Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: JREi0t8qEt775BpdhuCDZlMnwpeoe2hg64EK5ZLnLDw=
Subject key identifier: 9F:EB:AB:DC:A4:3C:85:B5:47:C4:9C:AE:1A:F2:18:65:E4:06:CF:3B
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019FAA510B8327C7B5257CF1A02949E2A192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 20:01:05 +0000
Manifest this update: Tue 28 Jul 2026 20:01:05 +0000
Manifest next update: Wed 29 Jul 2026 20:01:05 +0000
Files and hashes: 1: KJhzEQAWLMV6-n64J1IGurNPXJA.roa (hash: CtHxiuCIKbij596MTURQ2oG9yHp4BtbuHJNvFD8eVFU=)
2: M8HxuDTjeppXENHYtsmDwzIxfqg.roa (hash: ehN4HCrYdAsRJz9J+AoM/g7LUsIA+10CKLm98CDchvI=)
3: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: oBiQLUFuJbMzmZCmulXxIJ3KYTv7XGvlUwB/h9p9fE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:0b:83:27:c7:b5:25:7c:f1:a0:29:49:e2:a1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jul 28 20:01:05 2026 GMT
Not After : Jul 29 20:01:05 2026 GMT
Subject: CN=9febabdca43c85b547c49cae1af21865e406cf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:12:a9:11:9b:e7:c0:ad:98:23:26:3f:d2:
08:05:03:09:0a:d4:30:27:67:ab:68:83:bd:84:24:
8d:b0:d1:36:8c:b5:a7:13:9e:d8:49:f9:99:df:c4:
e7:dd:59:d1:73:28:f5:a5:d0:ef:1f:d5:17:32:05:
e6:43:ed:d1:bd:57:51:ba:3f:28:54:e4:9b:b7:a1:
93:bb:c5:09:67:21:ff:d6:36:c9:98:08:34:8b:f9:
de:a4:17:8b:7c:cd:aa:41:5c:68:22:59:b1:f5:95:
b5:e4:18:f9:c1:2a:cd:a9:a2:0b:69:5b:18:64:44:
97:9c:47:9d:ef:9e:fb:eb:63:1c:f6:f6:54:b7:4b:
b9:e2:a0:0a:5b:cd:84:47:2d:f7:9d:fc:30:4c:7b:
89:85:7f:0d:c0:99:92:c4:b8:ca:b5:22:41:53:9e:
6d:ba:b7:2d:bf:82:a0:a9:5c:30:0f:57:fc:04:b4:
1f:fe:d4:7e:01:87:82:9e:62:7a:20:23:3d:bf:d8:
7c:0b:bc:6c:6d:e9:c3:1b:09:3f:25:3a:a4:b8:00:
43:f4:f7:e0:56:e5:84:57:56:18:64:e8:f8:13:a3:
e3:52:8b:06:f6:3c:be:73:01:95:b9:8a:69:64:47:
93:d9:cc:e8:cb:02:62:85:25:ef:a1:de:e0:17:c0:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:AB:DC:A4:3C:85:B5:47:C4:9C:AE:1A:F2:18:65:E4:06:CF:3B
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:9e:44:2a:21:88:30:a6:d8:55:3d:ea:77:e2:39:a6:be:
96:61:50:b7:11:20:cb:ad:07:2f:b4:d7:1c:4a:ea:74:a5:2b:
37:38:7a:10:4b:18:44:48:7d:29:9d:ec:82:6d:ec:75:46:84:
3d:12:99:f7:3a:6e:16:87:12:08:a1:7e:9d:7e:91:8f:a0:a7:
8c:43:54:9b:5a:c9:93:7e:db:a5:6f:6b:e9:ca:cf:cd:2b:25:
d1:07:af:b3:fc:1f:42:1f:0b:6e:bf:43:63:55:8a:b7:c2:46:
00:dd:2c:58:d6:f3:90:4e:9c:1e:9d:45:8e:18:35:4e:a6:12:
12:ea:47:13:16:32:b1:45:d3:fb:84:b3:d0:eb:78:20:e5:36:
e8:3e:a0:7f:fe:51:da:ec:61:18:6e:16:9b:e4:7c:f4:32:36:
a5:da:11:e5:3e:8d:b0:6f:12:4e:8b:4b:b8:ca:58:8e:b7:fc:
84:b7:9d:22:08:d0:90:4e:ca:ac:53:13:0c:1f:6d:05:22:bd:
0b:68:6c:fe:fc:a5:d9:80:48:8d:76:07:43:da:cb:b3:dc:7d:
79:c9:90:ef:24:05:e5:0e:3d:62:07:57:69:bc:04:31:ad:77:
35:98:42:8f:db:98:cd:5b:ad:01:c9:be:d1:6e:9e:12:0b:e4:
67:9f:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:11 2026 by rpki-client