Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: FgbJ+XVq4djmbBGGJJci0rKxDB1Ty35x6rbjAeYr/ZE=
Subject key identifier: 4B:6D:3C:CB:BE:23:5B:25:AC:63:F8:4E:6E:CA:36:90:CB:52:98:A5
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019FABD14E424BB1A9D95195CD2F565D9941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 10A8
Signing time: Wed 29 Jul 2026 03:00:48 +0000
Manifest this update: Wed 29 Jul 2026 03:00:48 +0000
Manifest next update: Thu 30 Jul 2026 03:00:48 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: tpvKQOE10VosgDgKfFm+zrF2buh1UCM5cZ1mLUb2ETM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:4e:42:4b:b1:a9:d9:51:95:cd:2f:56:5d:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jul 29 03:00:48 2026 GMT
Not After : Jul 30 03:00:48 2026 GMT
Subject: CN=4b6d3ccbbe235b25ac63f84e6eca3690cb5298a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:ca:80:ce:73:de:6d:7c:50:09:20:8d:e9:
4c:35:b7:3a:b4:74:3c:2c:2b:e8:e8:3a:cb:ec:2e:
98:ec:25:ec:4b:43:86:fa:b9:5f:cd:72:a2:98:39:
59:8e:a0:12:ef:9a:8f:01:70:40:0b:79:99:45:c7:
a8:b1:b9:0a:aa:8a:c1:e9:e1:63:d6:77:c9:8e:ca:
d1:6b:ec:08:87:a1:85:87:0e:92:da:c9:88:31:92:
61:04:75:44:d7:91:a8:08:8a:0a:63:46:8c:58:81:
bd:1e:a7:96:fc:91:db:d9:ff:47:db:f7:54:c7:01:
c6:35:b0:40:fb:bb:2a:73:10:58:be:a8:e9:f8:44:
be:b0:a7:ce:d1:be:e9:7c:97:18:a0:25:9d:62:ba:
34:a2:8d:7c:fc:df:a2:04:31:7d:56:ba:c2:33:bf:
44:a4:d5:41:99:61:d2:9b:35:f1:fc:1d:ff:bf:3d:
bd:00:81:ff:eb:e6:a7:46:7a:10:34:32:c5:94:aa:
0f:9d:be:a2:52:7d:92:31:ab:d1:42:78:a6:77:45:
fd:70:ee:11:65:4c:3b:9f:01:71:09:a5:b7:3d:01:
da:fc:cb:1e:41:7c:6d:23:f6:85:6d:52:2e:60:10:
67:a6:a9:71:43:d2:bc:cb:a3:6a:0f:e7:3a:24:1e:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:3C:CB:BE:23:5B:25:AC:63:F8:4E:6E:CA:36:90:CB:52:98:A5
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c9:10:81:47:f2:f6:6f:a2:63:9d:46:aa:33:14:32:f4:f6:
46:21:f8:d9:56:bd:ff:db:2d:4e:e6:6d:ac:58:58:a8:d7:cf:
38:4d:65:6d:be:59:1e:da:4c:ff:80:fc:68:b0:7f:0f:9d:d9:
8a:2e:bc:14:52:39:46:c7:6c:0a:8b:ff:65:83:07:00:d6:ca:
65:87:b8:5d:a1:a2:c5:4f:50:ca:3f:2e:f1:fd:03:3f:34:63:
76:90:f6:85:b5:04:34:a8:22:4e:d0:b5:df:a1:bc:ff:e8:c3:
19:40:31:13:6f:0a:4a:e4:de:fc:95:5e:8e:46:05:a3:75:1e:
2a:4a:65:68:c7:23:33:bd:ed:87:21:99:86:05:42:9f:19:84:
a6:a6:7c:42:d5:01:09:76:4d:ca:c2:f6:91:99:41:06:aa:0b:
a0:6b:e2:b1:a2:71:31:9a:a8:25:d7:40:e8:91:ef:89:0f:7f:
38:ca:90:5f:bf:13:31:80:ae:81:ec:ba:df:6e:d4:7c:a7:31:
df:1e:48:73:7e:0a:f3:c5:38:b1:54:5b:2a:ff:5d:3b:d5:64:
b6:7f:9f:48:c1:8c:3f:c3:02:e9:03:36:c0:65:cd:ce:6c:03:
b3:c3:a2:0f:d6:63:9b:91:c2:a6:d9:9e:6e:a4:5f:89:cb:47:
e4:c7:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:11 2026 by rpki-client