Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: E8m/Qv4ZGDFWSonxqOmV3zCsddgZXWvWNRqA8ETQjgM=
Subject key identifier: 84:B7:5C:A6:72:98:8B:15:E3:FA:1E:81:80:E2:DC:C9:E6:2D:37:75
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 019FA899B426A89604AB49468A5B153C5E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:13 +0000
Manifest this update: Tue 28 Jul 2026 12:01:13 +0000
Manifest next update: Wed 29 Jul 2026 12:01:13 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: s6bckfrCvD0ICuaKJdsP4/vRNZgmEn7VepBE1TfAP9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:b4:26:a8:96:04:ab:49:46:8a:5b:15:3c:5e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Jul 28 12:01:13 2026 GMT
Not After : Jul 29 12:01:13 2026 GMT
Subject: CN=84b75ca672988b15e3fa1e8180e2dcc9e62d3775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:4b:f5:e4:80:86:b2:ba:8e:6c:bf:2e:63:
1a:29:51:6d:6d:9c:6b:c4:cb:9e:c6:0f:e2:a6:3f:
53:82:6a:4f:e3:f7:6b:93:8a:d5:3d:8c:72:2e:30:
55:3b:ea:0b:04:8a:7a:72:f4:83:12:86:a4:2d:82:
e7:44:56:27:85:0f:de:9e:bd:ae:db:10:95:4b:5d:
ff:fd:73:78:ff:d7:2b:5e:74:39:e9:c3:8c:d7:94:
b4:58:92:05:53:54:4f:38:15:00:0a:13:63:c1:64:
21:80:e9:aa:d9:03:18:00:6e:c5:66:f7:3f:a1:ac:
1c:2f:04:f6:e5:f5:e5:a9:12:00:0c:8b:d7:55:39:
ba:ce:60:76:bb:ce:2a:99:20:c1:c1:2f:8a:79:cc:
06:c5:28:41:1c:50:d2:a7:16:2e:e4:51:49:fb:4b:
82:e1:c8:9d:2d:47:74:82:2c:20:8d:1c:7f:69:e0:
40:34:74:2c:d4:01:b3:6d:bf:f6:79:dc:3e:3e:50:
0f:95:f1:31:b2:96:44:33:73:d7:34:aa:6e:39:03:
1d:23:d4:cc:1a:8d:44:9f:1c:a4:11:c4:51:73:22:
f2:27:03:b3:5a:b3:f5:71:99:db:9f:a8:41:a4:6b:
ba:75:4f:29:b6:69:fc:bb:d1:06:74:5f:bd:6b:75:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:5C:A6:72:98:8B:15:E3:FA:1E:81:80:E2:DC:C9:E6:2D:37:75
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:67:5b:1b:16:f2:ac:48:1c:eb:84:12:3e:08:13:2f:bf:
37:f1:59:23:68:13:03:42:75:11:da:3e:93:06:a0:c7:53:ba:
cf:6f:2e:06:9b:a9:e2:17:62:ff:bd:8a:a3:37:86:90:2d:73:
f0:81:da:86:b2:27:31:01:2c:f4:c5:d4:5a:4a:b8:87:7e:b9:
ab:b3:3a:53:f6:33:23:5f:12:d5:eb:14:50:9a:75:a3:79:49:
79:c1:9d:4d:72:b4:d2:a6:43:58:c8:77:e6:18:44:c8:14:7f:
23:30:cf:0c:3e:fa:d1:e0:18:5b:bc:fc:7f:ae:3d:03:46:0d:
c8:34:17:be:f3:39:51:96:ec:c4:c2:7b:74:f7:28:ee:b9:f4:
dd:6b:9e:f9:67:93:0c:1f:f9:60:a3:b7:2a:e4:5d:19:7b:42:
ac:f3:bf:9b:53:74:71:b9:c4:46:25:c5:d3:36:c8:c3:f8:6d:
a9:47:16:6d:eb:7a:b4:62:6e:30:eb:1b:22:59:5e:c5:4c:41:
17:af:a3:49:7e:0e:09:d8:66:e5:af:42:30:31:78:5c:a4:8f:
cc:b9:40:55:30:f8:49:24:74:f8:b0:00:09:39:d1:40:1e:cb:
4b:a5:a4:34:06:81:db:99:1b:3b:5c:a2:8e:4a:ca:51:1b:ba:
84:5a:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:15:29 2026 by rpki-client