Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
File: ND2aiq7MjjRw4ShmzmdE256WEVA.mft (raw, json)
Hash identifier: Om4ji/ieIavTiDHZzViJgdMAm/uFraJzRMSO+jFt7ss=
Subject key identifier: 5B:0A:8F:05:59:AE:EB:08:A3:E4:0A:D4:AD:03:7C:16:A2:76:1C:47
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 019F916D8B182BAA22A5301A8BD720212AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:43 +0000
Manifest this update: Fri 24 Jul 2026 00:01:43 +0000
Manifest next update: Sat 25 Jul 2026 00:01:43 +0000
Files and hashes: 1: ND2aiq7MjjRw4ShmzmdE256WEVA.crl (hash: a7BQywHqCbO/dNhp+6JhdDIfdNJlpZgMxGN35Cl+FnY=)
2: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (hash: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:8b:18:2b:aa:22:a5:30:1a:8b:d7:20:21:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Jul 24 00:01:43 2026 GMT
Not After : Jul 25 00:01:43 2026 GMT
Subject: CN=5b0a8f0559aeeb08a3e40ad4ad037c16a2761c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:aa:18:6e:e5:84:71:a5:41:5a:20:03:2d:
86:ac:be:aa:75:cf:c4:fa:be:c3:76:0c:de:cf:db:
a4:1b:ba:f1:8c:e7:8f:18:9b:d2:2d:03:8d:96:4c:
42:5b:a7:05:bb:18:e3:44:30:ae:ae:73:83:99:1e:
6a:27:3b:1e:88:c5:e4:20:df:78:a3:34:ca:f6:1b:
76:91:a8:ae:40:8e:e5:00:d5:19:d7:1b:90:aa:a8:
d3:f7:80:75:53:db:24:9e:06:a9:3f:7c:a5:20:54:
25:d7:4c:b0:af:da:53:98:d8:11:f0:94:eb:11:5c:
c1:e1:31:10:79:27:c0:3f:53:81:9a:4a:e1:24:86:
4e:fd:7c:fc:d0:af:f6:f1:82:58:35:45:59:ed:f4:
58:b2:d0:ee:ff:34:42:ad:20:60:d1:6c:76:7c:88:
39:20:dd:fe:ca:3c:6a:1e:79:75:78:b6:ec:b2:a8:
06:8d:4f:7e:4b:37:80:2a:e3:e6:f0:92:63:c3:91:
71:6e:a0:38:3b:c8:c0:00:a3:eb:bc:54:cd:82:49:
5e:ca:90:d1:77:ae:2b:01:66:1b:24:6b:72:e2:03:
8f:7f:db:20:2d:4e:66:d8:f4:d8:b2:fa:04:80:ab:
87:84:02:23:02:c1:d0:8b:06:5f:1b:65:45:e7:6f:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:8F:05:59:AE:EB:08:A3:E4:0A:D4:AD:03:7C:16:A2:76:1C:47
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:51:6c:ca:2b:59:a8:fc:02:af:af:e1:15:bd:39:f8:0e:63:
23:a4:0e:ca:eb:2f:fb:22:ba:82:c0:1c:6f:e6:f3:2a:a8:b3:
3d:56:4f:50:87:bd:cf:78:24:e8:f5:e2:a0:49:ec:43:99:8d:
6d:92:00:4f:55:e6:97:72:95:a8:65:48:81:d9:63:4a:62:93:
b7:c0:66:67:2c:06:77:25:5e:50:68:f2:9e:6e:b0:b1:23:c4:
8f:31:68:50:70:15:09:b9:91:5f:c1:b7:d5:4b:1c:90:ba:e3:
37:39:62:9d:cb:df:ee:bc:b1:11:59:4a:84:7e:fb:c3:5b:bf:
b4:6c:d9:99:9a:14:1f:ba:b1:2e:93:47:fd:d9:76:45:96:99:
d2:60:82:8a:91:13:83:e4:5f:a7:dc:84:72:27:99:90:8b:a6:
4e:85:18:b0:cc:c3:24:20:3d:48:24:b8:28:9d:76:48:ec:47:
b2:6a:21:59:0b:0a:6b:17:ae:f0:19:a6:ad:df:90:36:9a:61:
1c:d2:03:0f:c3:a5:b2:72:48:d9:92:19:6b:88:f3:1b:da:ca:
68:0d:eb:69:f4:fa:fa:a6:13:4d:ba:a9:22:ef:db:38:a4:7b:
a9:04:e2:f9:fc:02:e9:5c:9d:d2:c8:79:8d:fc:de:33:0d:60:
34:17:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:27 2026 by rpki-client