Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: 2EfbsPn9B79QiuVh62+YX+8OBfwigzeNURXGhDcxdWU=
Subject key identifier: 94:5E:E6:E5:13:F3:BA:EF:09:6D:6B:74:82:3B:88:C8:20:08:B1:6E
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019F91DA77756AD14B503453445B12E2189F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 146B
Signing time: Fri 24 Jul 2026 02:00:41 +0000
Manifest this update: Fri 24 Jul 2026 02:00:41 +0000
Manifest next update: Sat 25 Jul 2026 02:00:41 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: jmRN5HSwWciv8HTF4COGR6F9AkTWlj/4HrqX57tuQ2Y=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:77:75:6a:d1:4b:50:34:53:44:5b:12:e2:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jul 24 02:00:41 2026 GMT
Not After : Jul 25 02:00:41 2026 GMT
Subject: CN=945ee6e513f3baef096d6b74823b88c82008b16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:5a:27:0b:e8:3a:13:da:22:ba:83:dd:cd:
06:1f:7f:ed:6b:69:34:13:8f:f5:52:10:a0:f7:33:
d3:60:4c:ac:d0:43:a5:b4:2f:f2:9b:14:08:a1:d2:
a3:75:94:cf:4e:ce:0a:ca:12:ad:cd:f9:c8:3b:69:
4a:fc:6d:ef:ff:0c:a6:c8:ed:0d:cf:70:68:bd:67:
7c:50:85:71:3c:43:f6:9c:9b:fc:6e:64:ea:bd:a8:
c7:4c:cf:97:b1:89:06:fa:48:e4:85:d6:d6:99:ab:
38:52:37:16:0a:12:bd:54:f0:c9:0b:08:10:01:40:
ed:19:e0:e7:95:8a:15:02:cc:a1:82:a6:94:fc:d1:
b2:e2:59:e0:24:6b:88:53:83:98:4c:8e:ad:ca:5f:
f8:03:1d:fb:44:40:28:0c:f5:50:f1:5d:c2:96:7e:
d3:a2:cf:84:3d:bf:8b:24:00:69:5e:e5:6c:55:a5:
5a:c1:c0:87:9e:76:b3:21:ed:d5:a1:4a:0c:ac:38:
dd:58:c9:79:62:d3:e6:4b:4b:23:94:96:3a:3b:52:
12:ea:6e:f7:fc:55:36:1b:2c:3d:fb:b5:95:09:e1:
a7:be:43:fa:a9:1b:f0:8c:30:b8:2a:f2:15:a5:7c:
8b:f8:93:2a:e9:73:36:97:ad:bb:80:06:a1:d8:3e:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:E6:E5:13:F3:BA:EF:09:6D:6B:74:82:3B:88:C8:20:08:B1:6E
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:00:9e:ae:21:f8:a7:c7:3a:bd:d7:20:b4:a9:1f:67:91:ee:
05:ef:18:09:2e:07:af:c7:c1:8b:1d:3e:2f:35:35:e1:cf:e1:
1a:81:fb:99:7b:9a:4c:eb:71:06:84:b9:94:78:71:7f:e7:dd:
85:58:a1:1c:4e:13:f4:87:fd:db:70:28:bb:eb:41:c8:e8:6f:
7b:b5:1c:3c:48:13:34:0b:53:b1:5b:46:17:32:bc:77:b5:1c:
c5:c2:92:ce:db:90:e2:1b:37:8a:8f:cc:0d:5e:01:f8:72:bd:
eb:64:63:b1:6a:8a:bf:18:21:ae:23:21:3d:02:e5:ba:cb:52:
59:90:a8:e0:b5:d6:0d:9d:f9:1b:02:a1:74:f5:12:02:9c:af:
31:50:f6:df:d6:f2:5e:d7:da:8b:19:d0:bb:d0:86:fa:06:de:
9e:97:13:41:a0:9b:b0:7a:8d:12:e6:18:6a:63:68:bf:33:00:
f6:a0:10:d2:d0:f6:06:c1:08:f4:56:ed:75:47:c4:27:a4:eb:
4e:aa:f7:f6:7e:c2:8e:63:87:a0:53:e2:a4:6f:77:d7:88:f0:
18:10:d0:ff:9a:dc:ae:6b:32:71:c7:c4:62:74:f0:46:b7:67:
e0:e1:dd:c5:10:23:00:5e:ac:2f:fc:63:b2:f8:53:12:c9:10:
d7:4c:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:43 2026 by rpki-client