Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: qYIKdIUn81u3JhCkgwvwySbk4HBrbqWGVkm9WbJL0P0=
Subject key identifier: 64:7E:98:D0:2D:C6:FB:17:5A:48:F6:7D:25:64:30:B2:33:6E:1F:DE
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019FAAF58C15E4063B1BF9BFEE7908569CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 04F9
Signing time: Tue 28 Jul 2026 23:00:46 +0000
Manifest this update: Tue 28 Jul 2026 23:00:46 +0000
Manifest next update: Wed 29 Jul 2026 23:00:46 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: /aNIA22FsKVivfYWZQKxfEYYeo5pGY7zLiYcVSD/k78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8c:15:e4:06:3b:1b:f9:bf:ee:79:08:56:9c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Jul 28 23:00:46 2026 GMT
Not After : Jul 29 23:00:46 2026 GMT
Subject: CN=647e98d02dc6fb175a48f67d256430b2336e1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:da:9d:2b:45:ec:2a:c8:8f:05:cd:ef:43:
cf:75:f8:15:44:f3:af:fa:e5:fc:8d:c0:cf:1b:32:
8f:66:bb:25:c5:80:f5:2f:00:55:75:b0:ef:c1:c9:
58:9a:e6:09:55:a9:e9:1d:50:74:2e:16:02:28:0f:
b3:bc:17:f1:e5:8f:21:52:88:95:6c:ee:39:08:d5:
64:14:d0:ed:c1:c9:d0:7c:1b:d2:0f:f3:cf:29:59:
0f:ed:2c:bf:dd:6f:8a:de:ff:c5:07:87:38:e6:ff:
e5:26:71:ca:d1:e7:76:45:71:db:c8:b3:ba:73:13:
a0:f5:ba:8a:7f:86:fe:4c:a9:f4:b1:52:9b:76:46:
f9:c8:a1:89:a1:d7:bb:28:41:0c:bf:04:ed:2a:8a:
62:6b:74:14:2a:5e:26:e1:8f:56:da:c6:cf:77:8c:
6d:80:03:bf:ab:ad:4d:32:12:6b:55:ff:ee:d4:0c:
57:a1:7b:94:53:5d:99:8e:a6:f4:92:f5:75:56:e8:
dd:e3:b5:bf:6c:da:f5:16:ad:85:d1:51:81:28:46:
1a:1a:4f:75:0e:9c:d9:71:9c:5a:25:0f:6e:4e:1d:
69:17:f0:56:5c:d4:c4:07:1e:41:30:ae:e5:ae:a4:
e1:a3:52:9a:f6:e0:97:b3:db:e9:6a:8a:45:fc:f9:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:98:D0:2D:C6:FB:17:5A:48:F6:7D:25:64:30:B2:33:6E:1F:DE
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3c:2a:09:4e:c3:25:0a:f4:2d:68:01:b0:39:cd:75:bb:ee:
9f:a9:29:81:9f:b9:fc:40:90:2e:d9:85:88:5e:8d:48:48:7d:
48:f5:d8:e7:d0:b4:60:57:90:57:09:1f:3b:87:d4:61:4a:0b:
ba:66:96:7a:d0:8a:23:11:2e:40:fa:a0:92:d6:46:ae:52:94:
a9:f5:3d:9e:89:ca:24:0f:7f:0e:e6:ea:7d:27:06:82:6e:3b:
b6:af:5c:1a:5e:57:3c:6a:c0:6b:30:20:8d:54:0c:d9:a8:ba:
71:2c:40:44:ac:b4:60:b5:2d:52:6a:3d:ab:5d:cf:fc:ea:90:
3a:72:6d:48:15:b0:3e:da:57:fa:9a:22:5a:bf:be:90:ac:a0:
98:76:7a:fd:2e:f7:88:38:c3:ed:b6:69:94:94:ec:00:cd:75:
c2:41:04:3d:37:c8:7f:d5:99:19:4d:07:10:a9:41:ef:8c:c5:
30:40:a5:6e:79:f4:2e:67:54:4e:f3:68:83:1a:87:a9:5d:03:
f5:ad:c3:ea:29:2e:8e:df:04:8f:bd:0b:0c:8c:de:bc:48:59:
69:fd:dc:97:91:fe:18:88:ca:e0:9d:6f:3f:3b:cd:3e:45:24:
50:13:21:a3:8d:67:6a:93:a2:9b:4f:29:9c:c5:af:3f:e0:a3:
f9:b3:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:05 2026 by rpki-client