Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: UjhuFMyI3e9IrEvN+H1YvZLrUNc2s8RVoKKy3mbSzM0=
Subject key identifier: 36:61:5C:2D:4D:7A:77:4F:96:2A:A8:80:A2:DF:19:71:10:D9:41:A0
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019FAABEA736F824F0315FAFB97D46E562CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:48 +0000
Manifest this update: Tue 28 Jul 2026 22:00:48 +0000
Manifest next update: Wed 29 Jul 2026 22:00:48 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: RqCe/bHoO8lOWw3wikgLVyyK+eAp2+xAdnOzdBxUTBE=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a7:36:f8:24:f0:31:5f:af:b9:7d:46:e5:62:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jul 28 22:00:48 2026 GMT
Not After : Jul 29 22:00:48 2026 GMT
Subject: CN=36615c2d4d7a774f962aa880a2df197110d941a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:5b:0d:80:21:4a:e9:b0:c0:52:f1:6d:48:
71:c0:f2:fe:3c:d8:7f:da:15:9e:5a:a2:3c:5f:0d:
8f:aa:18:ee:7d:d7:56:14:68:6b:65:c1:66:c0:9d:
bb:c0:bb:f6:fe:6a:52:c7:f5:26:f3:02:ab:ee:cd:
7e:1d:1e:70:18:70:9b:ed:b3:e1:ca:d0:c9:69:43:
9b:80:34:88:1b:e8:00:06:0a:bf:26:dc:a5:87:c0:
13:ae:78:56:66:35:3a:cf:39:cd:11:7f:4e:3b:0d:
9a:8e:f9:7b:1c:9b:7b:48:0e:c9:83:22:73:86:7a:
88:26:e0:e1:b3:2d:be:85:fa:36:ce:99:62:d9:25:
5b:56:ef:62:d1:16:4a:bf:4d:e6:dc:57:88:cc:e8:
50:03:3e:b5:53:d3:34:bc:59:2f:9f:b6:0e:fb:24:
ab:a8:26:22:db:11:c0:19:69:98:9f:0b:ba:b8:b6:
79:33:42:17:d9:fc:12:bf:56:dc:41:34:75:77:d1:
1d:c1:f2:db:a1:10:d7:6c:04:ca:7d:41:73:86:fc:
df:ef:63:65:5c:e2:90:d9:c0:51:ec:8f:cf:0f:1c:
15:43:8f:01:45:7b:fc:da:fc:6f:98:e4:d3:2c:df:
99:0c:16:54:6d:0b:2a:a5:40:1d:5b:3e:59:e1:be:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:61:5C:2D:4D:7A:77:4F:96:2A:A8:80:A2:DF:19:71:10:D9:41:A0
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:f2:f1:86:f8:71:c0:ce:87:54:07:bf:50:7e:64:d9:42:
b4:d6:81:08:bd:79:1e:af:01:08:7f:d7:be:76:b4:2d:10:2f:
f5:48:8b:43:18:f5:45:d3:1d:dd:a7:64:91:57:78:2e:97:72:
79:53:be:fe:69:21:9a:51:5d:6d:e1:a9:b6:71:1e:6a:10:13:
24:4b:d2:46:15:5f:fd:06:8a:79:ad:1d:12:58:2e:ef:87:8c:
58:43:29:64:0e:6e:75:a3:11:57:8e:26:4a:b0:f3:99:21:7d:
e1:87:f3:4c:79:b3:9e:4f:64:3c:31:1b:c3:6f:eb:88:27:42:
44:f7:d4:35:67:52:82:3d:7c:6f:93:ff:ac:9d:68:a7:58:da:
d0:f3:f9:a2:d5:39:cc:1e:af:c5:0f:e1:ef:15:d4:5a:2f:31:
db:7c:db:8e:cc:af:31:de:a0:05:86:66:89:fa:6f:fc:1d:f4:
35:41:e9:c8:9c:b6:fa:5f:24:56:cd:f8:27:52:42:56:99:d0:
d4:87:45:45:63:2c:71:0c:24:8b:82:29:a9:c5:00:ff:5d:fb:
4d:97:59:db:6e:3f:88:9b:2e:3e:06:0c:4c:71:09:b1:e5:61:
35:07:d4:36:9c:93:ce:57:54:c7:dd:e3:b0:4d:7e:4c:99:87:
da:51:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:01 2026 by rpki-client