Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: KTlFupRqsfs6MaJqeHDPQusaAMHVmqKjGd2tCXZAR4c=
Subject key identifier: F1:87:A3:2F:A2:F5:B9:80:0E:A2:2F:C1:88:A6:A4:90:67:A2:89:DE
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 019FAC082AF1F8A9399176A2C29F7DBF5669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0786
Signing time: Wed 29 Jul 2026 04:00:44 +0000
Manifest this update: Wed 29 Jul 2026 04:00:44 +0000
Manifest next update: Thu 30 Jul 2026 04:00:44 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: rr+2NSzIeukEMPg3YKoXe39GX8kgtVjba/A3N1qU2co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:2a:f1:f8:a9:39:91:76:a2:c2:9f:7d:bf:56:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Jul 29 04:00:44 2026 GMT
Not After : Jul 30 04:00:44 2026 GMT
Subject: CN=f187a32fa2f5b9800ea22fc188a6a49067a289de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:f3:30:3e:a4:51:fa:7c:7e:29:72:aa:51:
cd:0f:61:8a:d9:12:68:ba:22:66:6d:d8:52:36:27:
0b:63:b3:4b:7b:b0:b2:92:2f:bb:40:f7:92:bc:a5:
31:1e:14:67:f6:3d:ad:e1:1d:b5:bb:56:61:68:49:
b3:9d:92:71:49:1b:85:fb:ca:a4:46:6f:96:41:0c:
af:ec:70:2a:cc:ed:8a:30:2c:b1:25:75:5f:1a:da:
3e:4a:d5:b2:7e:0b:b6:00:01:24:ba:3e:f0:0e:a4:
18:b5:5c:a3:ec:3f:75:81:d3:02:dd:36:3b:66:36:
91:19:d4:a9:ea:4f:ef:99:65:69:5e:1d:5b:b3:28:
e4:9d:8a:a1:91:08:03:6a:d4:9a:3b:f4:f2:d6:37:
a4:0a:eb:e4:cb:e7:23:f8:e7:57:99:bb:75:c9:79:
89:fc:ed:82:0c:6f:28:97:75:5b:8a:cc:eb:7e:db:
31:95:51:ee:93:10:15:3f:59:04:cf:ea:45:ae:e0:
da:40:36:0a:34:87:7f:62:d6:17:98:98:41:87:39:
07:e4:8c:42:58:bf:89:6e:be:6d:40:06:f8:e8:35:
90:01:77:2b:22:fd:c0:71:68:6e:1a:c0:90:5a:57:
cd:cf:ef:32:a4:a7:7f:05:27:fa:f3:6a:a2:b1:a0:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:A3:2F:A2:F5:B9:80:0E:A2:2F:C1:88:A6:A4:90:67:A2:89:DE
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:55:9a:86:12:60:ce:ae:c5:15:a3:a8:c9:ab:3a:5b:c6:
37:5d:14:3a:04:f5:8b:b3:69:46:b1:c1:11:5e:ba:f3:36:89:
b5:8d:98:d5:52:17:5b:0c:1a:5e:9c:70:52:29:28:e6:df:a2:
4f:94:8c:1b:38:2c:d6:f8:95:3e:0d:dc:a4:25:40:10:ff:75:
70:af:ff:b7:a5:4e:1e:3c:1a:01:a0:84:f9:0a:f9:6d:82:0f:
9b:b0:87:3f:c2:6f:f7:21:12:a2:b9:4d:d2:3d:6d:33:38:bd:
60:dc:7e:b6:bc:ab:d7:3c:cf:92:cd:b0:c6:d5:6a:6e:79:14:
d1:2e:3c:ea:8c:fc:0b:73:84:6d:ac:d8:d0:f2:74:02:e0:1d:
b4:74:39:97:7d:f1:e3:16:e9:f4:51:af:7b:aa:9b:0b:4a:84:
00:bb:f8:28:05:8b:ef:b9:5f:7e:8f:f8:76:71:00:21:90:b4:
44:ab:04:5f:4a:f4:53:e5:00:a0:a5:13:74:06:ec:e6:44:16:
b7:53:c0:63:53:4d:b5:f6:ed:e8:c7:57:6e:6f:71:71:42:2e:
cd:a1:d9:05:df:81:89:86:15:f3:ac:6c:bd:39:cf:e9:10:88:
53:99:7a:b8:ad:64:eb:30:af:81:8c:27:bc:cd:44:a3:48:54:
8b:14:ea:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCCrx+Kk5kXaiwp99v1ZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMTE2OGI4NTcxN2ExNDY2NjAwMWI1YjJmNmM5MDgwMTk5
N2RlMDYwHhcNMjYwNzI5MDQwMDQ0WhcNMjYwNzMwMDQwMDQ0WjAzMTEwLwYDVQQD
EyhmMTg3YTMyZmEyZjViOTgwMGVhMjJmYzE4OGE2YTQ5MDY3YTI4OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJfzMD6kUfp8filyqlHND2GK2RJo
uiJmbdhSNicLY7NLe7Cyki+7QPeSvKUxHhRn9j2t4R21u1ZhaEmznZJxSRuF+8qk
Rm+WQQyv7HAqzO2KMCyxJXVfGto+StWyfgu2AAEkuj7wDqQYtVyj7D91gdMC3TY7
ZjaRGdSp6k/vmWVpXh1bsyjknYqhkQgDatSaO/Ty1jekCuvky+cj+OdXmbt1yXmJ
/O2CDG8ol3VbiszrftsxlVHukxAVP1kEz+pFruDaQDYKNId/YtYXmJhBhzkH5IxC
WL+Jbr5tQAb46DWQAXcrIv3AcWhuGsCQWlfNz+8ypKd/BSf682qisaAAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGHoy+i9bmADqIvwYimpJBnooneMB8GA1UdIwQY
MBaAFJ8RaLhXF6FGZgAbWy9skIAZl94GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUt
ZjQyMTliZWRkYjM3LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUtZjQyMTliZWRkYjM3
LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOJVmoYS
YM6uxRWjqMmrOlvGN10UOgT1i7NpRrHBEV668zaJtY2Y1VIXWwwaXpxwUiko5t+i
T5SMGzgs1viVPg3cpCVAEP91cK//t6VOHjwaAaCE+Qr5bYIPm7CHP8Jv9yESorlN
0j1tMzi9YNx+tryr1zzPks2wxtVqbnkU0S486oz8C3OEbazY0PJ0AuAdtHQ5l33x
4xbp9FGve6qbC0qEALv4KAWL77lffo/4dnEAIZC0RKsEX0r0U+UAoKUTdAbs5kQW
t1PAY1NNtfbt6MdXbm9xcUIuzaHZBd+BiYYV86xsvTnP6RCIU5l6uK1k6zCvgYwn
vM1Eo0hUixTqJg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:05 2026 by rpki-client