Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier: al54Fh4daCsOdwgi/hDoP0eMf1nBhjn241/XIJQeHz0=
Subject key identifier: D1:13:52:6A:A9:02:12:E5:07:66:E0:A7:18:87:C4:50:24:FB:17:E8
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019F91A3BCF037A864F904FB957B363617C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number: 1A03
Signing time: Fri 24 Jul 2026 01:00:54 +0000
Manifest this update: Fri 24 Jul 2026 01:00:54 +0000
Manifest next update: Sat 25 Jul 2026 01:00:54 +0000
Files and hashes: 1: 41lbXeJXKl4CiDGWnnMHpB24gPU.roa (hash: kG6Cncs4+D3tofS5cOrSl2kOR5wHI2wRUBR4uUbXqUs=)
2: 9eWyQcwhhtcWSOgLAyvjVSN69_0.roa (hash: WQam9mNIAyIv9GJMj3n6lEuVNq1iCgTWLcCsWIhP4W4=)
3: B5xzluZY3MO07Y-DnPhReukzoAM.roa (hash: yLbG1QhNKSifZB6S6ehHViwPbt5RRExGQbO6VZAzEXk=)
4: EL9_D6jbpPm0f93FbIMJFjXA39Q.roa (hash: u2EHA4Ca3HUJR0DK3eXdJPDlTwL0hlSO69OLTZssz5Y=)
5: Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa (hash: SXovFZCanvTkxojFFLSIhxdKBc7pAkz+ovEDvaWHEfE=)
6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: aMqaXHLtftxAKBHYSfEZy71pSd3GTxhDyto+TOCUJgo=)
7: cxpnqAln6hhdNSSyG6qFvgqIbyw.roa (hash: iyYEFth/WwaalutGJ5J/GHoRvV6KCxdd9XrPvperx+Y=)
8: hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa (hash: Wa5Ke4FZahcAqtbVLwkcn3uM1gDF8FKkh2X50wELyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:bc:f0:37:a8:64:f9:04:fb:95:7b:36:36:17:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jul 24 01:00:54 2026 GMT
Not After : Jul 25 01:00:54 2026 GMT
Subject: CN=d113526aa90212e50766e0a71887c45024fb17e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:63:5c:49:80:76:64:8e:86:f3:5c:14:1a:1d:
1c:38:75:c1:19:99:02:fb:b9:24:a6:05:00:d0:68:
0b:d2:b6:28:e2:73:46:e9:71:66:8f:06:78:28:3a:
2b:99:c8:95:ce:bc:20:14:88:97:5a:bc:2a:d8:2e:
37:16:6e:79:3f:b6:1c:92:26:61:29:4a:cd:c5:b6:
c7:66:ef:78:63:d1:a6:f0:d3:e7:0a:b6:da:a3:fe:
2b:26:a4:86:4c:ae:aa:96:59:8f:67:20:36:f9:df:
b5:6b:25:b7:72:4b:7e:d3:14:0c:18:a8:1c:89:48:
27:28:36:2a:a7:ac:d4:06:0c:d3:54:06:fe:4e:16:
12:a5:b8:66:6b:58:a4:1e:5c:a7:bd:02:93:eb:bd:
f5:45:ee:78:1b:a6:06:c8:22:7d:4f:b0:a6:5c:1f:
f8:e5:c3:28:9b:41:25:6d:7b:b6:c8:5d:f7:de:52:
64:9d:05:ed:56:64:81:3c:ec:cb:cd:4b:0a:26:57:
d7:49:ad:ae:67:85:36:b8:25:8e:8d:f3:ee:19:70:
30:51:e9:34:bb:9b:00:ec:bf:0c:d0:e2:76:5a:b6:
dc:14:f3:20:5d:9f:67:f9:e6:36:08:9f:37:bd:56:
8b:41:86:87:82:2a:76:61:07:a6:3c:3a:d8:30:f6:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:13:52:6A:A9:02:12:E5:07:66:E0:A7:18:87:C4:50:24:FB:17:E8
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6b:37:4b:e8:a9:31:9e:8e:65:b3:3d:40:2c:90:0c:9d:19:
fe:53:23:78:d1:4e:4b:8e:d1:3f:6b:50:b7:31:26:d3:80:ca:
46:e2:3b:b0:dc:7a:16:ca:0b:25:78:2c:5f:a3:87:85:6a:f3:
50:c2:ef:c7:24:bf:16:f9:2e:16:1d:d0:b5:39:8e:9f:5a:b5:
71:ea:88:39:c7:31:be:97:3b:cd:0a:11:ae:ec:71:3e:4d:11:
60:e3:56:54:15:e6:a3:fa:2c:1a:7f:06:8b:24:28:9a:46:d7:
9f:34:da:e2:83:35:82:c1:f3:ce:c1:34:28:76:e5:2a:3f:57:
8b:75:90:8a:d9:c4:5c:07:e7:54:d1:22:7f:44:48:27:e4:89:
6f:46:ca:0a:fc:1b:2b:65:4d:c3:6a:c9:b0:ae:aa:16:22:a7:
a9:41:af:55:e8:49:04:bb:e6:3c:2b:51:98:da:51:a5:1b:27:
06:bb:06:dc:dd:68:92:61:69:37:95:43:d6:b7:d6:4c:f3:ff:
01:92:6d:a5:e7:a1:be:ed:57:85:bf:1c:99:e6:d2:36:70:99:
a0:fa:2a:6d:d0:27:ce:c9:57:86:4b:64:9b:e0:4c:21:5f:28:
6f:43:dc:2c:fa:2e:29:c8:65:ac:c0:94:8a:72:b6:a3:8c:4d:
a6:c1:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:17 2026 by rpki-client