Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: IxNIeerNVeBxI+GVx/n+vn9DAz0grlNpc6lVJAIRzMc=
Subject key identifier: 7B:23:11:F2:9A:38:AC:EB:59:8E:F7:C4:44:FB:36:F4:64:64:8E:F7
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019FAD1A940E31BCEC9A679DCCB7D78082F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 155B
Signing time: Wed 29 Jul 2026 09:00:27 +0000
Manifest this update: Wed 29 Jul 2026 09:00:27 +0000
Manifest next update: Thu 30 Jul 2026 09:00:27 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: 89vVGZel9c0rOEYi4gOt5opDXhP3LCrxV9i4pITeDRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:94:0e:31:bc:ec:9a:67:9d:cc:b7:d7:80:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jul 29 09:00:27 2026 GMT
Not After : Jul 30 09:00:27 2026 GMT
Subject: CN=7b2311f29a38aceb598ef7c444fb36f464648ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:56:8c:ae:57:c0:de:d2:b2:9a:01:c3:ff:
60:20:93:08:5b:7c:25:70:55:68:d6:ee:a6:1f:4a:
ba:67:5e:d9:e1:9c:77:6c:04:bd:19:5e:20:8f:d7:
6e:d3:52:c4:d2:aa:1b:38:80:48:83:76:10:0f:e7:
3a:10:a4:b5:86:4e:da:4d:c0:2b:46:e8:ce:a4:53:
86:44:1e:8a:7a:2f:f7:89:db:02:25:dd:32:cf:cf:
51:6d:3b:e3:44:25:15:63:0a:e1:39:1d:1d:b5:97:
c7:ee:a8:08:42:37:97:a8:ab:e0:65:de:80:9c:0c:
7e:53:f8:f7:f7:5b:42:85:d2:54:59:c9:47:f7:c8:
f0:53:a4:c3:00:ba:82:e4:de:de:15:be:4e:87:86:
7a:e4:1e:46:98:b6:af:e7:8d:5c:d4:13:36:1e:77:
6f:6c:4a:8a:f4:91:d6:3e:07:b4:13:dd:de:9b:c5:
21:47:73:5f:6c:7b:7a:88:25:3d:7f:64:9c:23:53:
12:1d:a5:94:c1:78:59:3b:4e:80:d8:f1:77:67:cf:
61:8e:ad:4f:9c:e2:16:6c:5a:dd:5f:15:e0:66:ef:
d7:b1:7c:51:a7:b3:24:bd:1f:bf:7f:9c:77:fa:8b:
15:59:8e:ea:1b:4a:e9:58:83:12:81:b6:8b:80:73:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:11:F2:9A:38:AC:EB:59:8E:F7:C4:44:FB:36:F4:64:64:8E:F7
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b3:ba:c8:9e:40:43:08:5a:89:77:61:7b:bb:d4:57:e8:5d:
c0:54:64:c0:cc:4a:24:94:35:2c:a9:20:0d:8e:36:3e:62:73:
df:85:50:cd:97:e6:29:1f:30:fe:9c:40:1b:eb:33:a7:d5:f0:
7c:37:a6:0f:01:4c:7a:02:53:2d:1a:91:80:93:62:15:a3:ac:
a3:3c:3d:77:ca:30:f4:04:98:a4:45:33:68:4b:90:f6:50:46:
1d:3c:66:cd:e7:69:2e:d3:56:3d:46:89:d5:2a:1f:5a:78:f1:
4a:7b:56:5b:65:a1:12:d6:4e:d0:c7:26:4d:7b:74:3e:e7:2d:
79:38:2c:26:71:e7:e7:64:c2:23:1c:4a:f5:8f:45:99:40:ca:
8f:01:a9:3a:87:fe:a2:ad:7f:8f:e6:c0:9a:6c:be:4d:8c:fa:
22:60:e6:0a:fe:9d:f9:22:95:2c:6e:fd:50:28:46:78:58:05:
8f:81:e1:7c:b1:d9:9d:66:3f:fd:26:a7:b7:d4:43:f6:9e:31:
51:78:c7:d8:28:5b:1c:6f:04:4a:1b:e4:99:16:f5:ae:a5:44:
ae:04:b1:dd:f9:f7:1b:bc:45:52:81:76:1e:4c:c5:25:f2:43:
47:99:7a:c3:82:94:80:af:ef:07:ed:48:f8:39:df:e4:29:f3:
ce:f7:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:17 2026 by rpki-client