Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
File: Nw9PXYTCtc7jxukDy1MNapH0BLo.mft (raw, json)
Hash identifier: tYlOHTFzC+drixKsiovMWH1CBPn8JFm5yvUssElmYgY=
Subject key identifier: 91:E9:82:50:D7:10:52:A8:95:3B:B7:19:55:18:69:89:2B:C7:F3:86
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019FA93E43D4A5157A908BB8B09A6E93ABF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
Manifest number: 4E
Signing time: Tue 28 Jul 2026 15:00:57 +0000
Manifest this update: Tue 28 Jul 2026 15:00:57 +0000
Manifest next update: Wed 29 Jul 2026 15:00:57 +0000
Files and hashes: 1: Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa (hash: p8sAzT87uCiO5lnenDGKFMx6AhGEdEoqJ/Myeptn3ZU=)
2: HUTjNxMDyTWfIeACtHVXKD8A41A.roa (hash: JXFmwel69gCfyCsynPXE0VRtMMoBcAjcMhowe4HtpoI=)
3: Nw9PXYTCtc7jxukDy1MNapH0BLo.crl (hash: VJV4aW+sCdkqxF8e5it0uwjEaMGjy3KYRP8KaQHg8is=)
4: ZL6zrkemzEADAhC0Fi3nhK_pom8.roa (hash: vHAbtfbPDaOsa5CvBYtUditrWJEPKQpb6oj185KbRTc=)
5: etGPt2jesAgywvKvXb4eae0QhGs.roa (hash: O32NEww1ELuE+mxxWCi+G2R5kqYIhKJafeEnMHRBI8I=)
6: jltpBKXiQBCP3TAqLQdxnsIEzXE.roa (hash: G4dhanvX94kK84q1bgMQYY5NYjqmSMrIZgDUfvnVnxI=)
7: uBliW8lm_-Es_oU23ZIgU9wo5GE.roa (hash: zArbV+ovixZNJT5zlNVtmsFx8eat6ALekSg9jiC4bKY=)
8: zgvEdMDZHbRR3S85g3W5-vdoz24.roa (hash: gVCQ/4xNYvogByqiF6Uw696rFdgMuXOWFwRJziSooto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:43:d4:a5:15:7a:90:8b:b8:b0:9a:6e:93:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 28 15:00:57 2026 GMT
Not After : Jul 29 15:00:57 2026 GMT
Subject: CN=91e98250d71052a8953bb719551869892bc7f386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:77:5a:be:91:8c:6a:00:bd:44:98:f3:85:
76:e1:c7:b8:76:4d:84:e7:71:7c:18:22:91:57:b0:
42:2e:0d:f5:1f:cf:5a:4c:19:1d:bc:db:62:d0:a2:
b6:d1:e8:6e:98:a0:18:0b:3a:2b:6e:59:20:7f:c4:
e8:e3:32:e0:42:08:ee:12:81:7a:18:dc:6e:98:29:
29:26:37:8c:6a:86:f3:09:ce:8f:3c:47:6f:1a:8b:
5d:2b:48:8c:9e:f3:78:49:39:ea:ae:f5:18:46:eb:
01:8e:cc:c2:bd:4a:4f:77:71:47:6e:db:60:20:43:
87:54:89:1b:4a:b0:c1:9c:df:76:64:21:14:d9:47:
22:77:0a:6d:06:7d:37:be:d2:cd:79:5f:4b:80:79:
4b:19:d5:ab:05:ac:42:43:63:6b:28:8b:01:be:03:
5e:0a:6e:56:71:f0:ae:58:4b:7a:e0:c1:46:da:56:
72:02:6a:2b:8c:0d:32:57:02:5e:10:e5:57:6b:9e:
7d:51:03:62:f9:7e:40:a8:79:d2:9b:31:25:d1:3c:
5e:2a:2f:a9:4a:03:cc:fd:69:88:24:8b:dd:30:73:
