
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: UsmAeF4DWyT7MUh0mMqulk4OHObKfQFwEtaRvsUSgjs=
Subject key identifier: F5:A0:2C:C1:76:B8:D9:80:0E:69:2A:FB:5F:64:74:F5:FD:94:9E:81
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019FA974AE2405E5F62EDEABC60C648F55C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 16:00:23 +0000
Manifest this update: Tue 28 Jul 2026 16:00:23 +0000
Manifest next update: Wed 29 Jul 2026 16:00:23 +0000
Files and hashes: 1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: YJclfKiNhtQKzySw/DNVuJXKtEKySEzasWgPSyd5vdM=)
3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
4: h47V2oqauqZZ_rfHQWw19ZbUYg0.roa (hash: TrkwxoC10+VUKUU/FFOH1cGks+KjznkFnR4WMUPTGNA=)
5: zCVYNwSb6R9Q5adien3vj6-COxI.roa (hash: 4WkrjYGFdpzJeGxKIOg7LPmr739iupPTe/+MPRyS+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ae:24:05:e5:f6:2e:de:ab:c6:0c:64:8f:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jul 28 16:00:23 2026 GMT
Not After : Jul 29 16:00:23 2026 GMT
Subject: CN=f5a02cc176b8d9800e692afb5f6474f5fd949e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:0d:1a:71:22:c6:85:2c:e6:1e:17:c5:6b:
5d:cd:99:bd:db:a7:26:0c:7d:a3:fe:97:bc:e1:8d:
27:1e:ae:28:28:a2:b7:b1:04:99:fb:9e:6a:25:cc:
de:d7:2b:f4:83:07:3d:61:86:02:9c:3e:ee:b5:c6:
1d:14:83:cf:3c:ef:c8:e3:95:8d:20:3e:ab:cc:a5:
e7:59:1a:d2:65:22:b2:20:82:0d:c3:d3:f8:b8:43:
3e:8b:0c:b2:16:8e:00:54:1c:3d:58:da:55:ab:0a:
2d:9a:c7:a3:4e:92:ae:9a:ba:bb:e8:ff:7d:d8:e4:
23:ab:ff:b1:0b:c9:9b:20:bb:27:d5:c9:2f:76:fd:
23:80:2c:de:d7:8a:43:00:4c:8d:38:ef:90:4b:ac:
b2:5a:2c:a0:5e:51:21:d8:39:8c:59:4f:32:d3:c7:
0f:6f:93:55:04:28:d3:52:79:82:a8:45:fa:05:dd:
d2:a4:90:29:7e:84:4c:82:dc:cc:a8:f9:ab:3f:59:
c6:b2:b2:96:d1:6e:20:94:f9:e9:3b:1e:c4:b5:c9:
0e:21:56:52:67:e4:7a:65:5b:6b:4b:6f:b2:38:a0:
cb:5c:0d:7b:78:9f:f1:9a:b3:5c:1e:f0:0d:0c:aa:
f7:cc:de:27:54:03:2e:0d:d2:67:c8:e4:0f:f4:3b:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:2C:C1:76:B8:D9:80:0E:69:2A:FB:5F:64:74:F5:FD:94:9E:81
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:9d:2d:ed:e1:b3:da:ad:18:aa:3c:e9:04:01:02:ae:71:
b5:a8:05:c6:2f:cf:a5:1e:28:dd:a8:56:bf:31:ba:9d:c1:fd:
9e:10:4c:32:68:3e:3c:e5:4d:10:46:d1:71:85:88:74:06:1f:
ba:e1:9c:3a:25:ac:95:a3:f0:4b:9f:ef:9d:db:5f:00:b0:a8:
ed:13:9a:4b:2f:4c:31:0b:0f:ad:9b:3e:b1:78:f9:6f:34:fc:
bf:88:2c:bd:72:74:ea:4e:98:3e:42:9f:95:bb:bd:c2:48:99:
ec:e2:e4:08:04:7e:71:b3:fc:68:12:7f:06:8b:ff:20:3e:7c:
df:ff:21:02:bb:a5:dc:a6:5a:08:11:34:01:7e:d9:41:9d:4d:
bb:a7:18:ea:cb:1c:f0:94:ca:fc:59:d5:7f:73:fe:ac:7d:43:
92:37:1a:69:c1:41:ca:29:90:4b:f3:53:46:a6:82:1b:a2:24:
45:9a:92:b4:aa:ba:ac:df:7c:a0:84:f6:a7:48:8e:9e:bf:de:
3f:7a:52:b8:5c:5e:42:5e:ad:e8:c6:c9:cb:f4:24:c9:ef:50:
3c:65:25:a7:f7:fd:fb:f4:27:6d:8c:89:06:5a:3d:95:5f:9c:
45:6f:e7:e1:f2:0d:6b:65:34:7e:f6:25:bd:35:d4:f4:10:76:
95:34:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:06:09 2026 by rpki-client