Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
File: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft (raw, json)
Hash identifier: gjkgvdBau7zkBBzR4EBpsmc1sWs4E2uVpob33blXWWw=
Subject key identifier: C1:ED:C3:7B:1C:59:D2:E4:01:51:7D:FA:19:3F:5C:C9:C0:89:38:99
Authority key identifier: 9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
Certificate issuer: /CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Certificate serial: 019F916CAB2E3AA3A427E333DBDF3DBEF4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:45 +0000
Manifest this update: Fri 24 Jul 2026 00:00:45 +0000
Manifest next update: Sat 25 Jul 2026 00:00:45 +0000
Files and hashes: 1: gHVOtIUlfqN9G-25nat8LNgWMC0.roa (hash: ZCyCPqJleAxlPygSUagqhGWeE2V/DZgzKMbA0GGYnGw=)
2: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl (hash: 4p4VfCSUaSmvRzrwvvpjn8zkGwKvFxXQmt2FZsdRfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ab:2e:3a:a3:a4:27:e3:33:db:df:3d:be:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Validity
Not Before: Jul 24 00:00:45 2026 GMT
Not After : Jul 25 00:00:45 2026 GMT
Subject: CN=c1edc37b1c59d2e401517dfa193f5cc9c0893899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:6a:ca:00:d9:5d:0a:e4:75:90:e0:65:de:
f6:7d:13:9a:9a:11:49:b3:a0:0e:78:c2:ad:6a:18:
c5:37:96:4c:7e:6a:00:59:4d:2f:d7:f2:ee:84:6f:
fb:5a:5f:fe:22:ee:4e:e2:de:eb:0d:9e:e7:02:13:
95:f8:1a:ea:32:4f:33:e2:82:b4:15:5f:dc:ec:20:
33:b2:34:51:e0:6c:cb:f8:da:6d:c0:91:a8:c8:bc:
e8:10:e4:41:16:7f:d0:4b:b0:3b:c5:00:40:3f:3b:
32:b5:92:58:ec:2d:ce:6f:31:02:cc:31:cb:f9:65:
f3:55:c9:6b:f4:95:2f:b8:3e:6f:6f:56:0e:ed:14:
06:84:12:e5:50:31:38:38:88:18:e5:14:02:ce:6b:
24:d0:62:1c:2e:16:6b:81:5a:38:2b:09:34:59:37:
23:01:e7:7c:d1:c7:72:46:95:3c:8d:5f:09:0a:27:
ab:f9:08:09:34:28:d3:19:26:0b:f2:7f:6f:6d:1c:
a3:a5:9c:0f:0d:ba:23:d3:b6:a9:00:e3:af:8e:3d:
be:ca:01:16:66:61:a7:9b:86:6e:ed:90:15:6a:d7:
a8:f2:e7:4b:ed:33:ef:3e:75:6c:3b:fa:bf:c7:9f:
22:2b:9b:44:41:54:32:d4:b5:d3:36:c8:45:35:67:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:C3:7B:1C:59:D2:E4:01:51:7D:FA:19:3F:5C:C9:C0:89:38:99
X509v3 Authority Key Identifier:
keyid:9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a2:c5:c6:0e:d5:06:42:11:f2:da:50:fe:b7:48:5f:7d:3b:
11:4c:47:c6:11:09:0e:34:45:87:9e:3d:16:7c:cf:ab:3e:86:
9a:b3:22:55:67:11:c3:fb:8d:39:ae:6d:b4:52:c8:07:44:5c:
07:50:d3:2f:29:8c:50:3b:96:c4:47:99:69:6e:3e:e3:8b:5a:
be:18:e0:7f:28:86:f6:1d:7f:c3:1f:c9:72:a3:40:71:96:95:
05:6a:5b:a4:0a:8c:4b:3e:7e:a7:c6:ad:c2:9a:a3:3f:2a:4b:
2f:4e:bb:68:27:12:34:d2:76:ab:26:f0:97:8e:bc:b2:32:8a:
d5:8e:a9:09:37:32:5f:b3:60:19:74:0b:a0:ae:fd:56:f7:57:
8e:58:dc:b5:d5:54:23:ba:da:9c:12:b0:60:6d:12:9a:3b:96:
45:14:95:b8:fe:48:03:d1:8c:4d:e9:4f:e4:39:f4:97:f1:02:
76:f3:22:05:33:a6:2c:84:f5:87:67:8e:aa:b1:68:7b:82:2d:
9b:d3:5f:f8:b4:96:97:fe:0b:0d:ad:fb:f8:56:e5:68:1e:73:
32:8d:ca:ac:d2:0d:d6:08:26:c8:1d:25:8e:ad:48:d5:9f:60:
21:86:e7:07:6f:70:00:c0:63:c4:02:7f:91:61:cf:96:9c:27:
2c:0e:66:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbKsuOqOkJ+Mz2989vvTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDc4MDZiODlhNGNlNTkzZmU0N2NiYjVmOTQ2MGM4ZGVl
NzM4MWUwHhcNMjYwNzI0MDAwMDQ1WhcNMjYwNzI1MDAwMDQ1WjAzMTEwLwYDVQQD
EyhjMWVkYzM3YjFjNTlkMmU0MDE1MTdkZmExOTNmNWNjOWMwODkzODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA011qygDZXQrkdZDgZd72fROamhFJ
s6AOeMKtahjFN5ZMfmoAWU0v1/LuhG/7Wl/+Iu5O4t7rDZ7nAhOV+BrqMk8z4oK0
FV/c7CAzsjRR4GzL+NptwJGoyLzoEORBFn/QS7A7xQBAPzsytZJY7C3ObzECzDHL
+WXzVclr9JUvuD5vb1YO7RQGhBLlUDE4OIgY5RQCzmsk0GIcLhZrgVo4Kwk0WTcj
Aed80cdyRpU8jV8JCier+QgJNCjTGSYL8n9vbRyjpZwPDboj07apAOOvjj2+ygEW
ZmGnm4Zu7ZAVateo8udL7TPvPnVsO/q/x58iK5tEQVQy1LXTNshFNWf7ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHtw3scWdLkAVF9+hk/XMnAiTiZMB8GA1UdIwQY
MBaAFJ0HgGuJpM5ZP+R8u1+UYMje5zgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFlQWE0bWt6bGtfNUh5N1g1Umd5TjduT0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt
MGIwYzEyYjIyYmY5LzEvblFlQWE0bWt6bGtfNUh5N1g1Umd5TjduT0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5
LzEvblFlQWE0bWt6bGtfNUh5N1g1Umd5TjduT0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6LFxg7V
BkIR8tpQ/rdIX307EUxHxhEJDjRFh549FnzPqz6GmrMiVWcRw/uNOa5ttFLIB0Rc
B1DTLymMUDuWxEeZaW4+44tavhjgfyiG9h1/wx/JcqNAcZaVBWpbpAqMSz5+p8at
wpqjPypLL067aCcSNNJ2qybwl468sjKK1Y6pCTcyX7NgGXQLoK79VvdXjljctdVU
I7ranBKwYG0SmjuWRRSVuP5IA9GMTelP5Dn0l/ECdvMiBTOmLIT1h2eOqrFoe4It
m9Nf+LSWl/4LDa37+FblaB5zMo3KrNIN1ggmyB0ljq1I1Z9gIYbnB29wAMBjxAJ/
kWHPlpwnLA5mAA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:38 2026 by rpki-client