Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
File: nTHCM8vSZtsCYgud65DQjkFpLmc.mft (raw, json)
Hash identifier: X1Nx2FUr0MlAZ8M0f/Wltw4X2HB109tosjnpdOjvAyw=
Subject key identifier: C3:35:0B:F4:85:CD:F5:6B:45:BB:F9:4B:8C:AA:BA:78:62:6A:CE:87
Authority key identifier: 9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
Certificate issuer: /CN=9d31c233cbd266db02620b9deb90d08e41692e67
Certificate serial: 019FA9750B7D75C24624A80977CEFAB775C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
Manifest number: 10B3
Signing time: Tue 28 Jul 2026 16:00:47 +0000
Manifest this update: Tue 28 Jul 2026 16:00:47 +0000
Manifest next update: Wed 29 Jul 2026 16:00:47 +0000
Files and hashes: 1: 3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa (hash: RwQ/Qy1kKylc45gWPZOazTOGnIJ82QduJgu3sQQqwXY=)
2: nTHCM8vSZtsCYgud65DQjkFpLmc.crl (hash: e/OE4xi3duvDSGe7yze5f18SLQVDnEKAMVtc4HArcyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:0b:7d:75:c2:46:24:a8:09:77:ce:fa:b7:75:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d31c233cbd266db02620b9deb90d08e41692e67
Validity
Not Before: Jul 28 16:00:47 2026 GMT
Not After : Jul 29 16:00:47 2026 GMT
Subject: CN=c3350bf485cdf56b45bbf94b8caaba78626ace87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:01:8f:1c:4a:56:4e:7b:0b:e4:3f:cf:ad:
ad:28:ca:0e:22:bb:de:b2:97:dd:2f:6b:84:2b:37:
4a:af:08:3b:3f:b9:80:9b:df:35:37:e4:c2:54:48:
84:64:0d:9b:7f:4f:44:b4:35:3b:c3:51:65:e1:65:
8e:10:1b:f5:45:dd:ed:ac:b1:3e:76:cd:19:f8:ce:
e9:73:ae:75:71:26:c5:88:1d:78:7c:2a:22:09:b3:
c6:f5:6e:e4:29:7e:71:a6:63:21:8a:34:ef:84:f5:
9b:cf:b0:b7:14:7c:00:13:68:06:7f:00:88:e5:43:
0a:83:97:c1:05:a5:39:e1:c8:a7:d9:b5:6a:6a:33:
f8:fe:0b:45:e8:7f:c9:34:d7:d7:94:00:9f:35:ab:
d8:48:d0:fc:7d:da:29:85:08:33:83:94:aa:3f:ce:
fe:3e:28:cf:e0:b9:d9:d6:8c:89:e2:f5:09:e7:5a:
7b:e9:4b:a8:a0:34:42:81:4f:01:3f:a8:3d:6d:6b:
a1:54:0d:c2:ff:13:43:d5:fb:0e:a0:60:af:d0:ec:
22:67:81:4d:4a:63:64:5c:7c:1d:a1:1a:1b:b6:06:
37:7e:87:b2:85:35:c1:70:ba:1f:c8:c7:01:b9:2a:
61:00:5a:63:67:85:b6:81:84:96:7e:2b:ea:e4:24:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:0B:F4:85:CD:F5:6B:45:BB:F9:4B:8C:AA:BA:78:62:6A:CE:87
X509v3 Authority Key Identifier:
keyid:9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:59:af:b5:28:d8:6c:e5:ab:12:24:40:6f:b3:40:e9:11:fc:
fc:c2:ee:0c:f6:18:d8:fa:67:06:b3:53:ff:01:09:33:b7:3f:
11:b4:17:a0:7d:29:d0:f7:55:08:cc:48:4a:41:7d:7b:6d:30:
d9:b9:e7:b2:04:36:e5:97:5f:25:a4:8b:7e:75:e8:78:d8:7d:
35:ec:a4:38:5f:da:b2:cb:37:d9:90:d7:30:29:a4:ce:53:25:
81:a0:35:7b:7b:57:e6:59:a0:dd:28:ab:c2:6b:0e:00:6c:28:
c7:be:73:3b:e4:00:73:5e:43:f6:db:8e:c0:c7:ab:d6:ac:0c:
55:ee:67:d6:97:fb:a6:ee:92:35:ef:76:d2:2e:af:35:e5:bd:
a7:3a:25:de:81:4e:d7:68:ce:02:1e:78:67:b8:62:95:1c:4f:
7b:9e:92:5d:43:33:58:79:d1:3b:8f:1c:40:24:d0:d8:bc:fa:
d5:1a:e8:3e:a7:2c:4c:93:3b:94:05:b6:bc:54:d9:24:25:4b:
91:06:1b:99:75:9d:fb:81:1e:07:f5:9e:4f:a5:1e:f1:33:18:
7b:b9:40:2c:b3:4c:b3:e8:c1:c7:3d:4f:b8:92:e2:ee:6d:01:
af:8d:02:e4:43:af:54:47:5f:97:20:b1:03:46:24:24:10:3d:
7c:01:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:22 2026 by rpki-client