Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
File: Na5NvD-sOkzQcM-fAql4rz_gqiY.mft (raw, json)
Hash identifier: BNHhaP8YfL9HZsEsC/SDqV2ivdnu+IOKEocBbhQVUtI=
Subject key identifier: E4:AA:8D:71:24:A8:45:94:02:A9:82:86:51:C4:5F:28:86:AC:6B:04
Authority key identifier: 35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
Certificate issuer: /CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Certificate serial: 019FAC7649DBD0C78CAC91CD1A1F44EBBB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:00 +0000
Manifest this update: Wed 29 Jul 2026 06:01:00 +0000
Manifest next update: Thu 30 Jul 2026 06:01:00 +0000
Files and hashes: 1: Na5NvD-sOkzQcM-fAql4rz_gqiY.crl (hash: ThzSdmcxG5IupH27Z//+/REoud9Nj8B68mpYskxA+Fc=)
2: RRaajtQrss5SvD0UbtCJxO7e-rU.roa (hash: 3rTSj5RjYBccOHFc9KbwnqOPuKe1LfVBGgP8gO67rtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:49:db:d0:c7:8c:ac:91:cd:1a:1f:44:eb:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Validity
Not Before: Jul 29 06:01:00 2026 GMT
Not After : Jul 30 06:01:00 2026 GMT
Subject: CN=e4aa8d7124a8459402a9828651c45f2886ac6b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:ea:65:8c:28:7b:0c:ab:c0:2a:f7:2f:70:
a8:1d:86:79:84:bd:59:a7:a6:9b:d4:08:b4:52:6b:
64:b2:27:e0:95:c1:6a:20:db:38:bb:43:9c:e7:55:
c6:3c:ee:dc:9d:fa:35:63:cb:6d:94:21:1d:52:f2:
81:f4:12:74:f3:25:8b:ee:43:fc:0b:82:51:e4:56:
63:08:dd:b4:55:82:ca:e6:17:b8:e6:19:45:a0:52:
8a:39:ce:1a:b5:a7:58:6f:46:c8:aa:cc:67:af:b5:
22:83:cf:84:34:33:13:08:a6:1c:50:0a:0d:6d:30:
8e:23:ea:2c:ec:12:a8:73:97:86:96:d4:d4:12:1b:
6f:b2:56:af:b6:8a:99:b0:d7:fe:7f:e4:1d:e8:10:
5a:56:95:18:ae:fd:c2:60:f6:77:46:86:0c:8d:19:
6e:91:9f:31:2e:cf:e4:68:c8:41:50:54:ef:ce:5e:
cf:70:67:ab:04:1a:30:dc:56:ca:05:4c:8c:76:2e:
33:28:60:77:1c:bd:60:a8:55:a4:42:e8:67:de:f8:
8e:6d:31:da:b1:a6:1a:fc:27:d0:a9:09:10:0e:70:
56:cb:fb:d1:63:27:81:97:99:c6:5c:f6:3e:cd:10:
4b:87:30:f9:7b:d2:ea:0d:25:fd:88:5a:44:03:b4:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:8D:71:24:A8:45:94:02:A9:82:86:51:C4:5F:28:86:AC:6B:04
X509v3 Authority Key Identifier:
keyid:35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:64:96:f6:76:9a:9e:59:99:a4:3b:91:64:7d:5c:cf:14:64:
bd:d0:cb:04:1b:e8:a9:78:a4:7e:16:6a:79:0d:a8:0c:03:48:
7e:a3:49:20:56:8c:9c:9e:d5:c1:e1:74:44:26:1e:fe:18:47:
58:95:9b:ae:ea:7a:3c:3e:16:51:52:14:06:47:b0:5f:a5:09:
53:86:c1:53:39:bf:71:b5:78:5f:5a:a0:a8:6d:cc:50:f1:b7:
19:c7:86:ee:80:b6:1b:9c:2f:a0:6a:0a:b4:a1:79:c4:f0:da:
e5:60:53:b5:38:20:1d:4f:5a:ef:01:8e:35:3f:d5:06:1d:41:
0e:bd:37:d5:fc:db:a5:33:91:ce:e3:13:da:9b:3e:31:77:27:
83:61:52:62:ac:c4:4e:48:37:ac:98:29:aa:46:d2:45:70:53:
cf:0a:15:7d:72:0e:6f:7a:26:31:0c:23:3e:5a:60:14:3f:47:
7e:84:c2:36:14:0f:24:59:13:0b:82:13:45:4d:38:a4:11:58:
2c:41:90:57:6f:b5:3d:03:ba:f2:05:3c:89:d0:5a:0c:df:95:
57:3c:9b:d3:23:83:44:c0:62:02:58:0a:44:bb:66:a6:71:de:
cf:b2:ae:0d:01:4c:4c:12:9f:2d:07:de:2a:de:2a:1d:63:24:
94:14:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:29:43 2026 by rpki-client