Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: SQKlrEyiCo1EfNtnlW4uDRJa6FHzwJzUuhXGBPNONjM=
Subject key identifier: 23:E6:6A:00:6F:F7:B9:96:3C:47:E9:22:70:54:AE:A6:6E:64:4C:74
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019F916D5BDA64B42E34913CB436D945835A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 128A
Signing time: Fri 24 Jul 2026 00:01:30 +0000
Manifest this update: Fri 24 Jul 2026 00:01:30 +0000
Manifest next update: Sat 25 Jul 2026 00:01:30 +0000
Files and hashes: 1: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (hash: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4=)
2: E6wT0b-k1u6FR3wlv4qrEUuXVus.roa (hash: QZbCRhopOeDIiKUt1DVyRJURDTW9xWZnCSsr7ayZmWw=)
3: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: CrjWShuTen9ODR6kAFlvjG7UjeInqq35AWmbc1RFIbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:5b:da:64:b4:2e:34:91:3c:b4:36:d9:45:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jul 24 00:01:30 2026 GMT
Not After : Jul 25 00:01:30 2026 GMT
Subject: CN=23e66a006ff7b9963c47e9227054aea66e644c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:21:b1:c3:f9:cf:87:71:95:13:74:51:06:
29:6a:d9:38:fe:30:a9:9a:c5:4b:23:99:8e:7a:81:
a0:ac:5b:d6:0d:a6:4f:9a:e5:47:cb:9b:d2:64:a2:
5a:b0:85:85:4e:b1:f2:47:71:da:80:97:36:fb:52:
29:83:29:dd:ae:1c:eb:b4:d4:76:bf:2e:52:ca:8f:
d5:97:52:3a:2e:46:8b:44:cf:87:aa:d1:c1:58:34:
63:ad:43:9e:33:fa:65:8d:4c:31:72:c8:26:3e:c6:
10:a1:6a:8d:6e:4c:ae:cb:1c:96:a8:72:2b:97:8e:
c3:3e:2f:cd:81:c0:8c:f4:f2:36:cb:67:40:17:22:
69:92:e6:23:fe:39:01:32:1e:cc:49:96:05:6c:2f:
77:b1:17:f3:86:16:79:a3:cf:05:b7:df:48:ea:be:
a3:6c:b7:19:69:31:4b:79:50:b6:05:3d:73:3e:91:
50:ed:70:f6:bb:85:96:3d:62:d1:ee:1f:d4:4e:16:
9a:48:56:2f:31:6b:ae:0c:41:39:55:a3:81:d6:70:
90:66:71:56:06:71:62:bd:bc:7b:b7:15:bb:86:71:
ae:38:dc:1c:34:78:55:30:c0:94:43:27:9d:de:bb:
2b:6d:27:d0:90:3b:94:89:ad:2a:c0:11:df:ac:26:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:6A:00:6F:F7:B9:96:3C:47:E9:22:70:54:AE:A6:6E:64:4C:74
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:2f:66:07:2d:c5:65:9f:06:57:c8:f9:d7:4d:94:0a:93:
35:71:6e:49:38:6b:74:39:b4:83:ee:56:b1:6b:aa:b8:80:ad:
6e:59:bc:72:2e:55:28:4f:ab:ce:17:88:dd:e4:28:96:de:f3:
90:ba:88:70:be:d2:85:be:03:e8:6d:bb:db:a7:c6:0b:24:e7:
a8:39:11:de:dd:49:7d:c4:02:ba:50:dc:61:b2:7d:60:ce:e4:
62:5f:ee:c5:d2:3e:08:aa:6a:8b:fa:a1:49:53:d1:9c:62:5c:
14:8e:f4:3d:f0:8f:6c:55:3c:a0:96:cc:44:31:1b:01:83:20:
60:09:f2:a0:df:ed:3c:a8:fd:e6:89:7f:d7:14:0e:8b:5c:a4:
d3:6a:fc:17:2b:4a:76:52:4f:fa:f3:39:70:3e:1c:c8:18:39:
44:e9:1a:64:c0:f8:f0:f0:4a:83:b6:3f:26:57:a9:cb:5c:27:
64:65:2f:e5:1b:f1:f3:12:e1:ef:49:5c:74:bc:61:54:28:82:
5d:d8:36:a9:17:90:e2:24:c6:19:84:cf:cb:1e:a9:bd:1b:fe:
e4:05:3b:7a:bf:49:c5:b8:63:d1:46:70:06:36:3f:49:52:e4:
ad:7a:fc:05:d2:07:8b:b0:c4:38:d9:33:af:19:2e:c8:d2:3c:
49:d4:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:38 2026 by rpki-client