Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: 89q+5YV8jRY/X8AT8f8a1FrnDBw82GtvYgz/f9SsFaQ=
Subject key identifier: F9:90:87:4C:37:E6:F0:BE:FC:70:32:15:D9:37:3A:FD:99:EB:1D:E0
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019FA9AC545FD3571000D288519BF37092E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 1105
Signing time: Tue 28 Jul 2026 17:01:10 +0000
Manifest this update: Tue 28 Jul 2026 17:01:10 +0000
Manifest next update: Wed 29 Jul 2026 17:01:10 +0000
Files and hashes: 1: L1KLoii7mllBm2dQe2-Gj8PsyDI.roa (hash: zs3GHCL4mut8DK7aF4W8FvASTk6ZHfaiz6+KBdL52cY=)
2: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
3: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: RTC1FUB5BJU1PvnowgvMnqCRqHBvn2ajZHTocMcov6k=)
4: TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (hash: AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:54:5f:d3:57:10:00:d2:88:51:9b:f3:70:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jul 28 17:01:10 2026 GMT
Not After : Jul 29 17:01:10 2026 GMT
Subject: CN=f990874c37e6f0befc703215d9373afd99eb1de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:2e:56:91:f0:4b:31:ae:aa:82:58:83:5e:
30:6b:43:84:bf:b7:75:08:db:fa:17:d1:cb:f8:67:
63:b5:7e:53:d8:00:9e:7b:e5:08:a4:21:e2:e1:e4:
8a:14:ed:be:a6:5e:a9:71:0b:2b:0d:19:bf:a3:a1:
ce:19:30:13:4f:6e:5c:a5:cb:27:fc:e1:6c:a5:8b:
48:64:c7:ed:ff:24:44:f0:55:a7:7a:32:b3:b7:80:
ec:d8:9d:fb:8b:e0:f2:08:d4:f1:75:a1:ce:fd:b3:
65:73:a3:13:0c:2f:b1:8a:50:10:1b:5d:e1:e4:4a:
37:d3:85:29:d3:c0:09:1f:d1:e6:2b:59:69:03:03:
55:bf:97:d7:04:8c:72:09:37:e4:9b:d0:39:48:64:
0d:af:c6:1a:2e:28:e4:d0:be:2a:29:5e:cc:79:cb:
fc:2c:f5:cd:16:7a:e2:3e:1c:75:bd:7f:a1:55:5b:
b8:8e:ae:5b:aa:f8:11:a5:ea:65:45:26:39:64:c1:
32:87:ae:60:5d:f2:ca:b0:1a:2f:3a:b2:de:90:b6:
ea:5b:93:3e:d8:66:b8:13:8e:f3:7d:c9:1d:0b:5e:
f2:e6:76:b5:ba:dc:0c:5b:11:15:38:bb:d9:d4:02:
9f:da:91:f2:7b:65:97:98:b3:48:0a:54:e1:be:ed:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:87:4C:37:E6:F0:BE:FC:70:32:15:D9:37:3A:FD:99:EB:1D:E0
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:84:a7:76:01:38:80:88:b8:ec:1c:d4:02:03:4e:bc:04:
9a:02:d1:05:d9:b2:62:dd:b6:5b:d2:91:76:df:fe:e5:6b:0f:
1b:8e:1c:2e:de:db:0d:2c:e9:5d:28:ed:49:29:c8:21:38:ad:
1c:23:16:77:e0:60:63:78:99:ab:e3:ca:ee:72:3d:6e:29:89:
32:ef:77:87:1a:54:28:78:d8:7a:43:9f:98:30:60:25:03:a5:
3f:1a:d3:11:18:d8:7d:a6:50:ff:4c:a9:ac:67:6c:a2:d4:1c:
4e:f0:03:38:b3:38:e7:29:6f:62:ba:b5:77:7f:90:95:b2:ef:
fc:97:5b:47:d0:ca:b9:88:46:ff:f9:c4:bf:86:05:04:4b:3a:
bb:3f:00:65:bf:bb:9f:2f:19:a9:d7:cb:28:25:17:5e:6c:a5:
cb:99:89:72:5c:2d:cb:16:8a:9f:b3:88:29:6c:e2:44:f1:1e:
9c:29:a7:c0:bc:2e:0f:cc:78:ab:b1:5e:19:b3:42:ed:76:e2:
2e:8c:10:09:18:c2:a3:ca:94:fb:07:e4:85:76:31:95:41:a6:
0c:0f:ac:64:f4:86:31:2d:42:73:3b:d2:23:bf:6e:d8:d2:a0:
8a:47:27:9b:c3:28:55:55:22:e7:1f:4e:dd:18:93:4b:e5:85:
15:8b:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:19 2026 by rpki-client