Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: /xBVmH1Uv/ICzxe7N76wi1tVr9RfVe7XdxudR5Cox2k=
Subject key identifier: 00:A5:69:0E:6C:A6:6D:AF:07:F6:1E:42:94:A2:E1:5E:63:41:46:A6
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 019FAB9A08B682734139ACC92DC44E6068CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0C87
Signing time: Wed 29 Jul 2026 02:00:26 +0000
Manifest this update: Wed 29 Jul 2026 02:00:26 +0000
Manifest next update: Thu 30 Jul 2026 02:00:26 +0000
Files and hashes: 1: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (hash: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: mwB0N3EYRLbGFwMrzzNDgz0MMhe8Cy5Cxy+WyVmwAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:08:b6:82:73:41:39:ac:c9:2d:c4:4e:60:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Jul 29 02:00:26 2026 GMT
Not After : Jul 30 02:00:26 2026 GMT
Subject: CN=00a5690e6ca66daf07f61e4294a2e15e634146a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:9f:a3:16:4c:83:4d:3e:c0:fb:dc:46:e2:
1d:62:bd:2d:7a:ee:8f:b8:25:df:06:88:80:a4:e4:
65:e2:70:79:ab:10:a9:f2:82:e9:e9:99:1d:68:91:
51:01:66:1a:9b:f1:65:40:0f:ab:3d:d7:4d:8e:dd:
35:b4:59:ef:df:13:98:b1:84:3f:96:c3:df:ca:4a:
15:6b:c4:7c:dc:68:46:49:99:3a:81:9b:84:d9:4b:
20:a9:ba:df:0b:b6:fc:9d:77:05:f1:06:d0:75:89:
d6:94:84:da:59:20:39:c9:1e:bb:82:91:37:a0:12:
43:aa:8c:5d:8e:60:21:1e:ac:b6:1d:d5:81:e1:26:
53:09:b7:87:c9:b0:e5:3a:90:58:ba:a2:9f:59:35:
57:bb:43:e9:62:7e:14:31:00:28:32:75:46:0b:1b:
da:3e:13:40:ae:46:cf:f9:50:59:3b:df:3d:b7:96:
84:4d:33:0c:da:60:fe:ec:f2:e9:2e:35:88:d0:32:
0f:cb:41:e7:e0:53:57:83:9f:1c:a3:bd:07:8d:5d:
3b:dc:42:95:c6:76:82:3f:e9:d8:c0:49:7d:6a:87:
dc:44:ce:77:91:96:6d:4a:aa:5c:64:a6:bf:0b:5a:
65:c5:15:6c:c5:a7:31:16:78:6b:4a:e0:12:61:b2:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:69:0E:6C:A6:6D:AF:07:F6:1E:42:94:A2:E1:5E:63:41:46:A6
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e8:fe:05:e7:50:ce:48:85:7e:e9:42:f2:98:71:b2:bd:66:
e5:ef:78:7e:f0:d5:67:b7:4e:56:df:96:f8:76:ca:a1:3f:b5:
59:c3:4a:82:d6:fc:62:c0:44:ad:e8:46:7d:f5:5b:37:22:b1:
cf:83:95:56:90:a2:80:32:28:2f:9c:5e:40:f1:92:6e:91:35:
0b:1c:01:9e:ad:ec:ff:aa:4a:1a:41:ed:6e:1b:84:a6:b5:b0:
c1:99:67:49:c7:47:25:6f:a5:8a:ce:5c:95:d9:45:44:ec:9a:
f3:8d:c8:67:ac:16:84:b3:36:a2:c6:40:c2:7b:72:29:ac:4d:
9d:2d:ee:4a:eb:5a:7d:b8:68:2b:85:5d:f4:00:1d:c9:50:d9:
f3:05:a0:75:e5:aa:22:ed:9e:39:b3:1f:15:64:e8:5a:fa:b0:
3c:18:1d:67:a9:ac:4e:75:fe:6e:f1:6b:a0:80:0a:27:2f:8e:
f6:12:2a:81:13:de:e2:04:6e:23:d2:8a:6d:fc:05:41:0a:74:
6b:82:5f:2b:90:12:49:45:8d:9c:6b:94:f4:e7:f4:c2:f5:ab:
94:a7:5c:1c:59:7e:c1:e5:e9:38:37:a8:b3:52:dc:62:09:c0:
e0:ea:4f:13:a3:83:91:62:78:f7:8d:c6:63:5d:79:95:59:09:
54:c7:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:52 2026 by rpki-client