Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: 0KGCxQdWKDgRrvlE+a2rFAes5xfasWrOH1TGa+nGpB8=
Subject key identifier: DA:A3:85:A1:8B:E6:4E:2D:1E:ED:9B:17:91:86:29:07:40:82:58:F1
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 019FAB2CB15B90CA7741A42CB461C7447378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 06DD
Signing time: Wed 29 Jul 2026 00:01:00 +0000
Manifest this update: Wed 29 Jul 2026 00:01:00 +0000
Manifest next update: Thu 30 Jul 2026 00:01:00 +0000
Files and hashes: 1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: +EGo5L0wiWuaiuk62FRhcrIHzt0n/wKcWiTgDkO4xW4=)
2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b1:5b:90:ca:77:41:a4:2c:b4:61:c7:44:73:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Jul 29 00:01:00 2026 GMT
Not After : Jul 30 00:01:00 2026 GMT
Subject: CN=daa385a18be64e2d1eed9b1791862907408258f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:fb:a1:e3:2c:ce:51:7f:d2:ec:1e:3f:2c:
56:43:4b:80:7c:7e:74:2c:0a:ad:67:f8:44:f0:76:
db:78:8b:60:48:84:79:a0:60:3f:75:66:33:6a:2e:
a4:82:fe:05:27:65:29:4c:5e:fa:3f:20:f6:b3:0b:
1a:f0:ce:67:f0:e2:5d:9a:81:fe:3d:57:80:d9:78:
b9:25:19:bc:19:de:8c:af:8f:be:8f:6d:1c:ce:57:
32:b1:f4:3c:af:0f:20:9f:86:db:c0:d3:85:49:07:
fb:03:0f:ff:9e:40:ff:f2:8c:9b:2c:7c:fa:9c:5f:
63:81:f5:56:33:88:72:8d:65:33:b1:56:0b:0e:fd:
dd:bb:65:44:8d:9d:80:8a:64:e5:69:6b:4c:80:f0:
02:d3:d4:64:ab:f8:c2:e2:10:28:0f:a4:b4:6e:90:
b8:f7:00:ed:4e:d1:00:d5:f9:2c:50:66:e8:c9:e2:
b4:fa:2a:4c:34:ea:e6:32:11:ae:a6:f2:4d:d3:75:
09:74:f7:64:53:2d:e1:ee:42:c2:9d:28:41:b5:8b:
4f:2d:10:b0:e1:98:21:ff:64:14:47:5b:61:46:2d:
88:48:3a:d7:b3:da:91:ba:59:33:2c:56:13:ae:cd:
93:77:d7:28:4b:78:8a:1e:c6:65:22:a5:2b:51:f1:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:85:A1:8B:E6:4E:2D:1E:ED:9B:17:91:86:29:07:40:82:58:F1
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:44:bf:0f:b0:45:ef:6f:94:bf:3c:fa:23:c1:00:d4:e6:8f:
6f:26:d1:11:58:59:40:e1:a2:86:e9:b4:8c:d9:ef:c3:e1:72:
f9:08:44:b7:89:e7:7b:b3:5e:5b:4a:d2:47:54:77:8a:85:2d:
8b:23:62:ba:7c:8d:a1:49:0f:3b:f7:c5:99:5e:93:4a:d9:fd:
31:7e:19:97:25:c9:3e:3b:cb:e0:70:7c:6d:b4:a5:6d:73:18:
c4:08:41:08:b3:b3:eb:fa:86:93:76:ca:c1:03:2b:c8:9b:20:
0a:89:6b:d3:72:6a:6a:98:f3:21:ef:1b:34:79:ee:7b:15:94:
32:0f:92:cd:c3:7c:de:24:86:66:39:14:fc:cc:9b:b7:f2:9f:
00:65:41:f8:90:f8:ac:ad:a2:2f:4f:b4:7f:e4:53:cd:29:8b:
bf:c6:3b:ff:41:4f:70:41:94:36:df:74:b6:a6:08:3f:ca:07:
18:44:f4:9e:1a:9d:3a:42:49:94:ff:a7:ff:60:ca:cc:4a:88:
d3:ee:86:f2:e8:4b:b3:76:39:15:0c:15:a1:bc:e3:5c:51:b8:
c6:07:ae:12:64:4b:8f:7a:8a:02:3f:cc:44:df:ea:cd:84:fc:
9e:4f:8f:8d:90:b3:01:b1:ce:2a:2a:c4:be:d0:ac:d3:8e:1b:
ea:a4:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:54 2026 by rpki-client