Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
File: nRsJrQnDR1asNA3Y6hSRqMf8toc.mft (raw, json)
Hash identifier: pC6WqpkfqSOVRwfmEL9fa+/0KjBm6MFaQ6PMArtW52g=
Subject key identifier: 30:51:47:BA:2A:50:FD:7D:2B:6D:43:F9:72:AA:D3:66:62:FC:B2:8F
Authority key identifier: 9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
Certificate issuer: /CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Certificate serial: 019FA8997C45691F4266D3ECE303BA94F010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:58 +0000
Manifest this update: Tue 28 Jul 2026 12:00:58 +0000
Manifest next update: Wed 29 Jul 2026 12:00:58 +0000
Files and hashes: 1: nRsJrQnDR1asNA3Y6hSRqMf8toc.crl (hash: NHVpzLetgkxArNItKFZtpoec8HNcdRwpAy9QrXmYUV0=)
2: yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa (hash: umwlZGJl591xCRTw6gLVt5FDOEtVDC3jktYmPDdcoaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:7c:45:69:1f:42:66:d3:ec:e3:03:ba:94:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Validity
Not Before: Jul 28 12:00:58 2026 GMT
Not After : Jul 29 12:00:58 2026 GMT
Subject: CN=305147ba2a50fd7d2b6d43f972aad36662fcb28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:75:84:a1:64:a1:30:07:4d:a8:14:9b:62:
e9:eb:b4:44:31:0e:51:ac:c5:23:8a:1e:e4:1c:45:
27:f2:35:36:0b:25:c4:4d:b8:61:ba:7b:63:25:08:
26:48:9c:a9:da:2d:07:9c:f4:f9:ab:38:65:e3:f2:
67:11:59:34:d1:3d:92:8c:73:bc:0e:f8:e9:2e:1b:
d0:81:b0:5c:ca:85:47:96:77:1b:8d:64:15:7b:03:
2d:9f:dc:e5:c5:00:fd:39:33:96:11:91:f5:1d:e0:
09:7f:46:be:1c:c3:cf:77:9d:60:7a:93:d2:d6:bd:
12:4b:7c:24:63:da:23:bf:d0:7c:ac:02:b9:8a:c2:
a0:20:3f:1c:df:ba:02:01:d1:0f:6a:38:c8:0e:83:
e3:49:be:67:96:58:68:5f:cc:31:5d:5c:36:17:30:
35:3b:5b:01:6c:84:b1:9c:42:90:32:36:09:bd:b6:
b7:1e:61:da:e1:8f:f9:9d:84:39:bb:92:0a:62:b2:
6a:0c:fa:bd:a1:ea:9c:eb:81:10:df:d7:2d:43:ec:
54:7d:ae:41:01:81:4d:21:7f:7a:d9:6d:6f:29:5b:
c4:6c:37:6b:d1:17:d0:f5:96:b4:71:ca:cf:ed:0e:
81:ad:65:ab:74:24:cf:95:c2:76:41:43:2e:2b:af:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:47:BA:2A:50:FD:7D:2B:6D:43:F9:72:AA:D3:66:62:FC:B2:8F
X509v3 Authority Key Identifier:
keyid:9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:94:e7:91:35:34:a7:e6:20:c3:bc:ab:1d:23:5a:a2:5f:38:
bb:42:70:00:f2:5d:28:8a:73:18:34:df:e0:c7:9c:6e:f1:81:
71:63:39:73:cc:3a:aa:46:67:c0:36:b7:b0:4d:60:79:d2:a6:
4d:e3:29:ce:71:9f:d7:53:57:c9:fd:0c:bf:c1:c8:6e:1a:a4:
09:8f:2b:8a:c4:27:a2:d1:aa:c1:7d:88:81:a3:f8:3e:ba:3f:
98:8f:70:78:43:62:81:d2:50:38:4d:ca:3a:60:b3:df:00:28:
25:fd:20:aa:db:5a:7f:fe:34:8e:39:e4:b8:45:51:26:27:0b:
1f:6e:3f:e4:7d:b7:1a:80:00:7f:76:11:33:3b:cc:db:10:b6:
4f:27:88:62:7e:5a:fc:72:02:3e:39:ef:99:21:75:91:1c:99:
b8:5a:72:0e:21:d3:a5:68:36:d6:4f:16:d2:71:29:77:fd:12:
39:d2:99:16:ee:f2:36:86:d3:61:ad:12:02:35:12:b9:20:f2:
ac:2d:44:2d:7f:4b:e5:2a:39:64:22:74:cc:b0:07:ba:54:af:
91:e9:a5:5d:08:29:2e:0a:4b:7e:e9:e6:d9:48:a4:13:29:58:
5e:41:50:46:05:67:70:51:d5:31:33:ed:ab:83:a1:c2:04:c0:
aa:5d:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:59 2026 by rpki-client