Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: Y/rm155+DucfbIgmsaiguFOgsCsWPNaIP6w5RzwX2es=
Subject key identifier: 94:AC:E5:59:3E:4D:39:07:7C:EB:37:E8:7A:72:9E:AD:9A:B8:63:F5
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019FACACD86533F9045FF92B843A17A4650A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0226
Signing time: Wed 29 Jul 2026 07:00:36 +0000
Manifest this update: Wed 29 Jul 2026 07:00:36 +0000
Manifest next update: Thu 30 Jul 2026 07:00:36 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: CcucZmSiEPNzIU3QD+k0ixJJNkKudO5hh8ztn26pLCU=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:d8:65:33:f9:04:5f:f9:2b:84:3a:17:a4:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jul 29 07:00:36 2026 GMT
Not After : Jul 30 07:00:36 2026 GMT
Subject: CN=94ace5593e4d39077ceb37e87a729ead9ab863f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:f7:d3:b3:df:60:39:7a:0c:af:af:23:57:
81:46:7e:d5:3a:62:a6:f5:f9:e4:cf:55:bd:a5:11:
37:e5:9f:a5:cd:07:dd:4c:f3:8e:b8:47:76:f1:19:
a7:f4:65:c3:7f:f7:25:59:d8:8d:9f:2d:b6:c4:cb:
50:a5:b4:6a:b1:1c:02:b6:ea:ed:20:38:bd:08:b4:
f4:aa:d4:34:16:2e:38:c4:03:2c:27:ea:e6:7f:70:
b2:3e:47:ad:87:9a:4a:96:49:f6:97:fd:28:41:ae:
2a:e6:cc:31:c6:ea:5d:ee:48:ff:d6:4e:ff:50:ad:
3b:f6:0e:4d:9a:a8:77:bc:84:51:08:7d:2e:ad:a7:
a7:13:bc:f9:d1:0e:a3:b0:c0:34:0f:24:f7:49:29:
59:3b:9e:e9:ea:16:b2:db:c8:6a:56:93:bf:f6:a6:
0b:2f:ad:a8:40:4c:f2:8c:20:58:80:d4:67:a3:88:
00:c5:9f:4d:ab:df:51:0d:1d:47:df:9e:31:89:f7:
29:68:d0:3e:0b:7f:80:48:c4:d5:d6:d7:a1:57:60:
66:2d:b7:01:cc:60:c9:f4:df:28:bc:4b:fd:89:a2:
ca:fe:9e:05:ab:aa:1e:91:ac:51:69:a3:e3:61:0b:
b1:81:36:5e:79:ed:66:c2:50:db:d6:5b:f1:f3:a9:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:E5:59:3E:4D:39:07:7C:EB:37:E8:7A:72:9E:AD:9A:B8:63:F5
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:ce:52:b8:d1:72:1c:3e:ed:f5:62:9a:34:75:9f:ce:aa:
c1:67:13:84:b8:9d:cc:6d:a4:56:70:cc:00:32:a8:57:18:8c:
1c:b4:00:bf:b5:a8:b1:1d:f2:8a:00:9a:3d:36:7b:3a:75:0c:
a9:92:d0:80:43:88:81:ee:dd:be:21:62:63:27:39:4e:7e:36:
a3:3e:02:6f:51:03:07:47:d5:53:d1:71:87:d3:24:8c:52:fd:
0a:cd:e2:19:92:ce:c8:6c:56:47:e0:c8:28:c3:b8:56:33:bc:
c2:20:8d:88:1d:41:e1:7a:d8:45:79:6e:46:ea:69:36:63:28:
05:63:42:5f:e1:50:d5:12:c2:77:44:b7:01:2a:51:96:b5:a1:
39:86:0e:b6:a5:fe:25:f9:ee:8d:88:aa:a0:93:a8:13:d2:39:
d1:63:a8:f2:fb:e1:48:93:23:1e:8d:4f:4d:f0:ff:7a:05:15:
e6:70:6c:65:9a:63:fa:9e:b2:a9:26:0d:c0:a7:7c:58:ed:d8:
4d:75:a8:73:db:02:c7:b8:78:c3:62:69:da:9e:f7:76:ad:27:
22:6e:03:03:3f:ae:c6:f9:58:42:f6:ec:1e:43:42:44:77:e4:
57:c0:a3:4d:70:f7:4d:32:dc:87:dc:6d:2d:ae:62:3c:24:99:
d5:63:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:31 2026 by rpki-client