Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: /WAOxvBA79uJif/fm8Y+JMAN3vNNsr2a0G3T7gQPY1E=
Subject key identifier: AF:E8:CC:E1:AF:02:B4:29:F6:96:7F:D9:FF:CC:8F:FB:A2:85:0D:AB
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019FAA50E9EC92F0555898C1E9E215D2112E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 10A9
Signing time: Tue 28 Jul 2026 20:00:57 +0000
Manifest this update: Tue 28 Jul 2026 20:00:57 +0000
Manifest next update: Wed 29 Jul 2026 20:00:57 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: wgndw2zxxkufS0kEe07Q2ePWBkTolJ4risqihXZcJ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:e9:ec:92:f0:55:58:98:c1:e9:e2:15:d2:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Jul 28 20:00:57 2026 GMT
Not After : Jul 29 20:00:57 2026 GMT
Subject: CN=afe8cce1af02b429f6967fd9ffcc8ffba2850dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:d0:65:3c:3b:d8:d7:25:49:ae:14:c2:a0:
84:b0:a1:35:7e:e2:22:0e:90:65:e6:76:2e:f1:11:
f5:fc:99:52:77:e1:ed:ab:32:ee:be:2f:90:d6:bc:
70:ee:21:7d:3c:50:26:88:91:7b:57:a0:79:4e:ff:
96:ac:ae:f5:45:ed:33:6c:23:4b:f2:53:d5:80:2b:
fe:cc:bc:10:0b:31:f4:6d:c9:09:4f:d1:40:5d:f2:
c4:2e:a0:b2:81:50:fd:b2:c8:31:03:8e:56:6a:cb:
58:b0:fc:dd:49:2d:78:76:95:d1:f7:53:c8:79:2c:
17:c7:27:ef:25:d9:a5:9f:8c:ed:e5:03:67:a9:91:
3c:f4:3b:ff:19:cd:81:6b:d3:4f:06:71:af:b1:b0:
bc:61:2a:49:96:04:0e:51:55:a1:88:3a:90:4a:93:
7e:23:5b:4c:01:27:cf:d0:cf:4b:46:2a:6c:be:68:
cd:55:5b:b3:69:f6:95:ac:78:93:55:dd:89:94:dc:
51:b6:f4:a9:8c:0e:3a:c8:9d:c5:1b:53:1e:d7:54:
b3:58:d1:b0:be:bd:1f:fa:f7:b9:ad:03:49:78:b0:
ba:d8:d9:05:1e:00:6c:ff:af:4f:14:bb:f9:59:9d:
ce:14:09:ad:32:6e:04:16:c6:8e:d9:66:c6:5e:e5:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:CC:E1:AF:02:B4:29:F6:96:7F:D9:FF:CC:8F:FB:A2:85:0D:AB
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:74:88:dd:bb:85:c7:5e:13:f4:64:38:2d:4e:d2:38:8c:e6:
0e:1b:8e:fd:56:8f:4e:5d:85:d5:20:95:73:0a:08:9e:f3:65:
89:cb:a8:20:f2:99:3d:3e:81:b4:91:fa:b3:e7:29:99:6d:4f:
55:b8:c9:c5:f6:f0:1d:a0:e2:7c:5e:a0:1b:f0:ec:2a:c7:13:
03:e2:4a:8c:4c:1a:8b:f2:e7:ac:27:81:3a:15:be:5e:41:39:
b5:6c:6c:69:c2:b1:3a:e7:44:57:20:40:36:05:db:ae:f3:e9:
16:59:59:c6:01:11:62:fa:32:19:d6:b1:d5:74:f5:fc:94:e6:
65:e5:9b:c5:eb:48:7b:cf:56:5e:ae:ae:d0:97:64:56:57:a7:
76:01:5e:3a:2e:42:51:7b:c3:f3:02:0a:7e:5d:42:03:3c:3a:
ff:3c:e2:85:9d:75:ee:91:f4:a0:91:45:2a:0f:0a:5f:fe:7d:
25:ee:42:16:d5:d1:c5:53:fe:7e:d8:e9:ab:3d:38:ca:75:eb:
78:0f:d5:9b:52:5a:7b:03:92:c2:c4:ca:f4:88:23:d8:5d:7b:
55:12:49:9c:82:72:ba:b1:88:4d:bf:d0:88:f1:64:6d:e5:ef:
d2:d5:fe:4e:93:21:6b:22:f5:c5:1a:2c:49:dc:6b:67:35:7a:
54:21:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:30 2026 by rpki-client