Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: YmESyi9Ye87YtT/Iq8WiGQBmOGHWhV22XaNG+iEjKxI=
Subject key identifier: 66:D6:B5:DE:23:6C:77:CC:54:B0:00:C2:32:4C:34:51:1A:D7:46:B9
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019FAAF619EF6FC85CF3A4ABED210090E3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1922
Signing time: Tue 28 Jul 2026 23:01:22 +0000
Manifest this update: Tue 28 Jul 2026 23:01:22 +0000
Manifest next update: Wed 29 Jul 2026 23:01:22 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: emWPvQj32Cn0Dge+WmqZWCqubtggM6x34WOkcEcrBFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:19:ef:6f:c8:5c:f3:a4:ab:ed:21:00:90:e3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jul 28 23:01:22 2026 GMT
Not After : Jul 29 23:01:22 2026 GMT
Subject: CN=66d6b5de236c77cc54b000c2324c34511ad746b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:d1:0c:4d:c2:4a:6e:37:f1:4d:d7:8d:e6:
b9:e6:af:58:99:28:03:bb:a6:da:d0:a9:a4:ff:f1:
c7:27:c2:15:f2:26:7a:70:1e:f2:db:8d:3e:48:a1:
d9:88:7f:c1:43:9f:29:e1:2c:ee:9f:9b:c5:fd:10:
8e:c8:8a:f1:e6:c4:f9:c3:b7:c1:5a:f6:33:49:ee:
b8:f1:e8:a5:32:02:63:af:25:ce:91:2f:65:6f:9d:
c4:cd:6e:aa:34:9c:20:f6:61:5b:4c:2c:29:52:ec:
87:ee:fb:00:15:7b:e4:b3:87:02:97:ec:f7:ec:11:
aa:bf:4e:7b:37:f1:af:a3:01:13:04:ba:66:7a:b2:
ee:14:23:06:0e:0e:01:a1:eb:a4:c3:04:72:f5:ac:
fc:fe:02:0a:e8:09:df:4c:cc:3a:47:aa:c7:b7:e0:
a8:99:1e:0b:c8:c3:a6:fa:1a:85:03:78:19:3f:80:
f9:40:ef:00:38:65:16:f1:f3:2d:33:ee:11:dc:28:
f8:ba:76:89:cf:5a:36:62:82:86:b3:71:36:3b:9b:
50:86:57:0c:4f:cd:97:87:4f:6e:3f:2f:5b:21:cc:
93:79:30:bb:2f:64:fb:88:91:b5:56:7b:67:8e:ca:
1c:2c:73:d3:b9:d9:fd:02:20:ea:23:33:2b:f0:8c:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:B5:DE:23:6C:77:CC:54:B0:00:C2:32:4C:34:51:1A:D7:46:B9
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:75:18:6a:e2:34:54:00:7b:77:50:2d:5a:96:3b:04:b4:56:
4d:2f:4f:0b:5a:16:6d:18:84:cd:ef:13:5b:3d:3a:95:83:a9:
70:5f:10:d6:9d:1d:c9:1e:9e:b9:08:76:20:7f:43:24:0f:d5:
47:c1:a8:43:76:d6:c8:66:e1:16:06:e0:29:b3:d1:53:ef:ca:
b6:a0:6b:c2:47:9e:2c:30:8a:84:0c:7d:4a:8b:74:c0:d0:80:
cf:a7:b4:d4:48:df:e5:49:72:04:cd:77:3b:a4:a0:2e:2e:d7:
31:32:34:2c:d6:bc:0c:6a:d6:aa:e4:c9:c7:17:4d:e1:40:8d:
c1:6a:2b:49:2e:21:0d:a8:64:83:0a:e5:a8:30:b4:e2:b8:33:
a1:11:85:56:d1:0c:d6:89:6f:f2:87:6f:00:f6:de:aa:c2:b9:
d1:aa:3d:d1:81:4f:b1:c8:89:b5:db:46:52:d7:c8:cc:14:b3:
97:ff:94:78:d3:09:1a:7b:14:c0:2a:94:21:b5:5d:db:ed:84:
a6:8f:c9:5c:e8:8c:d7:52:38:81:3c:16:e9:e7:e3:67:fd:7b:
72:29:d6:47:c6:50:19:13:b1:e1:ff:75:0d:06:7c:55:72:40:
d6:3b:0b:87:17:d0:ca:d0:32:3c:9e:50:cb:76:c1:94:f6:0c:
bb:3c:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:59:47 2026 by rpki-client