Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
File: NAXWyGBbqbCNP4T1peWW4l_n0tI.mft (raw, json)
Hash identifier: vqLYlyVOfkcRIOIZEZMXe0P1JuSdeJNYfg61KPHls1k=
Subject key identifier: 3A:20:4D:48:D9:57:9F:6A:45:B5:79:DC:91:4A:72:EE:65:FB:FE:4D
Authority key identifier: 34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
Certificate issuer: /CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Certificate serial: 019F954A13256BA44F123DA77414D8D809BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:27 +0000
Manifest this update: Fri 24 Jul 2026 18:01:27 +0000
Manifest next update: Sat 25 Jul 2026 18:01:27 +0000
Files and hashes: 1: NAXWyGBbqbCNP4T1peWW4l_n0tI.crl (hash: 3YLl0AfB1FxpNkck20i55eocpP2YDPYt696Z/CZez94=)
2: PoFYEuGutgHouWVg8Cb0Pk33vYA.roa (hash: X3Xo/sCZdu/v1GpBzfkHVMeep0fNTMPQZJIhKRC0j0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:13:25:6b:a4:4f:12:3d:a7:74:14:d8:d8:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Validity
Not Before: Jul 24 18:01:27 2026 GMT
Not After : Jul 25 18:01:27 2026 GMT
Subject: CN=3a204d48d9579f6a45b579dc914a72ee65fbfe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:fe:c2:b7:0d:6b:23:56:5b:23:b9:ce:77:
ad:d7:f9:83:53:31:7c:60:34:da:95:0a:02:32:36:
a0:16:60:39:c1:e3:61:ca:4d:11:48:77:d7:f8:4e:
12:0d:41:d8:ab:fb:ff:62:f2:b8:a2:80:59:f9:96:
63:f6:24:87:42:39:71:3c:a0:a9:95:36:c4:cd:8e:
5f:80:44:24:c1:6c:04:28:a2:ad:6b:63:94:4a:e5:
78:8e:3c:7f:e6:dd:58:5d:c4:af:74:43:a2:91:69:
d3:c2:10:64:bd:cb:5e:18:9f:99:44:64:07:06:4c:
43:8d:8c:b9:27:84:5c:cd:c8:a1:c0:cb:41:63:36:
ed:1e:76:92:85:56:c8:de:b0:4c:cb:2d:89:60:c9:
c9:0c:09:44:30:c7:fa:fd:24:98:be:af:bc:5e:8d:
81:fa:86:94:3b:a1:fe:fd:e0:60:9d:4e:1a:52:b4:
b5:5b:54:05:50:cb:95:1b:52:b7:a3:54:0a:d4:9a:
4b:c9:2d:83:f6:db:e2:87:53:3c:f8:5c:4a:f4:2e:
dd:27:51:ff:19:69:a3:94:06:99:2a:a6:67:97:fe:
00:75:c5:d3:e8:e6:a7:62:ab:26:f1:38:85:cb:d9:
f1:fe:b2:19:f4:e0:23:a5:c7:a2:db:6c:75:cc:a2:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:4D:48:D9:57:9F:6A:45:B5:79:DC:91:4A:72:EE:65:FB:FE:4D
X509v3 Authority Key Identifier:
keyid:34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:01:cb:0a:92:85:09:c7:45:78:c4:d9:d8:e4:58:ad:21:
ac:8d:47:ea:30:a1:f0:03:b5:11:dc:e0:35:67:90:8b:b7:24:
5c:9f:31:d5:56:19:3e:22:08:09:e5:63:55:32:bf:c2:e4:0b:
75:91:e9:6d:9d:38:ab:e3:7b:78:1f:20:21:00:79:39:37:28:
c8:ca:5f:86:d1:d4:a9:76:81:2f:6d:a9:36:95:0c:8b:d1:3d:
67:14:5f:01:bb:63:69:96:ae:bf:c6:4d:5f:3b:e3:26:69:2b:
81:cd:1c:60:3d:49:8b:c9:bb:1d:67:af:ac:b9:46:9f:d3:40:
43:8c:78:25:a0:73:d2:cd:b9:5e:3a:b2:01:83:e2:f0:e7:1c:
43:41:3d:d7:60:69:d6:83:bf:4a:51:38:72:35:fa:cd:97:07:
af:e5:e5:1b:d4:2f:cf:86:df:29:fb:d6:15:d8:bb:f0:1e:e2:
da:93:f4:f4:a3:43:70:31:13:ef:51:13:a6:fb:a5:33:af:fd:
e2:60:54:b9:11:20:65:25:a1:f7:d0:e3:5d:c5:80:e3:c9:55:
9c:a5:e6:05:03:e8:eb:6a:c1:18:e8:50:62:54:b1:1c:a4:7c:
08:3d:04:5f:1b:4b:fe:c2:ba:c6:d0:31:08:9f:94:a1:b7:19:
85:31:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:49 2026 by rpki-client