Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
File: NAXWyGBbqbCNP4T1peWW4l_n0tI.mft (raw, json)
Hash identifier: AYevu4vG63FEJNS8LzH2Cg4Mxel57oQdz+Qy4YJfhHk=
Subject key identifier: A5:83:93:A8:1F:D5:8C:84:4E:BC:D9:E7:E6:BA:3A:D9:42:63:10:EC
Authority key identifier: 34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
Certificate issuer: /CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Certificate serial: 019FAA874485D72012A35BBCEAE231AB1291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:19 +0000
Manifest this update: Tue 28 Jul 2026 21:00:19 +0000
Manifest next update: Wed 29 Jul 2026 21:00:19 +0000
Files and hashes: 1: NAXWyGBbqbCNP4T1peWW4l_n0tI.crl (hash: RWmhRfcAMSaBuAaPexZdwhy6k7a8KEQibDHk/GYVzk4=)
2: PoFYEuGutgHouWVg8Cb0Pk33vYA.roa (hash: X3Xo/sCZdu/v1GpBzfkHVMeep0fNTMPQZJIhKRC0j0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:44:85:d7:20:12:a3:5b:bc:ea:e2:31:ab:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Validity
Not Before: Jul 28 21:00:19 2026 GMT
Not After : Jul 29 21:00:19 2026 GMT
Subject: CN=a58393a81fd58c844ebcd9e7e6ba3ad9426310ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:44:6b:b6:63:eb:2b:a9:4f:08:d0:3b:fc:
2d:61:7e:91:76:45:5a:95:32:b5:c1:5e:9a:da:09:
31:8d:c8:ac:7c:63:95:9b:3d:6e:02:90:45:c8:0c:
d1:64:d0:7b:70:69:63:f0:41:40:21:00:2a:66:fd:
c9:05:cc:69:56:cc:05:2f:63:a1:33:a5:51:c6:06:
ac:6a:f9:48:ea:bc:18:26:df:10:f9:7b:d0:63:cb:
44:64:5a:d2:03:1f:a9:41:42:e4:35:d4:58:77:b2:
ce:de:4f:82:a7:2f:dd:a5:77:b0:02:64:36:6b:89:
a7:14:9f:47:8f:a8:35:47:d4:0d:28:4e:a1:10:cd:
9f:01:c2:c5:a5:46:c8:56:62:60:bd:bf:68:a3:a6:
8f:93:a0:1a:b9:fb:a7:ee:e1:87:c6:45:d9:d6:2d:
89:6e:04:08:72:76:53:64:ce:d7:9e:32:34:75:4a:
0e:76:3c:04:72:79:6f:1e:f8:04:d5:e4:d1:2a:c4:
11:fe:02:64:04:b8:e6:6a:39:08:2b:37:f5:24:58:
65:33:cd:82:c9:78:a4:ab:ed:fe:c8:d3:d9:04:bd:
bc:54:cb:e3:13:db:02:3b:35:6f:14:0f:bc:d9:fc:
d5:ee:0d:31:ac:e8:ef:f0:11:47:52:97:2d:d9:31:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:83:93:A8:1F:D5:8C:84:4E:BC:D9:E7:E6:BA:3A:D9:42:63:10:EC
X509v3 Authority Key Identifier:
keyid:34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d2:1e:a3:df:4f:76:dc:5e:2c:c2:13:ef:cf:92:e8:11:01:
5f:b0:d0:7a:ff:34:e2:b0:24:79:91:7a:ba:60:1d:22:2a:68:
7f:a5:99:79:8e:8c:fc:9f:45:55:59:3c:f9:30:6b:6a:75:c5:
cf:ef:62:18:f8:99:73:09:c6:3f:c2:30:19:70:29:6b:88:69:
04:2a:00:ab:a9:6c:6d:39:16:c8:40:81:a3:6c:aa:81:fe:6d:
2e:72:a6:00:18:e4:c9:69:8a:1b:fa:f8:56:91:b6:05:9f:48:
ef:3b:49:e5:ce:0d:14:35:af:23:b1:18:bb:ff:bb:43:e6:e6:
f3:9e:bb:69:0e:f8:b9:16:b1:da:40:3c:ca:4c:0e:7d:7f:ba:
25:d8:95:d9:71:93:56:43:c6:64:1b:fe:bf:4c:67:a3:be:84:
df:bc:4c:52:82:a6:fc:cd:06:1f:a8:87:ea:eb:81:d4:b3:ba:
ce:fa:f2:ec:85:6f:a9:b1:83:23:06:d7:7f:48:2a:96:e9:a2:
fe:ee:e1:f5:5a:90:cc:0a:75:0e:8e:e0:88:70:95:5f:5c:93:
fa:d7:bd:00:cf:5e:f4:85:16:94:49:56:08:fe:50:5e:80:38:
95:f0:15:98:b4:2a:37:d0:14:a0:11:43:37:38:d2:bd:28:fe:
e0:cd:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:14 2026 by rpki-client