Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
File: NfJIyy_lWJzEbJo1M7d5lmGclpM.mft (raw, json)
Hash identifier: S2oIDEpqiTjsLpcOvSA8988s3gwsufkErzgdaD9G9xk=
Subject key identifier: 97:90:65:5D:EB:BC:EA:EE:9F:D5:7D:95:6F:AB:E9:66:11:A6:49:97
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Certificate issuer: /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial: 019FAA87FF66DA8465F8307FD1DD54CFB59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:07 +0000
Manifest this update: Tue 28 Jul 2026 21:01:07 +0000
Manifest next update: Wed 29 Jul 2026 21:01:07 +0000
Files and hashes: 1: NfJIyy_lWJzEbJo1M7d5lmGclpM.crl (hash: DEh2PdZXaPn72RM1R5TqzsCSVXWl2wLfpa0SeZN5DuA=)
2: eojrh4FYJOqn2Ldzg006OCzOQCA.roa (hash: wx1jFfpx9zsFd3AkjedbstvGgcY2Qb3PIq4eLA6x+1M=)
3: h9Vxutjtfpi1EQcen3goCtrMe_g.roa (hash: +RNsc+f9Zpcxd9dc3ORPp5I+o9EaIxcXyvozD+Nd1qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ff:66:da:84:65:f8:30:7f:d1:dd:54:cf:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Validity
Not Before: Jul 28 21:01:07 2026 GMT
Not After : Jul 29 21:01:07 2026 GMT
Subject: CN=9790655debbceaee9fd57d956fabe96611a64997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:7c:90:30:a7:cf:62:18:a0:c7:3a:88:56:
a8:4c:c7:3d:38:15:53:a0:db:04:6d:45:c7:d1:51:
4c:fa:75:bd:4b:1d:58:eb:c3:33:32:0e:92:80:06:
af:ee:da:47:79:be:6b:34:02:d9:f5:e4:73:22:d8:
ba:d9:3a:4d:56:32:d3:ab:f7:97:8c:a9:44:4b:13:
76:f3:99:32:01:88:df:d7:07:b3:99:2e:db:75:50:
c9:a9:2a:ae:ce:7b:39:c2:e6:55:e7:88:25:e1:bc:
36:9f:ad:08:f6:04:c5:d3:ae:89:12:47:ba:36:69:
91:60:36:af:68:b3:d1:ef:d8:cd:b8:d3:9c:cc:30:
b1:ba:77:a1:91:b5:69:c6:be:fa:5f:fb:de:43:94:
57:56:2f:90:72:60:6c:a6:ee:9a:19:77:72:32:7e:
b5:d3:65:a8:d5:e1:33:d5:71:3b:f8:0b:77:0b:3e:
52:a9:df:a6:02:59:40:40:65:94:09:0e:d4:da:6e:
bc:21:d5:49:f3:99:27:d1:42:dc:60:5b:9d:10:02:
76:1a:68:db:bb:fc:1c:b1:0c:34:ca:ea:e3:7b:7f:
e2:af:b9:71:2d:25:3a:1f:32:bd:97:54:e0:f9:28:
8b:ba:4c:43:df:17:4b:d4:07:c3:f8:d5:b9:f7:22:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:65:5D:EB:BC:EA:EE:9F:D5:7D:95:6F:AB:E9:66:11:A6:49:97
X509v3 Authority Key Identifier:
keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ec:a6:96:de:86:c7:5d:29:e9:d6:72:4e:d0:cb:9b:d7:a3:
14:75:00:cf:bc:85:e5:b6:84:01:eb:3a:16:28:79:9b:7b:17:
c1:b2:3c:e0:2d:44:43:a5:81:5d:d4:be:bc:3a:a9:00:69:18:
6e:c7:38:6f:c1:39:81:78:94:8b:64:27:b2:f5:85:c0:cc:e5:
a1:31:2d:99:c9:5b:61:87:54:09:38:74:00:a0:0b:68:dd:e7:
1b:21:11:05:db:1d:1a:7b:40:19:9b:3a:64:5f:2c:b2:7f:e3:
c3:7e:00:7b:83:b8:2c:69:40:17:16:39:7c:c9:15:2f:88:b5:
15:6a:1f:27:c5:26:7e:51:f7:5d:ab:20:35:ca:c6:f6:c8:29:
94:8b:26:8a:9f:e5:e5:19:7f:b5:3b:c4:87:57:c6:68:dc:9f:
e2:22:ca:0d:48:e9:80:c9:92:b7:70:ca:23:a9:3f:90:d7:3d:
8a:6d:32:70:b1:79:46:6b:f2:60:93:9f:55:2c:9e:9c:b3:1c:
92:c5:8a:d0:e9:16:db:c8:a6:14:f5:76:70:0c:ca:78:af:d8:
32:42:b1:f1:68:ea:ca:54:9f:2d:03:7e:24:77:01:4a:e1:8c:
cf:f2:e9:6b:69:57:80:4e:5a:d6:f0:d1:b2:e4:ed:9f:89:d4:
82:f1:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:23 2026 by rpki-client