Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: iRvPJRmAZYYZqqF/b4lePLAkQIwrLeH9lI9NQu5Nc+g=
Subject key identifier: 46:F1:AD:91:1B:86:0C:B7:9F:65:69:A6:99:F6:20:11:2B:7A:92:A8
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 019FAA50899CC1F21D9A795A0FF91534B2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 0749
Signing time: Tue 28 Jul 2026 20:00:32 +0000
Manifest this update: Tue 28 Jul 2026 20:00:32 +0000
Manifest next update: Wed 29 Jul 2026 20:00:32 +0000
Files and hashes: 1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: pnbN1JS1vFbsx+10p5jxUgOegNbUR0pGyGq8cJ6A6rw=)
3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
4: cWvOdIg2noCYJK67b7smFIMMw4g.roa (hash: jiBllTk0LDqmGqzBfF6DX67GW5ceJzuLTPIl+rqWXac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:89:9c:c1:f2:1d:9a:79:5a:0f:f9:15:34:b2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Jul 28 20:00:32 2026 GMT
Not After : Jul 29 20:00:32 2026 GMT
Subject: CN=46f1ad911b860cb79f6569a699f620112b7a92a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:1f:8b:a1:43:12:91:d6:5c:6c:30:80:ec:
9d:e6:9c:06:2b:10:a4:b9:03:07:39:a7:0a:12:75:
a9:c2:6d:6e:92:fa:d8:6d:93:5a:80:50:b5:c3:57:
07:8d:cd:ac:20:a5:25:07:34:cd:d8:2b:37:3b:f7:
c0:2c:89:4b:5c:34:9e:a2:b0:16:e2:f5:a9:a6:a6:
bd:3e:dd:67:3a:6b:df:69:9d:12:a5:51:cb:be:a3:
82:b3:7e:13:e3:83:dd:da:5f:af:79:e0:f5:eb:6a:
78:16:9a:1c:15:8d:fe:91:15:ad:a9:a9:de:2f:ec:
46:80:b0:1e:ba:de:ad:e6:b4:df:ff:cf:9f:2c:7c:
b3:3b:61:a2:d7:2a:bd:01:f7:62:e6:7c:dc:ab:d9:
aa:41:31:95:7e:79:f2:a0:3b:59:da:99:3a:41:02:
be:d7:92:3b:f9:fb:a1:6a:e4:66:8d:b9:ff:f4:87:
17:5b:d2:8d:75:6e:4b:ca:20:49:3a:7f:cc:11:68:
41:d2:1a:31:44:8a:b5:8c:d5:91:7e:5a:82:1a:e6:
03:bf:7b:51:03:a6:b1:d2:4d:7a:0b:93:d4:a5:6b:
41:a9:81:6f:89:ee:42:5a:d4:a6:65:2c:f3:69:45:
88:5b:10:b4:44:ae:ce:51:86:af:bb:d4:9a:87:44:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:AD:91:1B:86:0C:B7:9F:65:69:A6:99:F6:20:11:2B:7A:92:A8
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0f:03:71:22:8f:cd:93:c9:6b:ba:dd:50:ed:11:ba:e3:c8:
35:8e:01:dd:29:e6:7e:4d:39:d5:81:85:e6:61:1c:50:ab:b5:
87:03:55:06:62:4f:62:d8:2a:b8:2b:e3:ef:2a:73:cb:63:58:
a4:f4:f8:85:2b:88:e7:80:af:1c:88:9a:02:ef:32:33:95:b0:
32:06:a9:84:14:aa:c3:89:fb:94:fc:b4:7a:af:da:ea:90:17:
e5:10:f1:63:5a:29:6f:24:2e:27:89:0d:80:56:52:63:86:d3:
86:37:1b:9a:45:44:2b:6a:a6:39:59:31:19:21:f5:c1:fc:97:
98:f1:2c:11:e2:7d:a3:a0:fe:d8:50:4b:4c:fd:84:1a:99:94:
36:37:2d:02:e3:46:98:99:62:02:8c:c4:e3:a8:58:a2:ae:66:
00:bc:86:41:0f:4b:28:bf:0b:13:11:7f:43:71:99:23:c6:3f:
d9:66:f5:96:41:98:69:04:23:34:01:fc:fb:79:23:1e:5f:6d:
7e:ff:14:33:38:49:8c:bb:2b:4e:93:d1:81:f5:22:74:5c:32:
22:3d:e5:6f:77:47:0d:78:37:ac:7b:88:10:6b:97:25:ca:e6:
09:62:77:e9:d5:01:06:20:2a:e1:bb:c6:a1:30:2b:ac:35:b9:
2c:98:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:52 2026 by rpki-client