
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: XATfGpuOPbAqvkvV8hNEZvxjPTX7nf7V27P0eq7eJfE=
Subject key identifier: 7F:01:B8:3B:50:8C:A9:2E:C9:11:75:FA:0B:0F:09:FA:C4:33:F6:28
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019F95123F23AB8A8105DB627B354BD25345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 17:00:28 +0000
Manifest this update: Fri 24 Jul 2026 17:00:28 +0000
Manifest next update: Sat 25 Jul 2026 17:00:28 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: LObX9JQJdgrjsv75rYqRzOMoHG4nxywGc4nnB9LnokU=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:3f:23:ab:8a:81:05:db:62:7b:35:4b:d2:53:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jul 24 17:00:28 2026 GMT
Not After : Jul 25 17:00:28 2026 GMT
Subject: CN=7f01b83b508ca92ec91175fa0b0f09fac433f628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:ea:aa:3a:45:56:47:cf:fc:d0:4b:07:56:
4b:9d:15:33:41:ad:f7:4f:d8:eb:aa:66:c6:06:be:
0a:a8:16:a0:b0:59:b6:fa:6b:af:53:95:b3:4c:9e:
35:16:92:b4:5f:68:5a:0b:0d:a5:4c:75:43:a8:2d:
7f:31:8b:26:f9:55:d0:5b:25:ec:0e:1e:db:67:61:
d9:21:2e:46:c8:4c:a0:50:14:eb:30:a2:f4:1e:f9:
c3:fe:08:0c:5b:b7:7d:7e:6c:7b:50:67:5c:f8:33:
13:a4:d4:ee:38:3b:74:e3:ce:c4:f9:92:52:e3:4c:
5a:52:e0:de:6a:c9:8b:b0:fd:e4:38:ae:c9:99:42:
67:41:f0:90:57:50:8e:66:63:2f:6e:88:14:44:c0:
31:ff:e9:b1:51:a4:5d:64:09:4e:cc:b0:aa:6a:b3:
5d:df:4c:3b:21:59:e8:bb:64:a5:91:c9:a6:78:ca:
f8:76:1c:30:e3:4d:b4:b4:c5:0a:b4:af:bc:62:4d:
5a:cf:34:7b:c8:38:ba:b7:92:23:e2:bb:03:d9:38:
2e:cc:07:6d:39:d8:97:5d:73:85:ae:e9:34:ba:25:
17:d2:e1:13:3d:5c:2e:bf:13:a1:3f:1d:00:88:95:
eb:d3:4d:d0:c2:13:cb:3e:d5:b6:9f:78:75:07:e8:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:B8:3B:50:8C:A9:2E:C9:11:75:FA:0B:0F:09:FA:C4:33:F6:28
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2c:0b:86:0a:39:5c:42:2c:ad:92:ce:5a:1b:d3:21:14:f5:
06:68:c0:bb:3a:5a:bb:5e:8e:b0:68:e0:de:c3:f1:3e:93:7c:
aa:66:1d:e6:03:e5:a7:a6:32:98:64:ac:55:b7:f0:b6:0d:5f:
0c:d5:f7:ca:85:2f:98:38:c6:38:ae:e2:4d:7a:32:04:f1:98:
4c:74:74:b6:e8:3d:da:c8:d3:e2:bb:c8:0f:f0:de:40:4a:e2:
50:83:ff:84:6a:f4:b2:e4:75:76:87:86:76:44:c8:cd:3a:41:
ab:3e:72:75:8a:da:00:81:f8:7e:52:2c:78:ac:d9:b0:54:cd:
68:39:f5:90:57:81:f8:68:fc:45:52:e7:81:7a:3b:c2:d0:68:
ba:89:89:7b:6c:92:92:d7:95:f1:71:37:d9:ce:21:01:c7:96:
d7:3e:10:8c:d6:fb:17:fc:3b:58:6e:40:07:6c:8d:9d:e6:95:
63:0b:e7:e7:8a:3d:46:84:d1:d7:91:25:f7:a0:2e:04:43:fb:
5e:96:04:bc:a3:7c:62:ad:3a:51:dc:4b:b0:cf:13:01:f8:ed:
cd:59:ba:ba:79:e4:27:3b:85:62:86:3f:0b:ad:ae:54:b6:0d:
68:0a:07:66:df:ce:65:cc:67:95:df:d6:b2:09:80:6f:88:a1:
ab:85:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:32:19 2026 by rpki-client