ea:7b:b3:64:cb:27:97:c0:4b:0a:
87:02:e7:6a:e6:0d:54:9e:6c:ee:14:2d:67:de:c2:
54:1d:6d:61:d6:94:81:be:32:4c:ba:fd:c0:cf:6e:
5f:89:49:b3:7a:06:e2:e5:cd:1b:9f:c7:d8:36:4a:
1b:83:8e:3f:78:26:5c:dd:f6:39:6a:40:9f:60:8b:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:48:85:59:00:D0:C5:3F:F8:78:92:DF:F3:88:4A:DF:28:78:1A
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:e5:8d:a5:ca:86:c7:ab:8c:95:0b:35:42:64:fd:43:ef:
21:c5:1b:83:6b:7b:32:25:44:6a:87:48:ce:db:63:bf:49:3e:
63:a4:e2:a4:50:e3:b7:15:01:9c:05:25:35:aa:ab:79:5b:33:
0d:91:66:f8:e4:82:fb:a6:57:39:30:13:2a:3e:c3:fa:45:09:
cf:81:a6:9a:bb:a6:68:bf:e5:ce:4f:c6:12:e0:16:2d:fe:50:
0b:86:d8:89:97:76:6b:ec:4e:a9:4e:3f:b2:4d:9c:d4:64:df:
2d:2f:24:d6:08:c3:c9:cc:cf:c2:ca:8e:2d:dd:e5:76:ec:c6:
30:61:4e:d9:d6:c5:df:10:12:6a:cf:78:f8:ad:25:64:a1:bc:
b4:8f:4a:a8:e4:6a:21:3d:ff:f8:6e:69:a0:fe:8a:d6:62:69:
66:e1:70:68:76:ef:61:af:cb:60:4e:18:bc:46:72:8e:5a:02:
6f:b4:b9:f2:6c:e6:03:b5:06:9d:0f:50:58:f5:10:e0:ac:4d:
af:64:44:3b:50:8b:71:16:bc:9c:bb:0b:3d:c6:07:58:93:ac:
12:30:3d:b8:86:64:7e:b9:16:b7:fb:50:86:5b:8c:09:b4:aa:
9f:74:72:5c:9e:8e:9a:4b:a3:d1:3b:85:0d:ee:3f:73:3b:22:
57:8c:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:04 2026 by rpki-client