Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: xxcHKGvh3rH6C0jswEr9ibviZCocpzmTIeROa/UpQRI=
Subject key identifier: 1B:2E:1F:DC:2C:39:5B:FE:FF:C9:D6:C7:5F:50:AE:98:29:A0:04:41
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019F916DBBBFE5C8FE8E4B9EE83D8EB3EBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 00:01:55 +0000
Manifest this update: Fri 24 Jul 2026 00:01:55 +0000
Manifest next update: Sat 25 Jul 2026 00:01:55 +0000
Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=)
2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: Lat0UYxj/nfGCUCht/A4ERwRXMbjS2y5BGddibSNpJ4=)
3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:bb:bf:e5:c8:fe:8e:4b:9e:e8:3d:8e:b3:eb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jul 24 00:01:55 2026 GMT
Not After : Jul 25 00:01:55 2026 GMT
Subject: CN=1b2e1fdc2c395bfeffc9d6c75f50ae9829a00441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:bd:d1:b5:98:7e:d3:ff:5b:32:f0:6a:d0:
42:a5:aa:87:2a:43:f3:aa:9d:2d:e3:29:0f:22:41:
9b:5e:bd:d8:2f:16:c9:45:c1:f6:e3:c2:0b:dd:40:
2a:36:4e:66:ad:f3:50:2a:40:fb:6d:4a:b2:c6:ee:
85:ab:f3:22:17:41:56:74:83:8a:71:7a:1b:32:34:
d6:0b:d5:b7:6b:e4:49:e7:85:96:21:54:bc:74:75:
b8:10:b1:bb:25:05:40:7d:71:39:02:18:e8:37:a1:
b3:fd:4c:09:1b:bd:a4:5a:fd:3f:80:25:bc:54:f1:
68:a9:3c:85:05:5c:54:02:90:08:58:08:a8:91:c7:
78:ad:44:32:61:e2:63:22:44:34:24:e9:50:4d:59:
c3:de:98:2f:e7:73:53:58:41:62:28:43:3c:29:4c:
2d:1d:83:c9:3c:e1:d5:3e:40:8c:d0:6b:6b:c5:f0:
54:f1:de:db:d2:78:d7:a5:50:48:8f:a6:d2:b1:9c:
67:5e:75:15:2d:a5:af:f4:0e:5e:1b:32:6f:2e:79:
76:c0:f1:2a:a8:ad:b5:6f:11:31:f4:54:28:f6:04:
05:68:1b:24:e3:df:8f:03:d6:ca:63:e4:66:29:64:
3b:13:db:d6:ef:7c:4d:b2:d4:e0:28:78:c5:37:4e:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:1F:DC:2C:39:5B:FE:FF:C9:D6:C7:5F:50:AE:98:29:A0:04:41
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:19:2d:33:7d:aa:2f:ee:61:fe:0b:1e:ab:e6:9b:c4:6f:c5:
3a:b3:63:dd:3d:8b:f3:d1:d1:54:e4:b2:cb:e0:47:f4:88:7b:
2d:b9:4c:74:bd:c8:53:70:1e:7e:70:a0:e8:01:de:11:fe:ea:
90:fb:e6:47:6a:e5:a2:69:be:42:e2:71:3f:d3:f3:4a:ad:57:
19:59:08:3e:be:4c:dc:57:e8:43:5f:db:41:51:68:3e:97:7f:
80:92:85:3f:d4:2a:cc:89:39:6f:ba:ef:d8:d6:04:07:c2:f4:
c9:57:63:55:07:ce:1d:43:cc:b9:d9:6f:53:93:73:11:d5:6f:
9c:9c:01:eb:c0:63:bb:d0:f5:b5:5e:02:c6:ba:b6:88:2c:85:
f7:06:12:9b:d8:c4:f0:21:50:35:9c:85:d1:8a:bf:0a:a6:04:
5b:56:7a:8b:a2:4f:82:b1:95:a8:80:45:35:bc:18:25:b0:65:
d2:06:c1:26:d7:d6:cf:21:7d:b5:b8:83:0f:81:32:65:b5:e2:
6e:43:5a:d2:2a:51:21:e6:c5:f8:dc:8d:ec:92:e1:a5:3e:dc:
c0:eb:ff:44:87:5f:0e:08:4e:fb:13:a6:27:90:95:1f:bc:48:
87:e2:7e:5c:dd:f2:8c:57:9b:59:65:d5:b2:a4:d8:b2:ac:ec:
a2:10:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:16:09 2026 by rpki-client