Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: lXpHK2mmVAaAFO9S28j3rHWY8ECncWUt3FWGV6FA01U=
Subject key identifier: 81:4C:38:E8:02:7C:B6:33:26:B4:B3:27:10:10:B1:A3:7D:4C:71:A2
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019FAA1A0C858109ED95A276CDD87F0BBD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 19:01:01 +0000
Manifest this update: Tue 28 Jul 2026 19:01:01 +0000
Manifest next update: Wed 29 Jul 2026 19:01:01 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: wVmN4Buh9OwIY/35DqermbYFm8JyWfHNuEySmkg8IOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:0c:85:81:09:ed:95:a2:76:cd:d8:7f:0b:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jul 28 19:01:01 2026 GMT
Not After : Jul 29 19:01:01 2026 GMT
Subject: CN=814c38e8027cb63326b4b3271010b1a37d4c71a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:49:cb:21:f3:36:d4:72:18:ae:d5:ed:fb:
ad:cd:55:9b:2a:88:22:e2:ae:b5:83:c0:e0:00:e2:
3e:de:38:c4:75:25:1f:73:35:34:92:e0:0f:a3:a4:
f2:8b:66:39:6c:dd:9a:ec:71:d5:0c:e6:11:d2:cb:
8e:5c:6f:b3:65:b6:66:39:0b:66:31:3f:5b:18:f1:
9a:0d:c2:07:74:76:71:d8:81:df:47:ce:97:e9:c0:
d5:63:f2:de:17:73:b7:34:0a:07:4c:85:51:34:ad:
37:cb:e6:bc:01:0f:83:0b:ec:49:5d:43:43:d3:4f:
2c:c9:ef:f8:dc:ea:82:3b:62:02:74:c9:bd:da:ea:
71:52:70:b0:49:29:ba:a9:e4:4d:8d:dc:1f:3e:78:
d3:d5:28:af:e6:e1:e0:61:20:3f:15:db:af:be:bd:
1c:62:8a:6a:be:af:02:3c:e1:91:16:8c:ef:d4:9c:
8f:35:2f:67:26:a1:c3:cd:70:62:66:91:3e:a0:be:
d6:2e:4f:ff:30:e2:85:6d:c9:72:5d:1b:5b:ca:ac:
a0:9c:83:41:41:34:02:6b:d5:a6:18:ad:f5:20:46:
73:3b:3f:ef:a5:68:1d:a8:9c:ba:63:da:01:d6:91:
3c:b7:e1:49:78:c1:f2:74:10:69:0a:62:2b:c5:7b:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:38:E8:02:7C:B6:33:26:B4:B3:27:10:10:B1:A3:7D:4C:71:A2
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:83:c8:64:64:a2:3e:41:76:78:2b:9e:a4:53:e1:27:ac:31:
10:17:bf:d3:31:6d:e3:ab:f8:77:84:f3:dd:d0:57:ec:0f:5e:
b1:32:d6:7f:82:e1:36:8b:9a:63:0b:9c:cc:a5:33:9e:10:1e:
64:cc:75:31:e2:83:35:65:35:3f:d1:11:5e:76:d5:5b:a2:30:
ea:18:00:cf:60:e1:56:b3:50:ee:94:90:b6:05:69:e0:a8:c4:
f4:81:2c:eb:9d:1d:d6:31:f1:6c:2e:8c:e4:c7:c3:87:e1:74:
af:e2:cf:04:98:8a:3a:8e:c1:91:7a:68:52:fb:b9:58:27:cb:
aa:71:ae:02:bb:9b:d0:89:5d:76:c0:ce:b9:22:31:3f:34:3f:
8c:55:b9:98:83:63:2f:66:23:4f:2c:fa:95:9b:92:85:a3:54:
fa:f7:7c:d8:ef:89:d9:88:28:d0:d0:56:9b:e7:75:e7:b1:97:
72:cb:77:b9:35:cf:0f:b0:62:3d:8e:35:79:24:fe:b1:4f:96:
86:36:f4:2d:b3:83:b9:94:29:47:d5:1b:b0:04:b6:85:83:14:
fb:61:77:5f:6f:12:bc:84:c0:e8:63:6d:a0:ee:7c:d2:70:7f:
6d:61:87:bf:58:f9:97:ac:f4:63:69:f4:7f:53:0f:7c:99:ec:
38:11:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:38 2026 by rpki-client