Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: otCU54QD9MYYKN+mClAHqEUYHQT4TY05GSXs80y3MAc=
Subject key identifier: B2:C0:54:50:F4:80:1C:E8:78:E3:77:38:B3:39:60:43:C6:45:82:C8
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019F8F46E7411A5F7769FA32C38FB50CD578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 199A
Signing time: Thu 23 Jul 2026 14:00:16 +0000
Manifest this update: Thu 23 Jul 2026 14:00:16 +0000
Manifest next update: Fri 24 Jul 2026 14:00:16 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: MdiiqKmhVVwWeI6ixvIHjmq/Y/wBHr+FxDl/7zlx4/Y=)
2: XlSDqc4huU4T5pBV_rhm_39vHOA.asa (hash: y6lBqHLFbjHu8Lg/fkhH89s17tcMPV1sgWAsdIlsdfg=)
3: jMbXfYwQDm8CjXt4xxwnq70JuMY.roa (hash: FXNV3Qmyjy1ONKJk6QzKO0EfhVvk4xc2mM2Ngz7Mp/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e7:41:1a:5f:77:69:fa:32:c3:8f:b5:0c:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Jul 23 14:00:16 2026 GMT
Not After : Jul 24 14:00:16 2026 GMT
Subject: CN=b2c05450f4801ce878e37738b3396043c64582c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:b2:a5:a7:1f:42:3e:4f:5a:f6:be:fd:54:
11:9e:50:84:d9:91:a2:c4:b3:63:30:fc:c2:0c:d7:
0b:ec:f0:6f:f3:9b:5a:39:68:fd:96:aa:12:dc:9b:
0c:e2:fe:b7:39:00:58:fe:a9:88:50:6a:14:1a:21:
a2:18:ba:6c:0e:4a:ee:63:30:3a:25:a5:38:ab:06:
6b:69:46:a7:4d:27:ad:b6:ee:da:16:fe:f8:af:e0:
1d:20:06:3e:04:28:33:0d:be:9a:4a:6f:51:7b:e0:
d2:e6:9a:da:d0:ad:aa:f0:a5:8b:2a:69:f8:6a:59:
10:df:2f:d2:c6:12:54:51:4a:a8:9a:7d:4a:90:02:
93:68:21:cb:59:9a:36:1e:50:34:ab:0b:cf:84:7f:
2a:05:4c:3e:59:1d:87:b5:4f:0d:a7:13:fa:e7:ca:
49:ab:80:5a:6b:2c:32:a2:86:18:4c:ab:40:68:4a:
74:c0:32:40:cb:fb:0e:33:1f:1c:b5:04:b3:19:f3:
27:a5:e8:26:09:ff:a7:f3:40:c2:f0:8c:7b:78:c7:
e8:1d:3f:1b:79:43:e5:ea:bd:d6:bd:da:71:14:12:
39:c9:16:d9:cd:fc:8e:85:5e:e4:04:78:20:7c:8a:
76:46:6d:42:ef:67:37:97:9f:c0:d4:a3:a8:90:a8:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:54:50:F4:80:1C:E8:78:E3:77:38:B3:39:60:43:C6:45:82:C8
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:0d:97:40:fb:ff:d2:20:d1:b6:02:79:18:09:66:51:2d:
c6:67:a0:c1:2d:8d:8b:a6:fc:67:b0:ac:78:50:24:4b:24:18:
a4:2f:2b:54:2c:72:0c:eb:1b:00:f1:d9:cf:36:8c:ce:7f:9d:
a7:c8:91:93:28:98:26:67:5b:d1:54:12:60:a3:00:22:54:03:
67:2b:00:12:25:d3:cd:35:e0:16:ac:85:3a:d9:bc:4a:57:bb:
6d:fb:5e:a7:d3:a6:b7:f6:7b:67:15:5d:5f:ce:4e:8e:b4:4d:
c0:85:a1:0a:d1:a5:0e:73:28:bd:de:d7:0f:e1:88:26:50:3a:
84:e2:d3:73:fd:2d:0d:e9:63:a1:e2:c0:b4:ae:f6:51:9d:b0:
c6:c6:ed:21:0c:91:a9:39:2c:bb:fe:a2:e6:7a:02:93:30:82:
83:fc:39:5a:1b:d4:cb:50:5e:78:d9:f2:e9:85:43:eb:b3:c7:
9b:06:b0:79:c0:c4:cb:2e:7e:11:c8:1b:c5:66:9b:86:59:b9:
da:91:21:8b:b4:fc:14:38:78:86:fb:99:f6:e7:49:4d:e3:9c:
52:36:aa:ca:db:d9:10:1e:be:55:c7:79:39:57:79:83:c2:89:
15:7f:91:66:e8:6c:e2:ae:2b:31:f1:a6:3d:4a:42:e1:a2:e5:
38:bc:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:38 2026 by rpki-client