Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
File: NfJIyy_lWJzEbJo1M7d5lmGclpM.mft (raw, json)
Hash identifier: emycd7YXgAxMCvyOnuP8VXH80fGrN4qFaYZZgPCjbYU=
Subject key identifier: FF:9C:90:6C:65:61:66:5D:55:CE:3A:EB:AF:B3:6A:F9:EA:C5:4C:07
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Certificate issuer: /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial: 019F916D2BD17653438EFE200E786C0A7B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:18 +0000
Manifest this update: Fri 24 Jul 2026 00:01:18 +0000
Manifest next update: Sat 25 Jul 2026 00:01:18 +0000
Files and hashes: 1: NfJIyy_lWJzEbJo1M7d5lmGclpM.crl (hash: 6XH7+rMZ5NS2clOdytGgxfaC7IPGj69mvWd6aO2Xezo=)
2: eojrh4FYJOqn2Ldzg006OCzOQCA.roa (hash: wx1jFfpx9zsFd3AkjedbstvGgcY2Qb3PIq4eLA6x+1M=)
3: h9Vxutjtfpi1EQcen3goCtrMe_g.roa (hash: +RNsc+f9Zpcxd9dc3ORPp5I+o9EaIxcXyvozD+Nd1qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:2b:d1:76:53:43:8e:fe:20:0e:78:6c:0a:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Validity
Not Before: Jul 24 00:01:18 2026 GMT
Not After : Jul 25 00:01:18 2026 GMT
Subject: CN=ff9c906c6561665d55ce3aebafb36af9eac54c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:de:a3:57:9f:5c:6e:2e:77:50:27:d1:08:
e1:65:bf:16:be:80:b5:42:ed:fb:8d:4e:45:0f:79:
46:3d:a5:ec:ce:2c:72:b9:89:f7:cd:cd:9f:47:78:
ac:dc:6f:f6:92:5b:0c:9c:85:3a:1e:cf:3c:38:99:
5d:6a:a7:40:35:a6:05:29:bb:e7:c6:eb:70:f1:4d:
1d:9f:4d:65:b7:5d:e7:cf:96:b0:da:6d:d1:48:70:
9a:d3:05:ad:84:67:83:f6:df:16:7a:bd:01:d2:37:
ab:1b:2a:80:07:db:18:f9:2d:ad:c9:47:04:b9:87:
72:53:63:f0:02:a0:6b:03:07:60:47:ac:6e:4b:74:
82:91:a1:5b:63:c0:10:97:ab:65:fb:3e:48:cb:2e:
81:bd:1e:64:67:8a:5f:51:fd:26:fe:8a:bd:09:a0:
2f:f0:1c:00:22:2a:f1:08:f3:19:ef:9b:14:c1:43:
33:dd:3a:fa:b9:57:98:c4:68:2f:2f:c3:fe:7d:7a:
bc:a8:74:e8:17:13:ce:39:7b:ad:40:73:65:e1:9d:
10:0a:cf:0d:de:bc:2f:8b:43:23:60:a9:ee:6e:c7:
65:5c:55:d4:fb:f3:2b:53:b9:ef:35:2b:79:02:90:
c3:53:3e:ee:ea:43:db:fd:6b:67:bd:13:d9:ed:84:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:90:6C:65:61:66:5D:55:CE:3A:EB:AF:B3:6A:F9:EA:C5:4C:07
X509v3 Authority Key Identifier:
keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5b:1e:cf:e4:ab:92:2c:b3:3a:8b:2f:31:e2:dd:7c:db:93:
bf:2e:e6:d3:89:2e:84:35:96:93:bb:cf:f1:6f:e9:e0:eb:69:
5b:41:da:49:18:6d:97:19:d4:20:b0:b4:3e:18:52:0f:4c:f9:
f6:45:2c:42:dc:3d:d7:52:8a:34:17:09:f1:a2:21:2c:84:82:
54:6d:82:f8:99:40:d5:77:6f:dc:60:2f:68:d7:12:56:00:0a:
20:fc:35:31:be:ce:13:14:77:df:46:05:f3:3e:c0:40:97:df:
ff:90:ee:1b:0d:fa:53:7c:ab:a6:96:94:c2:b1:5b:da:46:01:
f1:1a:4a:74:f8:cd:35:a4:ef:bb:6e:0e:a4:fe:50:9f:04:41:
d9:d9:41:b9:31:e7:91:39:81:f4:a5:c9:4e:7c:74:bb:2c:ac:
96:51:b0:41:bd:b3:65:31:08:de:26:d2:10:f5:2a:ef:2e:42:
44:a1:a5:4a:bd:e2:cc:ff:8c:eb:18:b0:a0:d6:0c:06:0a:1b:
87:23:c2:61:c4:0d:c4:be:2e:0c:38:18:50:61:f7:cd:fe:21:
35:10:be:6c:df:a1:d0:3e:b1:08:64:46:bc:4d:f7:94:3e:d3:
f6:af:1e:79:0c:9c:a0:e2:dc:9f:f3:d6:11:78:4e:3b:3c:96:
c3:a2:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:00 2026 by rpki-client