Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: 7j21fOsnTiMAV/0oHxNxoUY0TC+MuN9+PdDWbYMwY4Q=
Subject key identifier: DC:3C:FF:8E:54:5A:28:31:BA:10:99:B3:44:06:C3:69:FC:3E:1E:58
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019FA97548BDE4783CBEE3609F52026FAC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 16:01:03 +0000
Manifest this update: Tue 28 Jul 2026 16:01:03 +0000
Manifest next update: Wed 29 Jul 2026 16:01:03 +0000
Files and hashes: 1: Fk_uxWdkQeYx2z70vxU8pKeQvYc.roa (hash: ktKC7e3hjBfZooC8pVGtH47x/POHGeRio9bH7/rdzsY=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: tfWVQ8GweGpfM0QwAIPzPTk4EHsYunwLafgb6Av69KI=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=)
5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=)
6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
7: oJ2ks5YNwiHAq9WzT5_4e1nkYaE.roa (hash: bo5UpeN+wQ6nH/bLCuevf6K58UPiHvne75tCF8e9eKo=)
8: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:48:bd:e4:78:3c:be:e3:60:9f:52:02:6f:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jul 28 16:01:03 2026 GMT
Not After : Jul 29 16:01:03 2026 GMT
Subject: CN=dc3cff8e545a2831ba1099b34406c369fc3e1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:7a:84:17:91:bd:a4:01:66:89:85:c7:28:
d9:23:50:35:ec:da:54:30:11:e6:f4:52:25:15:ba:
46:65:ad:9b:51:79:43:0f:b3:bd:85:3f:65:bb:21:
b4:c6:91:1d:4b:4e:ce:a0:4b:13:5d:2f:76:43:03:
5a:9b:98:9a:8a:59:f5:fd:f1:38:c7:8a:50:07:44:
8f:2f:f2:ad:e1:e4:94:2a:2a:0d:9f:35:3a:46:0b:
54:27:77:44:7f:5c:1d:bf:27:ea:13:87:7a:9e:9d:
44:f6:cb:ce:c0:67:cc:de:24:5d:6e:82:3d:ac:57:
e8:b5:9d:e5:23:92:12:56:de:9b:31:e8:99:77:c5:
aa:ca:57:32:8a:09:32:dd:f8:fb:3e:ac:67:59:65:
a4:38:24:22:f6:ed:bf:d3:0d:51:94:5b:5f:51:86:
cf:a6:1e:c2:6c:4c:43:b8:ac:34:f5:4e:89:52:b6:
7e:e4:89:20:31:1f:15:90:37:d0:7d:f8:24:60:8d:
8e:66:43:90:ec:55:13:d6:2a:4e:40:0f:26:39:90:
bd:48:bd:56:d8:2b:c0:0b:07:76:61:5a:57:42:04:
d3:14:30:15:3a:ed:91:a8:de:56:09:b4:1d:74:fd:
ae:87:41:33:4a:54:e5:ac:4f:05:73:36:63:98:1a:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:FF:8E:54:5A:28:31:BA:10:99:B3:44:06:C3:69:FC:3E:1E:58
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:85:a4:5b:e2:0b:b7:ca:f1:f4:1e:a2:9a:76:49:e1:f7:5d:
50:fe:64:fc:60:57:6c:ef:83:98:ba:23:6e:5b:f3:93:dc:2c:
35:a2:53:f4:f7:7a:ef:99:43:11:08:93:56:c8:35:29:84:ca:
82:c5:70:ae:13:ac:01:e1:6c:7f:ab:f7:2a:1e:47:7f:65:42:
b6:8d:56:9d:79:9d:fc:18:df:8b:ab:00:67:a9:94:fe:f8:96:
f4:cf:20:81:6c:e6:6a:8d:bf:05:13:c7:a9:78:8f:b4:ee:1a:
60:a6:2c:a2:79:9f:d4:18:1d:89:8b:c0:c9:2d:d6:6b:1a:0e:
16:35:c3:30:3c:f3:dd:82:7e:01:4b:eb:82:29:17:a6:f0:f0:
7e:68:7e:04:e1:c2:59:32:a9:ab:04:b1:7a:8f:15:dd:ae:fd:
0e:c6:84:a5:2b:93:28:20:68:2c:8d:a9:f5:80:be:9f:f7:19:
18:ba:e1:dd:85:7a:8e:52:4e:3b:73:84:ab:11:31:03:92:c5:
ae:89:e3:d6:12:25:12:7c:20:fe:28:65:04:c5:2c:3f:80:81:
19:61:7e:51:c9:48:9a:b4:68:5c:2c:69:3f:8b:4e:44:f7:f4:
4e:88:26:bd:0e:cc:84:cf:41:12:03:8a:07:c8:e8:dc:29:05:
b2:26:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:40 2026 by rpki-client