a4:b5:ab:af:0d:2e:7d:15:64:04:ef:52:b1:ac:47:
36:1a:22:c3:5f:76:6b:bb:f4:2e:fe:b0:e5:ff:7e:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:82:50:D7:10:52:A8:95:3B:B7:19:55:18:69:89:2B:C7:F3:86
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:d1:b6:d7:f1:48:7c:b1:b9:cf:5c:74:cf:6f:7e:52:94:
da:7d:bf:79:8c:8c:39:8b:9a:44:28:22:1b:45:a3:46:00:51:
b5:d1:89:43:f3:58:99:da:4e:31:bd:d6:53:ef:34:ae:f8:b5:
6e:a2:00:f5:b9:af:cf:eb:6e:9a:e7:21:ab:66:9a:db:97:3e:
90:4c:16:d2:11:9f:d3:ef:79:e9:cc:48:a3:62:f7:b4:b2:09:
4f:2a:a0:1c:76:b8:6c:65:ae:ea:8e:c2:f4:ed:86:fb:65:6b:
8f:78:d0:b2:6e:9e:aa:06:e4:a8:12:44:90:83:aa:8d:45:00:
0b:6e:ca:ad:fa:14:ca:f8:e0:0d:53:bc:b9:b4:c0:6c:8e:e3:
55:7e:a8:e9:7f:29:d6:15:86:8b:a5:f6:c0:94:32:3e:7f:5e:
4a:9a:7b:49:92:49:39:c4:44:b1:1e:bd:89:31:08:18:06:f6:
a4:c3:bd:8e:fb:dd:89:2d:11:4d:fc:31:b8:21:ad:0c:d2:5d:
fc:35:30:04:11:e2:58:6a:3a:e3:a8:55:7a:0b:3a:e1:e4:2e:
e8:72:c0:70:b3:44:b6:93:42:f8:5d:77:f0:e1:32:8e:15:9f:
36:1b:22:76:87:e2:4a:3d:24:ac:05:c0:25:2b:d3:7e:a8:57:
49:8a:89:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPkPUpRV6kIu4sJpuk6v0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGY0ZjVkODRjMmI1Y2VlM2M2ZTkwM2NiNTMwZDZhOTFm
NDA0YmEwHhcNMjYwNzI4MTUwMDU3WhcNMjYwNzI5MTUwMDU3WjAzMTEwLwYDVQQD
Eyg5MWU5ODI1MGQ3MTA1MmE4OTUzYmI3MTk1NTE4Njk4OTJiYzdmMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxh3Wr6RjGoAvUSY84V24ce4dk2E
53F8GCKRV7BCLg31H89aTBkdvNti0KK20ehumKAYCzorblkgf8To4zLgQgjuEoF6
GNxumCkpJjeMaobzCc6PPEdvGotdK0iMnvN4STnqrvUYRusBjszCvUpPd3FHbttg
IEOHVIkbSrDBnN92ZCEU2UcidwptBn03vtLNeV9LgHlLGdWrBaxCQ2NrKIsBvgNe
Cm5WcfCuWEt64MFG2lZyAmorjA0yVwJeEOVXa559UQNi+X5AqHnSmzEl0TxeKi+p
SgPM/WmIJIvdMHOktauvDS59FWQE71KxrEc2GiLDX3Zru/Qu/rDl/342fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHpglDXEFKolTu3GVUYaYkrx/OGMB8GA1UdIwQY
MBaAFDcPT12EwrXO48bpA8tTDWqR9AS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq7Rttfx
SHyxuc9cdM9vflKU2n2/eYyMOYuaRCgiG0WjRgBRtdGJQ/NYmdpOMb3WU+80rvi1
bqIA9bmvz+tumuchq2aa25c+kEwW0hGf0+956cxIo2L3tLIJTyqgHHa4bGWu6o7C
9O2G+2Vrj3jQsm6eqgbkqBJEkIOqjUUAC27KrfoUyvjgDVO8ubTAbI7jVX6o6X8p
1hWGi6X2wJQyPn9eSpp7SZJJOcREsR69iTEIGAb2pMO9jvvdiS0RTfwxuCGtDNJd
/DUwBBHiWGo646hVegs64eQu6HLAcLNEtpNC+F138OEyjhWfNhsidofiSj0krAXA
JSvTfqhXSYqJlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:15 2026 by rpki-client