Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: jok3+WrQMkAeSpBDUY8CV8iq0Ttl/7VNy5CqTdwkKnY=
Subject key identifier: A9:E2:A0:D0:84:F4:AE:B6:B8:13:58:95:24:91:E0:25:1C:FF:F1:1E
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019F9436A329B01BDAB6DCC6F12B42EF21D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 13:00:36 +0000
Manifest this update: Fri 24 Jul 2026 13:00:36 +0000
Manifest next update: Sat 25 Jul 2026 13:00:36 +0000
Files and hashes: 1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: XNIYGRKrmqEgEjwUHnrA4ynBTPDh0+CHg9QkM43ncQA=)
3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
4: h47V2oqauqZZ_rfHQWw19ZbUYg0.roa (hash: TrkwxoC10+VUKUU/FFOH1cGks+KjznkFnR4WMUPTGNA=)
5: zCVYNwSb6R9Q5adien3vj6-COxI.roa (hash: 4WkrjYGFdpzJeGxKIOg7LPmr739iupPTe/+MPRyS+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:a3:29:b0:1b:da:b6:dc:c6:f1:2b:42:ef:21:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jul 24 13:00:36 2026 GMT
Not After : Jul 25 13:00:36 2026 GMT
Subject: CN=a9e2a0d084f4aeb6b81358952491e0251cfff11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:4b:9e:5c:ca:52:67:55:41:e3:32:d8:f8:
b7:18:58:35:37:91:19:88:0a:f0:34:03:fc:13:c5:
20:e9:e2:43:a2:91:d8:9b:cc:ed:12:45:63:c9:82:
12:72:1a:c1:42:2d:d8:a4:8b:c4:81:79:ec:01:84:
0b:1c:7a:e7:51:1b:3d:38:09:a8:18:eb:c1:27:72:
12:30:cb:34:92:a0:2a:0e:45:d6:d4:ce:4a:a9:bb:
91:07:df:f7:3b:c3:0f:24:c8:12:cc:9f:e6:2e:df:
91:1b:28:63:b1:54:8e:c0:31:10:f8:6b:f9:d1:e6:
8b:99:f5:d4:68:e9:08:eb:3d:60:28:99:6b:d3:a9:
69:9a:45:f5:89:6a:43:f7:39:d5:39:94:f3:30:e3:
fb:c2:01:83:c8:3e:a4:70:6d:69:28:67:52:11:87:
cf:39:5f:d3:5f:13:b3:72:29:0f:da:18:46:5f:91:
a9:e1:d2:e6:6c:4b:00:ac:42:fb:a4:45:b4:dc:a8:
69:54:5c:b5:6e:eb:d7:4a:72:66:46:e9:1d:43:6a:
1e:b2:a9:95:fc:5c:a5:5e:c7:39:ce:13:c2:cd:14:
77:d0:28:51:30:10:44:3e:3c:33:35:2b:ae:50:e2:
e8:39:6c:87:7e:55:35:65:ef:02:49:6c:00:03:41:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:A0:D0:84:F4:AE:B6:B8:13:58:95:24:91:E0:25:1C:FF:F1:1E
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:70:03:d6:3d:9b:da:28:38:66:3c:1d:9e:71:95:44:69:42:
7e:39:8b:bd:54:a1:72:41:33:cd:52:ee:6a:39:d7:96:bc:96:
fc:79:8c:e1:c6:af:71:4c:31:ec:f6:b9:16:25:89:09:22:53:
92:37:5e:a4:ee:df:c8:75:59:31:9e:e0:45:1a:ea:6b:66:8d:
ca:ac:04:d9:84:bf:8a:5d:16:9d:94:57:24:ed:eb:4c:ae:2f:
76:d4:c6:6d:d0:e9:72:05:15:a1:3f:07:09:ec:7c:53:aa:17:
51:f7:b2:0f:5a:ee:d1:02:d2:85:31:84:28:7d:7a:42:d0:58:
77:14:0d:29:dc:23:03:21:24:11:f4:7c:84:b2:4a:ed:d5:47:
b6:d4:c1:33:3f:10:12:64:9b:ad:14:a0:56:d2:ca:14:f3:59:
ce:82:00:e5:8e:4c:4f:7f:30:10:73:29:c8:d7:48:3a:b7:a0:
59:f0:51:b5:fb:a4:ed:5f:5d:8f:0a:00:15:a4:2f:f6:8a:23:
7d:13:a0:46:e4:c7:c7:bf:39:4e:2f:14:e0:6d:19:01:a9:0a:
40:e5:76:2d:5d:9d:3a:6d:1a:25:4e:70:e6:bb:06:a2:34:d4:
99:ba:be:a2:20:67:b5:2c:9b:b6:7e:8f:f8:cd:64:88:ab:92:
9c:15:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:24 2026 by rpki-client