Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: 3Hie0TpB0ry8JB6S3JoMkRa1FKnFDL4DTSaFw21PvpQ=
Subject key identifier: 3B:D5:88:BF:B6:8E:24:E2:18:9D:E8:EC:F1:23:48:E1:E1:A7:E2:78
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 019FAC3F3D73C2625D26B87F8A1204785303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 05:00:53 +0000
Manifest this update: Wed 29 Jul 2026 05:00:53 +0000
Manifest next update: Thu 30 Jul 2026 05:00:53 +0000
Files and hashes: 1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: 6bouGzZ3nNT0nh2oWrTim+dv5duKYhOOSKruRdrpjb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:3d:73:c2:62:5d:26:b8:7f:8a:12:04:78:53:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Jul 29 05:00:53 2026 GMT
Not After : Jul 30 05:00:53 2026 GMT
Subject: CN=3bd588bfb68e24e2189de8ecf12348e1e1a7e278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:42:a7:33:1a:bc:7b:e5:cd:e4:35:b1:9a:
45:a7:a3:20:40:cc:aa:88:ea:c8:55:d3:7e:0d:87:
59:fc:59:6e:93:09:76:87:50:b2:3d:0f:0d:19:a2:
3b:12:d5:9a:5b:13:7f:d3:89:d4:f7:2a:73:05:9e:
5b:37:07:1c:b0:61:90:ea:c1:39:cd:9e:f8:f5:b1:
f5:b9:b8:ce:f0:ae:5d:dc:a7:f2:2f:a3:0a:06:69:
1f:97:c3:8f:24:ce:93:bf:6a:4b:bf:90:cb:4e:b0:
fb:14:2d:95:e7:5d:f4:24:71:05:1a:ac:51:6d:51:
78:b7:ef:44:bc:58:ca:09:4f:5c:b7:43:ea:33:7d:
ef:2c:ba:72:64:78:a0:5f:08:b9:29:57:5b:5e:84:
6e:63:3b:b1:7d:7e:1f:78:dc:ed:c2:ca:12:e5:2b:
8c:56:36:18:0e:7f:60:7c:3c:f7:19:6e:e5:93:a8:
d1:6c:e6:17:a6:63:d1:37:e2:e0:83:99:f8:1b:79:
a9:0c:24:30:22:ff:cd:20:a5:2b:03:11:e7:de:88:
eb:fc:e7:45:b2:eb:f5:b0:7d:b2:38:ea:cb:0c:b8:
8f:a7:d4:45:d2:da:a5:c4:2d:6f:62:1a:4c:bb:6b:
17:35:65:ff:0f:52:8e:31:ad:07:dc:56:eb:ce:df:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:88:BF:B6:8E:24:E2:18:9D:E8:EC:F1:23:48:E1:E1:A7:E2:78
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bf:45:36:a7:9f:a1:cb:b5:6d:80:42:a4:3e:46:ee:fe:28:
e7:dd:1f:c8:a8:e4:fc:78:56:03:bf:83:9c:ef:8a:e6:b3:20:
90:a4:e4:28:87:cf:12:eb:f1:35:14:f1:b8:8a:9b:de:c7:cc:
14:29:18:97:62:9b:84:3e:aa:dc:ca:cc:25:dc:41:9c:b6:26:
c0:d2:8b:ff:00:7e:41:6a:d1:c0:77:19:9f:84:21:18:54:3b:
a7:87:7e:8c:59:5b:e2:99:4c:7e:0b:57:2c:a7:cb:1a:e3:bd:
16:f4:1a:50:84:9c:d8:bc:1e:f3:6e:3a:68:83:a6:a1:e4:60:
6d:03:c4:48:e2:d3:cd:e8:b2:c5:79:09:93:dd:3b:95:16:46:
f3:4d:a9:38:03:eb:8f:03:dd:bc:8b:9a:7e:f1:a3:9e:86:5c:
b2:9e:be:b8:b8:5c:04:c0:ec:9c:4b:06:c7:0b:0f:d5:59:fa:
8d:22:d1:43:73:79:8b:d8:34:3f:01:f0:a5:b6:10:02:ab:98:
70:d8:b4:33:8e:23:d8:6d:02:8a:7f:23:a2:3c:19:a4:4b:4d:
b6:3c:37:e1:c0:fa:85:2c:c0:20:97:62:4a:30:e8:b5:25:de:
8f:c1:da:c9:90:ac:b6:4b:70:a5:3b:60:ec:8e:d7:2e:86:cd:
9d:ed:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:04 2026 by rpki-client