Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: 7kMqbN8MkN5kf3wjwI/cxwI8Qm2UeN7XhOUauuQTalo=
Subject key identifier: B5:88:DB:FD:E7:B4:18:90:36:A0:D2:50:6E:17:02:C7:44:E2:1F:12
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 019F90FF61686A1E5BAF17EE6F1A7CC8ABEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 120A
Signing time: Thu 23 Jul 2026 22:01:23 +0000
Manifest this update: Thu 23 Jul 2026 22:01:23 +0000
Manifest next update: Fri 24 Jul 2026 22:01:23 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: bR2cvdNKyMMwQh/4ZF5ryjNvwNHU/zllrfOYV9hJ7Io=)
2: Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa (hash: +G9LwjpRWHwueIKlr62p05K5p0dJNYZacuNPYqJmmCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:61:68:6a:1e:5b:af:17:ee:6f:1a:7c:c8:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Jul 23 22:01:23 2026 GMT
Not After : Jul 24 22:01:23 2026 GMT
Subject: CN=b588dbfde7b4189036a0d2506e1702c744e21f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:b6:32:7b:59:d5:f9:77:a2:28:cd:15:77:
06:4e:ed:58:8d:f6:77:28:d9:5a:e3:78:b0:06:34:
0e:97:ab:cb:1b:23:a0:75:1e:13:d6:10:66:83:ce:
06:d7:15:21:e4:39:8d:29:06:26:1f:29:23:4b:2b:
92:13:e7:75:6d:e8:f2:23:f4:f4:eb:0b:48:3b:27:
21:e2:3c:76:51:f9:4a:2b:c3:8b:3e:26:fb:e3:5a:
b9:5d:45:b7:e7:f2:32:0a:e9:d8:87:ff:bd:3a:66:
03:52:cd:ef:86:5a:f4:7a:57:86:51:e3:72:87:b7:
ce:89:5b:b8:ff:72:5d:e2:39:99:fe:33:70:e3:8a:
44:6e:9f:05:e6:2a:c5:71:65:b1:d9:4c:d2:5e:f8:
bf:2f:3a:af:38:22:a6:fb:68:3b:30:6b:fe:52:89:
14:fb:ae:e1:2b:86:5c:8b:8d:96:c0:73:a5:83:d9:
e8:fa:f4:b5:1f:b4:d2:ca:c3:29:26:9d:33:22:27:
37:6a:58:98:b3:58:35:fa:48:10:40:3e:bc:81:4a:
16:59:fb:f1:cb:b1:cd:fa:3f:95:fe:36:25:1f:ca:
71:c8:86:31:df:9b:56:f2:2c:14:04:c7:94:6a:79:
e8:bc:dd:aa:5b:83:45:d4:d4:af:ba:ef:3f:39:44:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:DB:FD:E7:B4:18:90:36:A0:D2:50:6E:17:02:C7:44:E2:1F:12
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:f6:9f:08:70:5d:c4:5e:6d:3b:13:32:d2:b3:1f:a7:03:
ac:c7:ff:c6:e5:25:3a:a3:73:a6:4d:37:76:21:27:01:bf:8f:
93:72:7a:e7:42:8d:d0:18:d0:df:19:97:8e:d2:5e:cd:1b:7b:
ac:bd:d3:7b:c5:df:5f:ba:95:26:e2:7c:28:f2:75:04:fb:57:
72:c0:d0:35:dc:ef:df:1e:1a:52:a4:e0:18:97:95:35:31:95:
d7:1b:2f:d1:0a:9f:ec:cb:12:6b:91:f5:69:03:57:80:58:8e:
b7:fd:be:90:f6:d8:01:f1:30:ef:da:be:57:23:cb:88:cf:15:
6d:39:7b:e0:f5:19:51:c2:f5:d4:06:f8:33:9e:43:d5:5c:d6:
ef:ea:66:1c:3b:a5:bf:4f:8d:d8:57:3d:7a:23:3c:67:02:51:
32:94:52:e3:39:a3:76:f2:da:dd:01:87:e3:76:b7:50:4f:1a:
98:dc:99:c8:a8:df:4d:2d:14:50:af:49:0d:5a:b6:09:49:78:
0f:4a:60:72:5d:d0:fb:33:4a:b2:76:c4:fc:fa:96:b7:b3:80:
20:02:3e:33:ce:f1:ef:e5:d2:fc:5f:61:fe:3d:30:51:f7:e1:
5b:17:95:5b:0d:e9:b8:1f:84:df:5e:d6:01:f6:56:05:6b:d6:
43:8d:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:13 2026 by rpki-client