Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: fCMYj7UHxqke3YYoKIFQFGPPweS6A+kJh60DwX0Rvd4=
Subject key identifier: CC:AD:20:55:0F:6F:04:42:92:6F:17:C6:7B:6F:8E:6C:01:D1:2D:2E
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019F92ED1AB6A7D846A3CD8297B54FFF48F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 0307
Signing time: Fri 24 Jul 2026 07:00:39 +0000
Manifest this update: Fri 24 Jul 2026 07:00:39 +0000
Manifest next update: Sat 25 Jul 2026 07:00:39 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: uiQRk2nY/g6BlELMAue13yhZRpWNg+nP/WYAFyPQpqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:1a:b6:a7:d8:46:a3:cd:82:97:b5:4f:ff:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Jul 24 07:00:39 2026 GMT
Not After : Jul 25 07:00:39 2026 GMT
Subject: CN=ccad20550f6f0442926f17c67b6f8e6c01d12d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:c3:0e:2e:d6:2a:e3:05:9a:cd:71:40:f5:
90:83:0c:a5:a5:da:f7:cd:71:fb:05:8f:77:87:82:
61:53:95:2d:d7:38:76:d4:48:dd:f1:54:6d:d7:31:
87:05:ee:54:0e:c1:75:c6:12:9a:64:9b:e9:46:9e:
c5:45:d2:65:be:bb:af:1f:34:1d:b7:04:5e:7b:5a:
f5:9d:b5:1d:c3:8f:5e:6d:0f:6e:3b:35:66:2d:eb:
25:19:47:21:1e:15:c5:10:13:59:90:0b:f0:f8:80:
ab:d8:5d:b9:f8:67:33:40:a1:96:27:f6:fd:f6:77:
ad:48:56:dc:b0:48:3d:79:49:9c:02:4c:bf:57:35:
57:10:29:b0:03:e7:bc:a5:70:db:1e:b4:0e:a2:83:
83:09:53:d6:03:91:71:3c:65:ca:7d:4d:f0:c4:58:
a5:61:82:56:b6:bf:a6:e8:fc:e4:79:91:46:65:23:
ab:09:f7:ab:2d:3b:e3:ea:74:ca:26:6b:c8:d4:e1:
b4:51:8a:e4:be:2d:15:4b:9d:35:61:53:10:77:11:
cf:07:e7:8b:7b:1d:68:47:62:e1:d6:0e:8c:2b:14:
35:2c:12:27:e0:3b:2f:4b:cc:2f:c5:e2:6d:73:76:
80:3a:6e:ae:54:dd:b2:ca:fd:83:2a:5b:21:f3:e2:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:20:55:0F:6F:04:42:92:6F:17:C6:7B:6F:8E:6C:01:D1:2D:2E
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:af:8d:e1:c4:54:fa:a4:be:d4:68:86:98:f5:a5:10:56:e0:
55:06:30:99:52:0e:f1:86:89:ba:b6:97:02:6b:f3:78:55:4a:
a8:29:f7:f9:c3:ec:19:4e:68:c9:a5:5a:0e:3a:7e:2a:c6:4b:
2e:28:96:06:13:1f:66:6a:d9:e5:66:25:14:10:2c:43:15:c6:
dc:20:b3:8f:b4:ed:21:6c:3a:2f:93:84:12:18:59:69:55:49:
6f:d5:8e:74:35:27:e5:8f:13:2c:08:17:bc:fe:83:b2:5a:50:
9a:2a:35:90:97:70:7d:7e:19:ab:f0:e5:ce:5d:80:40:2d:04:
43:56:a6:29:ca:55:0e:f1:5a:65:62:6a:77:21:00:4a:61:7d:
b1:ba:b4:35:68:bb:93:84:72:94:cb:5b:b2:dc:96:58:44:bf:
ba:f7:f4:be:20:b6:87:3e:e8:cf:b3:d5:ca:4e:1d:ac:a0:50:
36:62:b3:73:2d:42:b1:50:9c:cd:0f:ee:d0:4e:46:15:d9:65:
1f:36:d7:45:86:a8:c9:28:a6:ef:ab:30:b6:43:74:60:e4:59:
ff:23:f4:41:f3:90:31:90:f5:18:09:dc:95:64:84:38:4a:6a:
3d:6b:d5:83:17:c4:10:25:9a:1f:b5:d2:b5:b2:49:be:7c:47:
20:70:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:06 2026 by rpki-client