Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: +zzClhHWsatg2ZNfBvrj1fjXWjCRu8gS3e+yGkiTDs4=
Subject key identifier: E2:56:4E:E6:7F:C7:6B:71:DF:17:02:59:53:CA:8C:5C:A5:27:EE:5F
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019FAD88C65B3727667CD4BB7B0A0581F6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 11:00:49 +0000
Manifest this update: Wed 29 Jul 2026 11:00:49 +0000
Manifest next update: Thu 30 Jul 2026 11:00:49 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: +IeHizgVYt31wWUGvp4vjAm9IP+I8zQlfs0U2IOLXaU=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:c6:5b:37:27:66:7c:d4:bb:7b:0a:05:81:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 29 11:00:49 2026 GMT
Not After : Jul 30 11:00:49 2026 GMT
Subject: CN=e2564ee67fc76b71df17025953ca8c5ca527ee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:7b:34:11:69:d0:43:d4:d9:d1:73:3a:50:
07:0d:fd:3c:cf:0b:27:7b:74:a5:9e:39:1b:ac:bf:
70:97:bc:0e:26:66:e3:b0:b0:1f:1b:83:1d:2c:e2:
c1:0c:8e:39:c2:97:a2:3b:98:71:b6:8d:97:2d:46:
bd:8d:29:c3:6f:30:eb:29:63:0a:96:4e:44:98:57:
af:22:34:1c:3a:c0:b0:ab:9b:ea:22:08:99:9f:e6:
f0:70:65:72:a6:93:e2:6f:7b:78:70:ff:ed:09:67:
2f:22:f7:9a:eb:2b:6c:4a:f9:69:0d:c8:73:fb:04:
3a:79:40:30:78:6d:62:b7:28:88:45:ad:2a:1c:89:
30:52:e1:c3:0e:86:c4:06:5a:62:b2:ba:8a:eb:39:
76:4b:75:c3:e6:84:ce:d2:06:b6:c6:5a:cb:ba:80:
70:30:09:78:89:aa:f2:f3:c0:6e:bd:52:12:e1:78:
0c:44:e7:77:63:af:a8:b8:04:8c:40:2d:b2:b8:fd:
3b:9e:3c:19:75:69:cd:1f:fa:1f:77:2f:7b:9a:68:
9b:f2:3f:be:02:a8:41:72:12:f9:1a:d1:a2:24:d0:
f6:28:81:dd:f9:14:bc:78:f2:1f:65:bf:ca:f9:ee:
97:7f:26:e6:13:88:19:6f:5d:9c:23:ac:9b:66:73:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:4E:E6:7F:C7:6B:71:DF:17:02:59:53:CA:8C:5C:A5:27:EE:5F
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:92:b9:c8:94:f5:5d:7a:8c:b1:79:7b:b2:5e:64:dd:30:87:
85:7e:d1:26:10:7c:0e:e3:42:d2:c5:02:31:33:10:5c:29:ed:
50:61:2d:3c:66:15:49:17:fe:fd:19:87:9a:a9:63:75:24:3b:
d1:c1:16:4b:1e:0e:3b:a1:00:bf:8a:1f:2b:bd:7f:a2:95:21:
51:ad:a1:84:92:86:3d:40:45:d4:88:7f:13:56:66:b1:ec:76:
7e:32:af:a0:60:5e:9a:68:27:1d:01:3b:c5:5e:e4:91:70:71:
d5:45:5c:f9:80:c5:12:f4:ba:e3:c1:9c:38:95:9d:48:d6:be:
ec:ba:d2:61:1e:0b:30:f8:15:b0:98:53:74:f9:f2:58:78:a1:
9a:aa:93:85:d8:56:b2:84:52:1c:ee:76:e4:f1:5f:8d:28:2d:
a9:35:ca:d2:df:d9:ab:32:a6:06:df:57:22:33:0a:80:e3:d0:
39:e5:c6:ee:df:c0:75:e3:23:69:94:20:d9:f5:ce:e8:58:dd:
9a:55:05:cf:73:6e:a1:de:bd:3f:5b:e5:fc:91:d1:84:1a:cf:
a2:b6:95:14:fd:92:e0:9c:d0:b6:8f:e8:a7:cd:b9:eb:42:4e:
64:50:50:c9:65:79:25:8f:ea:06:e6:88:9f:57:b0:d4:bf:bd:
c0:6a:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:21:18 2026 by rpki-client