Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: cGq5sis2GMesdja0QAxmBmuhVoJYFBWhw5kx2VmaneI=
Subject key identifier: 0A:55:1C:64:66:A6:D2:3D:18:2F:DB:BB:76:9C:CD:F0:CF:62:9F:E2
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019FAA19854410E7F62BA24621EC489E05D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 19:00:26 +0000
Manifest this update: Tue 28 Jul 2026 19:00:26 +0000
Manifest next update: Wed 29 Jul 2026 19:00:26 +0000
Files and hashes: 1: 4SOYImJHyJqTwCMAGjKjr0oBLY8.roa (hash: QqjpUxrKkhwY2QSOOSplb9rBwA2D3pk3AGplsT4xaRc=)
2: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
3: g8_04g_ZLptnhbFMWnALX7jI71Q.roa (hash: 70TJV8gzoaCntblmfItJ9c4lhtIDo3EwTvJjPUN694A=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: xoGR0ew7UkpaRAy5C12d6CmpQcxWGuBkUFNBvsF9Xp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:85:44:10:e7:f6:2b:a2:46:21:ec:48:9e:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jul 28 19:00:26 2026 GMT
Not After : Jul 29 19:00:26 2026 GMT
Subject: CN=0a551c6466a6d23d182fdbbb769ccdf0cf629fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:ef:5d:1e:41:2a:f2:25:26:99:75:0f:a8:
f8:43:6c:b1:76:ea:e2:c9:9b:f9:c5:6f:a1:fa:e4:
51:b3:2a:dd:62:99:9e:72:28:f6:69:47:e4:45:35:
3c:c7:07:65:75:f1:47:63:74:fa:f3:f6:c8:d6:b0:
69:43:36:54:ca:80:f9:87:24:5a:8b:37:df:44:b2:
6f:78:68:16:4d:a6:47:5d:01:c6:95:f1:83:f2:97:
df:98:7b:91:b6:e7:c0:4e:c7:19:e8:ba:06:39:94:
25:9e:0a:a8:3c:d6:e7:1e:f8:68:7e:57:81:71:6d:
28:e4:f0:3c:b7:da:ce:a3:b3:fb:0e:e1:5f:60:a9:
90:e6:19:33:f9:4a:3e:e0:bb:54:24:3a:86:d8:b9:
59:8c:3d:ff:17:41:e0:7d:0c:da:ab:84:53:96:1d:
d7:48:8c:17:e2:d7:25:70:da:4a:c8:44:98:87:ec:
00:1b:80:19:41:f7:7b:14:e6:bf:a1:48:97:d4:42:
71:7c:b7:f7:9c:64:11:c4:36:2c:d4:e1:aa:85:ec:
37:f7:c5:58:6a:25:ff:c3:15:de:c0:ab:81:b3:15:
cd:ca:84:75:60:58:ce:9c:37:62:83:52:d2:dd:c6:
2d:d7:e6:8a:b7:9b:82:e3:30:a6:08:29:f6:2b:ca:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:1C:64:66:A6:D2:3D:18:2F:DB:BB:76:9C:CD:F0:CF:62:9F:E2
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4f:e1:8e:bf:a1:d4:83:91:47:b7:76:fc:7f:d9:85:52:15:
e8:5f:66:6e:fc:32:81:e7:e4:69:98:09:f5:cf:6b:07:9e:74:
ab:cc:1b:74:6f:87:aa:eb:96:40:38:cc:78:56:97:0f:a8:f9:
f2:be:c9:78:1c:ab:7d:3b:d1:cb:35:1e:19:b8:62:59:11:78:
5d:24:81:9a:7f:9f:2a:7e:60:94:5b:26:3a:b2:01:79:30:7a:
52:95:34:2c:59:b2:bf:da:81:a9:89:4c:1e:2f:a9:78:61:ce:
01:96:43:72:ae:85:79:13:54:5d:e1:bc:cb:c8:a1:16:45:e8:
11:ab:92:a2:dc:ad:ab:e6:e2:d9:2b:0e:01:4f:d9:03:c5:a5:
80:5c:87:c0:cc:61:49:d1:d5:44:99:49:f5:c4:fe:40:16:91:
b2:78:c6:24:99:76:79:a8:bf:7e:bc:76:3a:51:e5:9b:ee:21:
6b:12:27:70:17:da:b7:78:0f:04:1d:f9:85:35:22:e2:3a:73:
0a:49:6e:83:9d:41:de:77:81:18:26:6b:cb:06:7e:17:cb:23:
05:79:94:5d:34:e8:f3:dc:3b:ee:e7:f1:a1:bb:e3:ff:8c:f2:
a5:db:7a:d8:da:ca:f4:c6:0e:f6:89:6a:8c:de:82:54:11:5d:
bb:33:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:35 2026 by rpki-client