Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: NthCrJvQqjyRX5Oz+FQiqjbPxmQ4miETkRRQARvOqEM=
Subject key identifier: 8E:1E:26:F0:73:87:FC:E3:35:1C:97:99:B4:BA:B2:B9:F2:18:74:4E
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019FA90771084518DF23D43B4285897BBBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0D06
Signing time: Tue 28 Jul 2026 14:01:04 +0000
Manifest this update: Tue 28 Jul 2026 14:01:04 +0000
Manifest next update: Wed 29 Jul 2026 14:01:04 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: HC/qhbmsAH2uTXb0hxYsIwvLaPomwEBQg0S3T76umxQ=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:71:08:45:18:df:23:d4:3b:42:85:89:7b:bb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jul 28 14:01:04 2026 GMT
Not After : Jul 29 14:01:04 2026 GMT
Subject: CN=8e1e26f07387fce3351c9799b4bab2b9f218744e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:b0:a0:11:aa:39:73:3d:13:e7:39:93:96:
47:6e:b9:da:77:14:fe:1f:f6:d3:c8:df:dd:d3:fb:
20:b2:a6:c3:bf:db:70:b4:ef:54:3e:21:93:9e:8a:
dd:c9:58:93:40:41:18:8a:19:e3:78:66:7a:4d:3a:
2f:d3:de:7e:c6:72:be:12:a0:80:21:e4:69:43:e9:
d2:2e:34:a2:f3:48:ff:80:c2:d2:4e:95:e6:a5:54:
e0:c6:24:2f:30:c0:41:c6:e0:f0:48:d6:b1:df:01:
80:0e:99:8b:5f:22:6c:46:07:80:45:98:fd:10:f4:
c8:ba:ea:63:4a:52:36:35:e0:71:58:be:b0:13:62:
5f:9c:2a:75:24:d5:8b:80:d8:1b:e1:b1:38:6a:e4:
ee:dd:d8:62:c9:ad:11:4c:68:2a:05:7c:ed:1e:27:
9c:c6:c7:9a:1b:8f:48:38:ac:7e:81:77:c6:4e:6e:
60:99:19:ea:4f:15:ef:83:25:95:26:4f:42:fa:8b:
25:40:a6:18:36:d0:c1:eb:28:ab:1f:0c:ec:3b:d7:
ac:49:dc:5d:5b:e1:84:d8:14:12:bc:80:e2:0b:2d:
1e:fb:bd:24:44:e9:47:b0:38:75:64:c8:d9:67:73:
c8:dc:c2:76:17:03:67:45:0b:ca:ff:e1:5b:08:68:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:26:F0:73:87:FC:E3:35:1C:97:99:B4:BA:B2:B9:F2:18:74:4E
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:83:1d:f8:b7:94:7f:d9:3a:66:12:71:0f:c7:90:1f:15:52:
f5:a8:41:ab:19:b1:b1:8b:4f:5a:30:c6:41:4e:03:0e:b9:e3:
06:2f:f9:c0:05:6c:ed:9b:08:23:ca:58:e4:3c:84:9f:76:53:
d9:59:eb:9a:78:9f:23:f2:cf:eb:81:3d:7e:b0:40:1d:6a:ff:
a7:a4:4f:98:78:6d:76:5e:20:ea:b4:8f:3b:74:5e:64:17:1f:
d1:8c:bb:06:bb:1e:92:8c:6f:36:c7:b1:7f:57:37:b4:74:fd:
ed:fe:d9:f3:3b:42:46:5c:f9:3f:98:5f:d0:fb:a8:c3:b8:a9:
bc:a9:9a:5a:26:f2:1e:e2:63:44:0b:fb:00:c3:dc:15:c1:75:
7a:39:06:68:03:3a:a9:ea:d2:8a:73:c0:7b:2f:0e:12:07:7b:
09:28:f8:d0:13:5e:ec:6a:e4:f6:99:a7:ef:76:4c:bf:86:16:
e9:1c:d4:5a:95:d6:8c:ca:2a:bc:44:59:3f:1b:4b:56:28:cc:
a0:87:87:23:16:31:ce:ac:23:d9:20:05:c2:bb:71:84:8d:9b:
fb:75:96:28:a8:fb:8c:fd:ac:e1:02:54:e8:f7:07:8f:ed:ff:
ae:f8:13:55:dc:a4:b6:fc:db:78:44:ed:df:a7:32:13:0e:1f:
9e:81:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:38 2026 by rpki-client