Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: Mm7nbr6MdEf4TaJHtgr4T+DdJde8riwPxHAgRBB1f4s=
Subject key identifier: E8:1B:FE:2E:A0:71:1F:DC:E8:BB:94:7F:F0:76:0B:7A:2D:4F:C3:54
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019FAB6322B671989927BCF58C1532B746C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 05F7
Signing time: Wed 29 Jul 2026 01:00:28 +0000
Manifest this update: Wed 29 Jul 2026 01:00:28 +0000
Manifest next update: Thu 30 Jul 2026 01:00:28 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: RavFLWIyb9Fg5RgMwizb/HGyIuCYZNY9fY81YtzVNXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:22:b6:71:98:99:27:bc:f5:8c:15:32:b7:46:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jul 29 01:00:28 2026 GMT
Not After : Jul 30 01:00:28 2026 GMT
Subject: CN=e81bfe2ea0711fdce8bb947ff0760b7a2d4fc354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:4a:63:f8:36:07:19:cd:e2:61:b5:fc:b0:
c1:60:bc:f6:67:69:f7:31:d7:5b:86:6f:d6:0a:f4:
49:b3:74:df:b0:fd:a1:5a:08:c8:65:cc:15:47:c4:
92:ce:20:2a:5f:0a:82:5c:d8:d4:75:25:e1:69:a6:
9f:b6:73:25:3c:d0:2a:26:be:15:06:f6:c8:78:81:
98:30:a3:10:97:4d:96:7c:ea:80:c9:7d:e4:c8:96:
1c:4b:35:84:87:86:e7:7d:71:c5:69:29:81:ed:3c:
89:24:37:35:ca:e3:9e:f1:3c:90:1a:24:96:e1:09:
2b:fa:0c:34:09:ed:d8:50:aa:a7:2b:0f:07:dd:71:
ce:0b:ad:98:50:e0:de:0b:5a:03:90:71:ca:ca:4b:
e6:5b:03:a9:ea:68:c5:11:90:99:c7:64:6c:17:2a:
3a:59:85:6d:c0:f7:7f:ea:de:bb:ed:81:0c:de:b6:
ab:c3:d6:43:f8:cc:9f:f9:c4:6d:0d:b3:fd:bf:47:
26:31:7f:30:bf:99:be:96:40:ce:ab:26:d2:91:83:
e4:56:20:02:b8:03:09:b5:5e:0e:de:24:37:b6:90:
a7:35:e2:6b:76:4f:9e:40:30:8a:3c:8b:a6:78:88:
55:b6:90:bd:21:43:d9:8f:99:2c:28:44:34:46:52:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1B:FE:2E:A0:71:1F:DC:E8:BB:94:7F:F0:76:0B:7A:2D:4F:C3:54
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c4:21:b6:e6:20:82:a9:a8:6d:ee:e2:d1:f8:65:a7:d9:be:
d0:6d:1c:2b:33:76:51:0c:35:0f:d5:4a:5f:54:d3:a5:63:78:
11:05:12:32:bb:99:72:e1:9b:6d:09:8e:d6:de:77:2a:cb:57:
91:8b:10:03:7d:eb:48:d8:83:73:ac:4f:6b:1c:92:b3:fc:d9:
78:6d:69:e1:63:8c:55:0b:1f:b2:b1:63:0b:98:a0:d8:7b:94:
31:87:34:e3:d1:b6:22:92:74:69:fe:c2:63:0b:b6:35:95:cf:
97:d4:bd:a7:6a:44:22:cf:f9:8a:7a:f2:47:ce:7d:21:d8:ab:
84:20:21:3d:01:a3:8c:0a:da:ad:63:bb:43:e6:77:27:80:5d:
94:2c:2d:b6:85:6f:bf:8d:60:03:25:49:73:8e:9e:24:85:8b:
00:d2:e2:c1:16:73:ed:96:64:8b:d4:e5:2a:99:16:7d:a0:e3:
8c:48:a7:9c:58:30:3c:7f:59:dd:24:c3:7d:e1:1a:87:3b:84:
6c:9a:0e:2a:91:87:7e:d8:61:92:9f:32:e8:07:ef:b2:48:74:
58:b1:f4:5e:71:3d:f9:d8:d8:6c:bf:a1:af:5b:59:35:a0:8f:
5d:72:6b:68:21:e6:83:dc:00:b2:16:80:62:20:de:a7:35:49:
ba:44:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:58 2026 by rpki-client