Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: V5WiH7wiOQKPmCvVSzACFw65LRsL5GbZ4On9meJ6lfA=
Subject key identifier: 92:67:E9:70:55:79:8C:FB:05:50:2B:83:6F:F1:B5:25:FA:20:7B:F1
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019F9392400B89CCA41F619B47AE06376A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0219
Signing time: Fri 24 Jul 2026 10:01:02 +0000
Manifest this update: Fri 24 Jul 2026 10:01:02 +0000
Manifest next update: Sat 25 Jul 2026 10:01:02 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: NDtT4rRDbbUXLzzWHHeUkF7G1jW2rifAJiqR4jtUq8k=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:40:0b:89:cc:a4:1f:61:9b:47:ae:06:37:6a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jul 24 10:01:02 2026 GMT
Not After : Jul 25 10:01:02 2026 GMT
Subject: CN=9267e97055798cfb05502b836ff1b525fa207bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:2e:b6:da:b2:0b:dc:67:34:11:d9:3e:78:
f4:5d:24:c5:6f:b9:ff:58:4d:62:35:6d:b7:91:2b:
07:ef:6b:93:91:72:4f:d5:a2:75:e5:e6:f7:c3:af:
c5:44:92:53:20:14:28:c5:df:76:07:4f:34:e1:25:
86:66:90:83:41:0d:24:7d:d2:a6:23:3d:ac:63:70:
23:ec:f7:29:57:b9:f8:43:61:6d:21:98:25:81:3b:
23:23:f7:17:eb:0a:e0:e0:84:0b:6a:83:2f:f7:bb:
5e:75:f6:97:2b:86:83:80:48:e4:26:e1:7a:84:87:
48:1b:db:0b:d3:0d:c9:71:63:8c:70:e3:da:27:4d:
4f:37:eb:c3:3f:5d:e0:9b:3e:d7:33:33:b8:34:7e:
d1:b9:23:34:82:a7:aa:52:d5:d6:3f:73:25:e9:59:
91:ca:54:6c:06:cb:af:e9:99:6a:1e:7c:f6:d3:90:
17:ce:2e:70:2c:e4:ed:af:ca:74:82:77:cc:9f:f8:
71:b0:b5:e9:1b:b5:2c:8a:89:f8:ab:1e:18:e3:25:
da:cf:a9:1d:2c:d0:4a:10:d4:b0:db:cb:4b:8a:c1:
cd:f6:e5:c2:49:b5:37:cf:85:76:a2:b7:11:18:a0:
32:b8:32:c9:fa:bf:42:5e:70:a5:08:7f:42:ba:72:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:67:E9:70:55:79:8C:FB:05:50:2B:83:6F:F1:B5:25:FA:20:7B:F1
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:ac:15:c7:7b:c3:76:51:41:32:fa:e4:22:cf:c6:e5:a9:
da:55:e5:18:af:6f:0f:52:2a:6b:05:a5:8e:35:6c:ae:78:87:
8f:95:42:c2:ce:b8:09:b1:e6:20:4d:0d:69:9c:43:a6:2f:3f:
17:b8:03:ae:41:65:41:b2:6f:32:7a:40:e7:43:f9:f9:05:69:
b9:57:4e:d8:ed:5e:bd:43:7d:02:83:85:4a:24:f6:33:f9:99:
26:a9:85:2b:1f:c7:2d:0a:97:dd:49:91:e3:bc:f9:c6:00:6e:
34:fa:d4:8f:6d:91:e4:ca:b6:f9:4f:e0:29:19:52:74:be:31:
43:7c:92:72:63:12:4e:ca:d8:f2:76:fd:6d:e3:b1:3b:1f:4a:
5c:f9:1c:a0:bb:99:09:aa:d6:22:81:e4:ea:38:f7:fd:8e:e6:
8e:9e:c3:54:36:94:7c:fd:4f:69:0b:c0:7a:b7:f7:33:22:3f:
3d:14:e1:e2:2e:e1:a3:89:ba:24:14:54:9b:c4:d1:b9:10:ae:
14:85:20:b3:b9:8c:56:fb:a0:94:31:42:f5:2c:65:ac:7e:3d:
00:14:d5:5d:be:a1:5f:85:c6:61:3b:e7:d4:78:f6:3b:32:da:
7e:e4:87:69:d8:16:82:ff:50:17:22:76:29:16:ce:c3:b3:bd:
00:b5:e5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkkALicykH2GbR64GN2ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTM1ZjEzYWJmMDJmYTNmY2E1MDVkNTY4ODE2YWZjNTkz
MzQ5MTYwHhcNMjYwNzI0MTAwMTAyWhcNMjYwNzI1MTAwMTAyWjAzMTEwLwYDVQQD
Eyg5MjY3ZTk3MDU1Nzk4Y2ZiMDU1MDJiODM2ZmYxYjUyNWZhMjA3YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+guttqyC9xnNBHZPnj0XSTFb7n/
WE1iNW23kSsH72uTkXJP1aJ15eb3w6/FRJJTIBQoxd92B0804SWGZpCDQQ0kfdKm
Iz2sY3Aj7PcpV7n4Q2FtIZglgTsjI/cX6wrg4IQLaoMv97tedfaXK4aDgEjkJuF6
hIdIG9sL0w3JcWOMcOPaJ01PN+vDP13gmz7XMzO4NH7RuSM0gqeqUtXWP3Ml6VmR
ylRsBsuv6ZlqHnz205AXzi5wLOTtr8p0gnfMn/hxsLXpG7Usion4qx4Y4yXaz6kd
LNBKENSw28tLisHN9uXCSbU3z4V2orcRGKAyuDLJ+r9CXnClCH9CunIr8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJn6XBVeYz7BVArg2/xtSX6IHvxMB8GA1UdIwQY
MBaAFDYTXxOr8C+j/KUF1WiBavxZM0kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQt
OWRmZDc5NWE1YWRhLzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQtOWRmZDc5NWE1YWRh
LzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuKsFcd7
w3ZRQTL65CLPxuWp2lXlGK9vD1IqawWljjVsrniHj5VCws64CbHmIE0NaZxDpi8/
F7gDrkFlQbJvMnpA50P5+QVpuVdO2O1evUN9AoOFSiT2M/mZJqmFKx/HLQqX3UmR
47z5xgBuNPrUj22R5Mq2+U/gKRlSdL4xQ3yScmMSTsrY8nb9beOxOx9KXPkcoLuZ
CarWIoHk6jj3/Y7mjp7DVDaUfP1PaQvAerf3MyI/PRTh4i7ho4m6JBRUm8TRuRCu
FIUgs7mMVvuglDFC9SxlrH49ABTVXb6hX4XGYTvn1Hj2OzLafuSHadgWgv9QFyJ2
KRbOw7O9ALXlgg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:26 2026 by rpki-client