Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: 2WYl+W1Sam7316+wdFGc1XGc1O55jMNhqSTaaAYQqZA=
Subject key identifier: F4:FC:E8:5F:58:9A:13:DD:3E:F5:DD:E5:54:E1:96:EF:E0:A8:AC:C3
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 019FAAF62F11F51467144D46FE7C7DE8D4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0B46
Signing time: Tue 28 Jul 2026 23:01:28 +0000
Manifest this update: Tue 28 Jul 2026 23:01:28 +0000
Manifest next update: Wed 29 Jul 2026 23:01:28 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: oV6mQ4QhIZi5d8nHw4CFiTJxS56dxJ99F9F1gJAJ6kc=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2f:11:f5:14:67:14:4d:46:fe:7c:7d:e8:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jul 28 23:01:28 2026 GMT
Not After : Jul 29 23:01:28 2026 GMT
Subject: CN=f4fce85f589a13dd3ef5dde554e196efe0a8acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:cc:0a:e7:71:ce:d6:b8:51:b0:4e:2a:96:
21:64:bc:25:b7:da:ac:dd:99:3f:a1:41:c5:54:78:
b2:0a:97:e1:31:af:3a:88:1a:1c:3d:bf:fa:4a:41:
a7:f7:a8:65:f9:0c:eb:25:4a:a9:25:0f:5b:5d:13:
4b:9b:2a:75:5f:c2:3a:14:3b:ff:94:ea:3b:d7:99:
60:86:fc:72:67:39:59:94:63:cd:44:e7:7d:af:c5:
4b:94:55:b4:05:c0:44:80:1e:66:fe:7e:93:07:a4:
05:63:49:80:55:5f:8b:5a:53:96:75:82:84:4c:de:
df:e2:a4:a8:fc:62:51:19:be:41:5a:42:59:fe:9b:
ab:0b:3d:e6:d6:e5:96:0f:1e:b7:4f:47:7c:ae:2c:
28:12:40:28:af:15:e5:90:22:a2:88:88:ab:55:0b:
eb:e0:7f:6d:71:38:d3:31:7d:2c:71:22:50:a1:37:
3d:a1:5d:fa:c4:3f:55:43:51:14:a7:ee:58:a1:15:
00:02:6a:09:62:5d:d5:e0:17:15:10:44:a4:bd:c3:
d2:1a:c5:02:8b:6d:12:69:e4:a6:dc:c4:20:ef:b4:
22:25:89:e2:e7:02:20:f8:1d:00:2e:83:aa:12:6a:
23:90:00:d8:d9:ad:ec:a2:e8:7a:24:8b:ed:da:91:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:E8:5F:58:9A:13:DD:3E:F5:DD:E5:54:E1:96:EF:E0:A8:AC:C3
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0f:1d:42:59:be:b6:50:0f:8a:6a:11:89:5c:94:7e:d6:21:
93:aa:b5:e3:2d:75:a0:6a:32:c9:93:50:27:86:9d:dd:e3:92:
0a:8b:d5:78:2a:9a:a2:55:67:d6:9a:2a:9f:71:27:e2:6a:47:
7c:95:60:06:72:dd:77:bb:32:57:bf:48:59:4d:14:70:3b:2f:
63:ba:77:42:87:d1:8a:35:c2:dc:9a:06:55:d1:b2:cb:b9:a0:
8d:c1:72:f0:2d:8e:3b:4e:f3:b1:fd:4e:5c:1a:ff:08:d3:82:
5a:75:1f:67:94:a1:fc:19:88:80:75:29:e1:72:08:5d:87:0d:
ff:b3:43:86:78:6f:11:46:2a:55:c1:13:1e:a1:36:cb:1b:f1:
e9:97:b6:c0:48:3b:31:10:e7:cf:09:95:1c:fc:d0:62:db:c2:
32:a9:d2:a9:1a:41:6c:0a:23:09:5f:d3:67:9b:67:0f:a7:a2:
4a:af:f7:e2:2b:41:13:7c:40:0d:9f:c9:14:82:e1:2c:1d:5d:
d7:02:3f:ca:4b:f5:a5:c9:08:44:2e:7c:ae:5a:14:72:fa:fb:
f0:20:ca:2c:4f:85:f1:84:0e:4a:38:ab:fb:dd:60:4c:bc:00:
69:35:83:7f:bb:1a:08:47:ed:fb:3c:f3:6d:4e:de:97:d6:00:
01:39:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:18 2026 by rpki-client