
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: blYL3KpbJyUIo+YBQe9kpPTWSrhNRX79CWsvWrUdzHM=
Subject key identifier: 76:72:09:E2:89:51:EB:E0:19:60:FA:9F:BB:E6:9B:E5:3A:7E:24:EC
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 019EC224C13292C706A6B636AAA329EA66B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: D7
Signing time: Sat 13 Jun 2026 18:00:49 +0000
Manifest this update: Sat 13 Jun 2026 18:00:49 +0000
Manifest next update: Sun 14 Jun 2026 18:00:49 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: /5GUG6vcKPn7e+kreHayeIM2fY9Zx0/9Ih5PTkpAw0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:c1:32:92:c7:06:a6:b6:36:aa:a3:29:ea:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Jun 13 18:00:49 2026 GMT
Not After : Jun 14 18:00:49 2026 GMT
Subject: CN=767209e28951ebe01960fa9fbbe69be53a7e24ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:ec:b9:cf:c6:03:84:7b:a5:7a:88:e0:6d:
81:fe:9b:30:42:4a:f9:ee:f4:16:b7:0e:fb:57:1e:
e8:05:7c:6d:ae:61:a9:13:5d:b6:9c:4a:31:df:1c:
35:4f:be:8b:0f:97:b3:f3:c6:7e:02:99:b8:11:47:
c3:ea:4a:9b:06:f1:b1:73:2c:af:0f:3f:fa:ea:51:
a0:a8:ef:69:73:37:e0:a0:10:8a:79:ab:e1:69:72:
98:1f:74:f7:9a:18:e0:99:ae:8d:0a:35:c5:cf:cd:
29:4a:25:be:ab:e1:4f:a9:5a:8c:74:d5:07:98:16:
ac:e8:55:7f:ca:07:3b:71:60:87:f7:fa:71:8c:77:
23:49:89:4b:be:14:93:2e:3a:ad:80:10:65:35:db:
89:fc:1a:cd:17:df:ab:33:06:35:b9:7a:47:e5:d9:
77:05:4e:c8:44:16:0a:cb:d2:35:fe:f6:0f:3b:32:
8f:7a:83:68:b8:eb:a1:62:e0:bd:2a:8f:f1:43:bd:
63:5c:15:a2:0c:9b:8e:a3:e9:dc:9b:4d:a4:7f:4a:
c5:cf:70:39:94:b7:66:b1:a0:ab:a8:5f:c8:a6:7d:
b3:19:fd:da:37:af:40:5e:34:c2:3a:ba:21:ac:56:
07:02:02:cb:f3:c1:12:2a:d2:a3:15:bc:d9:58:da:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:09:E2:89:51:EB:E0:19:60:FA:9F:BB:E6:9B:E5:3A:7E:24:EC
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:d0:4c:b3:04:84:84:df:75:8d:11:01:e8:89:65:e6:87:
9b:cb:9c:9e:7f:0a:b8:8d:dc:f9:26:91:94:2f:a2:3a:f0:e4:
dc:0e:62:82:29:27:4c:f3:3f:83:bd:9d:1d:b4:43:65:21:0a:
8a:71:93:b7:e1:a5:43:40:08:a0:a0:6c:12:39:9a:b7:e3:92:
c6:f3:84:b8:39:67:d2:1a:f0:66:b8:12:92:0f:fe:9f:64:cc:
2c:f4:44:c8:24:c2:eb:09:47:b9:32:3f:c8:bf:dd:b3:93:6e:
17:66:0c:1b:ea:f6:72:be:bf:00:31:61:2a:63:40:25:38:3a:
db:a2:56:94:81:4a:e2:fc:db:e1:f8:16:f6:a5:8a:c8:77:da:
fa:91:8d:2e:f8:41:d9:29:66:49:ee:22:dc:e3:79:50:c4:18:
8e:2b:d1:96:ff:19:6a:4c:fc:56:1e:06:65:1d:ec:e5:34:77:
aa:b3:54:88:52:76:b2:f4:1d:79:4d:8e:5c:2f:32:f6:9b:23:
23:e5:a8:96:ed:88:ef:95:66:02:5d:83:08:51:8f:d5:78:43:
87:dc:2b:b0:ce:da:13:ed:81:40:c2:5a:01:ff:10:b5:c5:47:
50:62:da:19:a8:d7:0d:ba:0a:e7:e1:17:bb:a6:92:b7:0f:fa:
76:a7:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:03 2026 by rpki-client