
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: AGuZ2BRLhE21bstDWpvdXSRhfE/b9/3xbmVPC/+IEvo=
Subject key identifier: 79:34:BF:F5:B7:31:AC:43:FF:99:F9:F9:63:78:A4:EB:EF:53:7C:BB
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019F9091795977EB14DB82496CA58F695209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 1177
Signing time: Thu 23 Jul 2026 20:01:20 +0000
Manifest this update: Thu 23 Jul 2026 20:01:20 +0000
Manifest next update: Fri 24 Jul 2026 20:01:20 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: swNQPfnAPIrPifqYUb94n5PIzSKRWUEMcPD0nQ/e42k=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:79:59:77:eb:14:db:82:49:6c:a5:8f:69:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jul 23 20:01:20 2026 GMT
Not After : Jul 24 20:01:20 2026 GMT
Subject: CN=7934bff5b731ac43ff99f9f96378a4ebef537cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:f6:52:05:8b:04:68:6d:8a:2a:27:bd:8f:
ff:b9:24:cf:5f:4e:c0:c6:62:48:7b:5c:9f:fb:6f:
d3:8e:c9:04:67:74:8c:96:e4:e1:41:de:73:f1:1c:
d0:35:8e:55:9c:3d:ed:18:4f:80:47:c3:68:e4:4c:
b1:7c:f1:fa:8e:94:9d:ef:e8:b6:31:e0:c4:75:9e:
52:4e:37:04:be:ad:13:e5:6d:b0:2b:2c:47:37:b8:
b4:92:12:61:a0:91:e7:ee:f0:81:5b:1f:5e:48:58:
e6:21:62:67:f9:45:1c:e3:05:29:b1:97:ed:4e:28:
ee:d7:92:83:7a:21:b2:af:57:63:13:dd:3b:bd:6e:
4a:d7:38:ec:cd:20:11:03:0d:cf:b5:6e:44:b6:8b:
a2:e2:cd:9e:29:04:25:27:9b:bd:c3:78:94:fe:d9:
ce:68:9c:31:3a:17:00:dd:aa:f9:b0:6d:1a:68:e9:
43:b8:03:68:bd:57:78:54:a3:9c:d2:6e:4b:19:a6:
7f:92:fc:86:f2:81:29:4f:68:9d:24:5e:85:c3:21:
b0:da:01:84:e2:6a:8f:52:85:18:97:eb:fd:c1:97:
7d:9d:b9:87:d0:28:44:6f:ea:57:90:a9:0f:d3:ff:
8c:c8:be:5e:63:a4:6c:e8:e5:8d:9b:91:4c:5e:b6:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:BF:F5:B7:31:AC:43:FF:99:F9:F9:63:78:A4:EB:EF:53:7C:BB
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:87:e0:3b:5f:b5:c8:11:91:f4:24:50:be:bc:a2:ab:0b:29:
2b:3f:5c:7b:ee:28:60:85:be:8b:a0:31:5a:32:56:f0:a5:ad:
c2:dc:6e:5b:cf:99:77:48:91:a4:e6:14:23:3f:6a:2b:0c:8f:
e2:a0:33:ee:a8:c8:67:c7:03:28:97:31:6f:a3:d9:f8:34:eb:
a5:7d:53:6c:f8:c8:1c:8c:76:25:70:39:1b:f7:f9:06:2e:24:
dc:14:ca:63:fb:17:dd:21:d2:ab:43:ed:80:6c:10:01:4b:9c:
34:3e:64:1d:65:1e:78:6f:f6:94:33:21:84:57:a5:3e:f6:97:
c0:68:87:87:6b:46:36:bb:83:88:7c:98:24:e3:e8:56:00:b9:
90:ad:7d:04:7b:23:38:86:45:74:de:67:51:5e:16:ea:7a:85:
8d:bd:e4:63:e8:29:ea:37:ed:91:a9:59:cb:66:6b:c2:37:ef:
62:fb:da:bf:32:22:9a:53:c8:ab:28:40:17:87:4f:fe:df:6f:
b1:a3:d4:f5:61:d0:71:ee:c1:43:94:de:fa:f8:f7:2c:f5:87:
51:85:19:8d:01:49:36:63:69:6d:7c:ef:a4:54:79:56:7d:7b:
f0:c6:38:32:66:cd:4b:06:d0:69:f3:82:1a:0f:19:90:5a:d5:
92:f9:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:37 2026 by rpki-client