Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: YWO5wyNXBsx2SMmfdVklQK950p5oxgKrnJXebb9DmCo=
Subject key identifier: 75:03:36:A8:B9:F7:F2:68:C7:D5:7E:F7:4F:B3:81:1C:5F:42:87:49
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019FAB9AA6C8AC84BDB50E042DF2BD30C55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 02:01:06 +0000
Manifest this update: Wed 29 Jul 2026 02:01:06 +0000
Manifest next update: Thu 30 Jul 2026 02:01:06 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: ostrnHzhKGh+fgUSzPEb4ANLgWsXVo5Nbe4YamB2PGc=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:a6:c8:ac:84:bd:b5:0e:04:2d:f2:bd:30:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 29 02:01:06 2026 GMT
Not After : Jul 30 02:01:06 2026 GMT
Subject: CN=750336a8b9f7f268c7d57ef74fb3811c5f428749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:f7:7a:82:d9:2f:b0:af:50:eb:0e:12:87:
db:7d:7e:36:db:37:be:89:5f:6f:81:77:08:45:fe:
55:21:6a:c9:da:36:fd:f4:f3:6b:ce:57:95:fc:98:
6b:07:09:fe:d3:ac:4b:78:9d:59:84:7e:61:ec:42:
a9:d7:c3:be:69:bb:3b:54:7d:14:0f:cf:fe:4f:41:
b8:16:d9:80:ff:6f:87:46:77:d8:b7:a7:02:cb:fc:
95:03:d6:b0:18:68:f2:4d:e6:3d:ff:1c:8d:8d:da:
d0:fa:71:9d:cd:6d:98:11:bb:b9:19:66:05:8e:af:
c5:ea:45:4d:b1:e7:e8:cd:75:55:08:28:82:c8:cd:
cc:86:a0:7e:2a:6c:e3:f0:e2:ba:4b:5d:00:02:4b:
cb:8c:5a:e8:5e:4b:7c:89:71:58:c9:2d:cf:d0:22:
3a:c9:18:5c:5d:ad:85:6e:77:5e:15:21:8e:54:18:
09:ac:6d:c7:e0:e8:02:68:63:03:a6:b0:c9:2b:ae:
3a:2d:8e:b9:18:3f:3a:2f:4c:da:a9:06:32:29:60:
5c:c0:95:0e:b0:67:fc:75:96:f6:2e:2d:09:37:f7:
97:17:02:ea:7b:d1:d8:01:f2:d7:ac:6b:35:fe:62:
e5:bd:94:f0:5e:d0:1a:58:b7:e0:21:38:d8:27:6b:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:36:A8:B9:F7:F2:68:C7:D5:7E:F7:4F:B3:81:1C:5F:42:87:49
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:31:f8:7e:10:ac:e4:35:72:41:cf:3f:3d:65:eb:63:e6:2d:
1d:57:30:b9:28:d7:38:2a:46:77:ef:76:f8:eb:20:93:50:e0:
12:e2:82:6d:22:53:0e:64:f7:aa:c6:01:f5:fb:9c:49:f2:e3:
bb:67:29:57:d0:2c:7b:5a:7c:71:2e:a6:75:ad:a2:56:28:7a:
87:de:62:62:d1:2c:80:b9:59:61:c6:2f:1a:4a:c5:36:c3:a9:
f6:0d:64:5c:dd:56:e8:c9:1f:90:4a:05:27:01:48:75:82:ae:
e2:db:ae:63:9a:b3:65:85:c8:e1:bd:a1:ec:e1:18:ed:58:2c:
01:5f:fc:76:7c:c6:1e:9e:17:64:81:1a:fe:d2:5d:1d:c4:00:
1d:58:80:4a:21:47:90:77:55:ba:88:a1:99:88:cb:ee:52:9f:
c0:21:a3:f6:95:46:2d:6b:ed:72:61:42:dd:95:07:e9:16:e5:
6c:d5:11:bf:32:3c:ba:12:74:b3:60:31:3f:e3:d6:9a:7b:59:
cb:2d:02:42:b2:3a:06:42:7e:10:44:54:a4:10:de:5e:91:a5:
f0:72:e9:07:15:ca:ce:a9:07:4f:47:89:71:48:0d:5d:77:e2:
1e:f9:f1:9c:9f:ff:79:2d:89:9e:82:35:5e:a5:9a:e7:e0:05:
1a:48:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:59 2026 by rpki-client