Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: KEs344Y6q1MifYOCXs3dId7OgyBKRFLtps/+mbplw/M=
Subject key identifier: 83:E7:62:6B:E4:98:36:33:CE:86:34:66:67:20:AD:37:2A:07:F0:10
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 01A0EBF8C7E8200E810C333ACD4CA4CECDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 07:02:24 +0000
Manifest this update: Tue 29 Sep 2026 07:02:24 +0000
Manifest next update: Wed 30 Sep 2026 07:02:24 +0000
Files and hashes: 1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: eZm3XWQNOLnWgpjqlVhfy7fULoAhdeRQ4yWOxmexSP4=)
3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
4: h47V2oqauqZZ_rfHQWw19ZbUYg0.roa (hash: TrkwxoC10+VUKUU/FFOH1cGks+KjznkFnR4WMUPTGNA=)
5: zCVYNwSb6R9Q5adien3vj6-COxI.roa (hash: 4WkrjYGFdpzJeGxKIOg7LPmr739iupPTe/+MPRyS+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:c7:e8:20:0e:81:0c:33:3a:cd:4c:a4:ce:cd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Sep 29 07:02:24 2026 GMT
Not After : Sep 30 07:02:24 2026 GMT
Subject: CN=83e7626be4983633ce8634666720ad372a07f010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:d7:d9:7f:f6:e0:48:b9:35:d9:e8:de:26:
b6:85:ca:17:92:4f:94:51:12:07:32:01:6a:3b:b1:
9d:77:14:47:93:09:71:63:5e:b3:72:c4:c0:7c:1d:
5a:6d:5f:dd:95:af:63:0e:54:0f:31:d1:44:2a:dc:
3b:6a:fd:9b:16:7c:5d:2d:94:c1:5e:e8:c9:47:53:
ec:c3:6b:9d:c8:41:4c:60:1e:81:40:97:67:66:c5:
e9:0e:8a:f8:f5:ce:a3:35:79:c4:18:96:27:32:7b:
dc:a1:16:a3:f4:7c:9b:4e:80:a7:66:c3:55:93:b3:
57:06:4e:c4:62:3e:c2:70:b8:96:d6:b1:d7:f2:8c:
02:ab:b0:44:fa:83:eb:21:b3:d1:a4:c1:cd:eb:65:
00:81:c7:22:e7:cb:86:bd:61:f0:31:00:26:e8:15:
9e:1b:1b:37:b7:0b:f0:91:ce:5e:22:56:37:9e:bd:
3a:3b:43:cd:1b:9f:33:24:75:ab:6a:c8:5d:e7:d8:
f0:10:7d:c9:4f:0a:bb:42:7e:f3:53:00:16:98:5f:
fa:2a:60:d9:5b:de:99:dd:2f:85:b0:f8:c0:02:82:
97:3d:d7:d2:b0:0d:a2:e6:a8:32:4f:17:ad:07:55:
f9:93:fc:ed:12:26:40:40:83:f4:18:df:45:89:07:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:62:6B:E4:98:36:33:CE:86:34:66:67:20:AD:37:2A:07:F0:10
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:03:90:eb:f9:f8:25:f9:8b:0d:ed:2a:d5:10:44:9b:51:
e7:e4:00:0c:81:f9:06:14:7d:4a:09:a4:69:34:67:62:2e:18:
b6:fa:6f:9d:bd:17:2c:6a:65:a3:10:d5:2f:8d:da:a5:43:05:
df:78:dd:d6:32:66:de:0d:4b:f3:05:ea:c0:d1:d2:a5:1f:fd:
bf:f0:da:eb:e7:55:40:23:99:b7:c2:82:a9:34:a6:1a:67:e8:
58:2a:f7:f2:48:3f:b9:ae:36:b2:6c:df:32:ac:31:dc:65:8f:
7f:be:1b:b0:85:69:a5:cf:d9:12:e7:dc:ad:1e:8a:9d:23:4a:
86:ef:e9:4e:3a:9b:c8:67:cf:49:4f:7e:29:e7:a2:e7:77:0b:
29:4c:f7:b2:e0:a0:91:f1:72:10:f2:ea:bd:e0:2a:5e:c4:fb:
9c:12:2d:24:a4:6e:62:67:25:e8:c2:b8:b1:4f:cd:ca:7b:0b:
76:4b:9a:5a:3b:15:ad:66:f7:dc:3d:27:c5:6f:d1:26:8a:dd:
20:f1:84:76:97:65:51:e2:8d:05:55:ae:91:4c:17:27:a1:fb:
c2:85:24:31:46:59:b3:f1:f0:e5:87:f1:89:46:95:84:74:2d:
b5:97:ff:9d:39:79:c2:62:df:f8:a1:65:2d:c5:e3:c0:af:f1:
9e:be:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:09:10 2026 by rpki-client