Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.mft (raw, json)
Hash identifier: ib09TycUCeAK9cKo59ROnrmcRhvGj3/9LmpnqvAKL8o=
Subject key identifier: 57:08:94:76:39:E3:B0:5E:BC:72:9E:E1:92:05:5F:11:1C:66:0A:E8
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Certificate issuer: /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial: 019F8F475A3819D71882CD9614C90D36D51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 14:00:45 +0000
Manifest this update: Thu 23 Jul 2026 14:00:45 +0000
Manifest next update: Fri 24 Jul 2026 14:00:45 +0000
Files and hashes: 1: Xn8W3aZI-6tppOJ-g922UvO2P1E.asa (hash: uXmwfFb/PO+RJeAl3LaUtqzCY+5ql2X+3/9TpSbCVCA=)
2: pNFmKbDakg__Ob-1rSmmjYR4BcY.crl (hash: qpieSPhK2k3X4qymBCU/ikPUat78uEbnzYzs3BpNRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:5a:38:19:d7:18:82:cd:96:14:c9:0d:36:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Validity
Not Before: Jul 23 14:00:45 2026 GMT
Not After : Jul 24 14:00:45 2026 GMT
Subject: CN=5708947639e3b05ebc729ee192055f111c660ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:15:17:59:9e:36:b1:d0:6d:7c:a2:c7:4a:
a5:3e:00:b1:50:39:74:b2:a7:59:8c:40:da:ae:42:
d4:45:76:bd:3f:45:cb:a2:bc:1d:93:ca:d1:31:82:
ab:c5:ac:8c:67:b1:9b:5b:e8:81:b9:54:cf:7a:40:
f2:00:54:2c:6d:ba:ea:54:85:49:db:52:11:91:70:
49:05:fa:4b:2c:0d:55:dc:c1:0d:67:9c:47:ec:0e:
f1:d2:65:38:96:4b:8e:66:b4:6d:e0:ba:a3:71:d2:
6d:d0:c1:2e:dc:3b:72:8b:99:49:cb:e3:33:91:1d:
27:b2:a1:af:24:83:23:c7:d5:5f:ce:fe:d0:2c:a9:
07:0b:7a:cc:9b:f4:66:37:b3:2f:ff:8c:e4:80:e6:
b4:8b:ff:55:cc:96:ec:5c:29:64:94:33:63:71:66:
22:ce:4a:4d:94:43:9b:e7:c4:d3:f9:8d:67:4a:e2:
0e:61:4f:78:23:a3:5a:fe:ea:6a:ff:cc:a9:bf:f5:
87:19:a6:1b:98:b9:c0:62:53:8e:0c:12:74:76:ba:
a4:1b:5a:a2:7a:2e:b9:09:3b:93:13:5d:3a:89:a7:
72:5b:80:e2:90:24:61:45:28:19:8e:67:03:e5:f3:
a6:00:83:b8:38:ba:22:bf:0e:4c:bd:60:c9:ba:5a:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:94:76:39:E3:B0:5E:BC:72:9E:E1:92:05:5F:11:1C:66:0A:E8
X509v3 Authority Key Identifier:
keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2f:6a:b7:7e:51:40:5e:dd:11:88:8c:17:41:db:26:6f:b4:
d6:3d:f0:f4:df:39:7f:2c:8b:f7:55:50:f7:d1:3e:60:4c:90:
ad:1c:70:e7:70:40:af:f0:2c:b1:51:b4:f1:c2:17:cc:91:14:
d1:d1:bc:c2:4e:b5:5f:08:d8:3c:4b:0a:f1:bb:d3:03:f0:b1:
d5:ef:58:34:0d:f0:58:bb:e8:31:cb:ce:fe:28:62:97:61:3e:
41:79:7a:1e:0d:06:d2:46:08:0a:1e:4e:1f:5f:06:f2:08:fa:
d6:28:82:0a:e3:e2:6b:14:28:99:f1:9c:43:a9:dd:8f:b8:d2:
a1:20:8b:79:5b:ec:47:0a:f9:67:f9:dc:28:b7:fc:7d:d8:e4:
73:e1:e0:1c:b4:e1:71:6d:fe:3c:56:83:a7:e0:a3:f3:86:1a:
a9:b1:77:44:45:1d:d8:1e:d2:48:8d:b6:81:b2:e0:8f:cb:d8:
e6:94:67:03:72:35:91:dd:c0:9d:8f:a5:d1:49:1e:de:f9:52:
ef:ad:d1:34:44:c6:ab:97:4e:6c:0d:f5:19:af:02:63:61:9d:
06:22:53:ae:81:78:13:de:3c:ec:5e:fd:1d:fa:82:72:40:b1:
a6:48:93:a8:a9:dd:17:f5:9c:61:0b:71:d9:5a:04:bf:3f:32:
ab:75:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:57:49 2026 by rpki-client