Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: qXSmsIzeVcBRI4EaUyLCeHigZyqu1R6L7rCt5jcrtIo=
Subject key identifier: 85:6B:5F:38:ED:D0:8D:33:C4:AA:94:09:B4:C9:BC:D3:10:13:49:97
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019FA9AC6D65005014A6A4221AF220F7672D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0DB1
Signing time: Tue 28 Jul 2026 17:01:17 +0000
Manifest this update: Tue 28 Jul 2026 17:01:17 +0000
Manifest next update: Wed 29 Jul 2026 17:01:17 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: WDjofcRRhA8xY7pB7PtnZQV2+fj2EN0Bn2Dx+tuTWSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:6d:65:00:50:14:a6:a4:22:1a:f2:20:f7:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Jul 28 17:01:17 2026 GMT
Not After : Jul 29 17:01:17 2026 GMT
Subject: CN=856b5f38edd08d33c4aa9409b4c9bcd310134997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:1e:05:ef:58:00:f2:fa:25:d4:6a:52:46:
cd:50:52:40:77:e9:0f:42:a8:9c:ae:bd:77:af:f7:
68:c4:cc:f6:18:14:be:b2:d0:00:0d:92:20:0a:02:
e1:f2:d6:c9:85:d6:14:4e:f5:f8:db:80:af:c9:e0:
b1:fa:cf:c0:6e:2d:7c:e0:d7:72:88:07:bb:06:98:
c9:59:66:b5:6a:ba:f9:8d:3a:63:00:e0:02:37:40:
dd:13:47:a4:13:3e:c3:1a:46:ba:ff:e3:c2:58:2a:
0e:8e:79:2d:92:47:f4:a6:6f:73:bc:3e:8a:f2:01:
d9:b7:1e:07:cc:55:b0:0e:34:53:c8:98:c4:e4:6c:
11:c6:67:d1:06:5b:87:25:0d:23:9c:a5:df:c6:42:
48:b4:40:c9:77:76:22:f4:88:86:10:31:0b:9e:6f:
f8:04:76:71:8c:2d:6a:0f:ae:bf:d0:0a:40:2f:86:
a0:9c:b1:38:a8:35:49:22:01:c9:5a:17:bf:11:68:
e7:c0:f1:cd:9e:6b:8c:69:c3:60:42:29:b6:38:94:
25:ba:a1:f1:88:18:26:dc:97:a8:39:58:d3:08:cf:
d5:85:44:13:76:2b:72:1c:2e:d7:44:51:98:3a:ba:
2f:d3:8c:1b:6c:b8:fb:b4:5d:b0:4f:67:65:48:05:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:5F:38:ED:D0:8D:33:C4:AA:94:09:B4:C9:BC:D3:10:13:49:97
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:95:3f:ad:80:41:8e:6f:79:7d:ce:f6:10:be:94:87:70:
ec:eb:2c:12:6c:da:db:8a:c7:49:b9:bd:3a:f6:7a:6c:f9:fc:
54:f4:16:9e:17:a6:8c:3d:81:17:68:c2:a2:28:77:4a:f4:a2:
9b:ee:c1:61:91:72:db:be:ee:44:06:8a:78:d5:3c:87:79:d5:
6c:a5:21:27:a5:ff:1f:22:62:c4:56:ed:6c:55:b0:07:33:28:
5b:5d:33:97:d4:f6:06:29:0e:32:95:2c:f5:3b:d1:b9:32:45:
24:a7:0d:3a:83:57:2a:1a:f1:1f:5a:93:38:d5:0d:ce:c0:ca:
24:14:0e:45:24:a6:75:4d:f4:a7:ed:d0:38:68:e0:ca:46:3c:
3c:f6:ee:27:74:86:b9:f1:1b:82:a2:b5:26:e5:dc:8c:df:70:
49:9c:9c:ea:e2:b9:f2:13:09:08:67:35:bb:e8:c2:09:93:bc:
72:cf:1e:64:48:d4:fe:24:ad:eb:bb:b1:2b:e1:38:8a:5b:9e:
84:96:83:ad:c8:63:4b:7b:7a:4c:ec:ae:d4:20:e2:0a:07:dc:
dc:16:b7:79:d6:6b:c4:31:74:c2:42:15:e9:3b:10:37:a2:3c:
f3:c0:07:39:bd:e3:55:ea:bf:24:e6:05:c7:80:83:1c:29:44:
3d:80:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:23:51 2026 by rpki-client