Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: DfgQ7BHeJBtFZFKzAaqrBd+SKShImGzfYIEwetVE8fk=
Subject key identifier: 3F:4F:D7:82:02:59:3B:E1:8A:F0:34:EB:33:7F:2B:84:3F:C9:F5:DC
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019FA9ABA88A66A515B6EEDFB17ECA996550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 139E
Signing time: Tue 28 Jul 2026 17:00:26 +0000
Manifest this update: Tue 28 Jul 2026 17:00:26 +0000
Manifest next update: Wed 29 Jul 2026 17:00:26 +0000
Files and hashes: 1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: rteB+NX3bWxVgTSFjb/a1VZjOUOFhdAVQHjYMs7phjM=)
4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a8:8a:66:a5:15:b6:ee:df:b1:7e:ca:99:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Jul 28 17:00:26 2026 GMT
Not After : Jul 29 17:00:26 2026 GMT
Subject: CN=3f4fd78202593be18af034eb337f2b843fc9f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:82:07:42:ad:2f:bf:bd:8b:20:52:34:bd:
53:e7:dc:a3:da:22:a8:29:10:e5:c2:57:bc:ab:cf:
24:6b:f4:39:ed:9b:dc:c5:e1:6f:93:c8:75:ca:76:
60:69:1f:89:24:52:7e:10:07:d2:ec:55:34:46:02:
10:cf:8f:fe:c9:9b:80:25:ee:1f:0f:f0:72:86:37:
06:e8:70:63:40:0f:c4:cd:98:b2:5b:f8:9d:0c:ec:
01:07:41:93:1b:da:b3:e5:a8:10:d5:05:e3:97:6a:
d4:d9:0a:de:96:9d:b5:96:48:98:4e:8e:0b:a1:fe:
33:16:b9:44:b5:76:29:50:d3:6b:56:0a:6a:91:f6:
c5:8f:1d:80:c4:38:0c:18:ac:76:3e:93:9c:d3:a1:
b7:53:9a:00:83:a1:0d:2f:33:d4:e1:b8:9b:92:04:
91:7a:c0:fe:16:24:7d:b5:dd:61:c9:5d:73:ac:e0:
00:ae:05:c4:fb:91:ec:2c:9b:80:e8:e9:26:6a:42:
5b:7d:7c:4e:ac:8c:c0:a3:63:86:15:0c:d6:8d:62:
19:92:92:99:18:56:94:c1:9c:84:ee:9e:10:98:f4:
da:65:70:04:6c:f8:69:29:0d:c4:05:f5:14:56:1f:
84:59:36:52:a0:1b:21:57:cb:3d:53:f4:57:de:d6:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:D7:82:02:59:3B:E1:8A:F0:34:EB:33:7F:2B:84:3F:C9:F5:DC
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9e:a3:37:ad:3f:12:14:58:b1:b4:57:c3:98:de:67:c1:f0:
33:66:87:d7:d4:4f:38:71:38:b2:d2:20:1d:cb:82:bb:1b:97:
28:27:ec:5e:0e:10:73:38:dd:79:a2:1a:cf:91:64:26:e2:02:
00:8d:6c:11:8e:ce:1e:4f:73:e6:8a:68:4a:97:fe:ba:8b:66:
7f:68:14:d5:a0:bf:70:45:a7:a8:05:ec:1c:6b:c5:e0:e3:51:
f2:2c:50:74:58:ca:0e:fb:92:f9:28:cd:19:57:33:5d:a7:6f:
9e:e1:d7:39:34:2f:8f:ef:a2:3b:b5:ad:ef:cf:68:1f:2f:b6:
86:e1:dc:a0:fe:2b:ad:29:2e:98:a4:56:e4:47:72:98:e9:a7:
3b:f5:40:1b:c4:08:ba:32:86:66:a5:0f:76:68:e6:d3:29:0e:
f7:f3:2c:11:8c:1a:4c:0b:af:e3:8e:2f:9d:60:c8:34:23:0c:
40:f6:a1:e8:2c:e1:17:30:ce:0f:8e:10:16:15:10:82:57:b1:
49:6e:b7:be:07:7f:d3:ab:e8:92:9a:b9:43:6a:7b:c0:b0:32:
ea:13:c7:b5:c7:7e:bb:a3:8c:30:96:d8:4b:b7:e5:b9:cb:72:
2a:5b:b6:36:72:5e:56:07:3a:09:8f:f7:b5:8d:e6:48:cf:7c:
ca:71:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:07 2026 by rpki-client