Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: xiAyUwIPXVyA7rgzBwwS2ZriBi7Yeb5ZahukpCuAJH8=
Subject key identifier: C1:C5:63:1D:41:7A:DA:B2:36:A9:46:12:59:21:E7:4E:02:9A:7F:C1
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019F91A3FCA42225FB47B339E9873B051F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0218
Signing time: Fri 24 Jul 2026 01:01:10 +0000
Manifest this update: Fri 24 Jul 2026 01:01:10 +0000
Manifest next update: Sat 25 Jul 2026 01:01:10 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: 1Iv4i+nFfNw1mnpsmveufU4V6PmHA0RNURTBy42tezs=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:fc:a4:22:25:fb:47:b3:39:e9:87:3b:05:1f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jul 24 01:01:10 2026 GMT
Not After : Jul 25 01:01:10 2026 GMT
Subject: CN=c1c5631d417adab236a946125921e74e029a7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:a0:fa:98:3c:d8:10:d6:0b:aa:43:c2:19:
05:42:db:95:36:b1:29:f3:5c:4a:1a:9b:c4:ed:19:
7f:96:64:42:29:f0:e5:62:7d:c2:d3:6f:1b:c8:ec:
73:c0:25:84:8f:9a:75:95:29:34:35:98:e2:81:7c:
81:df:b9:b3:cb:f0:a9:30:96:c4:7c:2d:ac:7e:de:
04:6e:5d:2e:39:a1:cf:28:52:96:c1:b4:c6:82:45:
f7:99:4f:0d:8b:78:ac:fa:37:e5:8b:97:28:cd:db:
65:b9:1c:8b:24:47:52:24:2d:1f:31:9f:70:19:30:
0d:17:6c:2f:ea:64:bb:f6:26:03:2b:8c:ae:e2:51:
21:64:11:21:8b:0e:bc:ed:83:89:fa:ff:2f:57:7c:
b2:b2:5e:eb:5d:7a:ea:34:ae:8b:8b:1c:00:26:ed:
08:b4:48:49:31:29:72:dd:b6:9a:43:8b:f7:ae:e2:
e6:05:9c:5c:04:9e:4c:1c:3e:40:bc:df:61:77:c4:
5d:68:0d:1f:62:c8:bd:2e:f9:f3:a4:a6:0f:17:29:
0d:32:58:8e:40:a4:e5:2a:09:05:4d:d9:21:36:1c:
9d:f4:e2:6d:89:0f:5f:90:95:5a:65:39:44:8d:44:
eb:98:ba:a8:7f:cb:3c:f0:30:ab:7f:90:e0:b2:f7:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:63:1D:41:7A:DA:B2:36:A9:46:12:59:21:E7:4E:02:9A:7F:C1
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c7:ac:3c:b1:e8:f7:3a:81:7e:c4:33:4d:89:b4:07:92:b4:
82:5a:d2:44:c1:cd:96:53:ce:fc:ee:e8:3f:13:3e:3d:86:fa:
b4:40:e3:75:54:af:9a:9e:95:b2:6d:b2:d8:86:0f:b1:e4:54:
de:b0:3b:d1:b4:7a:44:28:5a:cd:e9:d7:92:06:b6:4a:cf:38:
e5:b0:fa:06:ee:5d:14:f8:aa:7e:2a:5a:50:13:20:4f:3e:3a:
52:e4:5d:74:2a:94:d2:fb:de:4e:80:c2:64:e2:48:8b:62:54:
24:67:72:23:bf:a5:5d:31:fd:a4:c2:f6:bf:dc:60:27:93:d8:
70:19:7a:9a:e8:6f:a1:0d:a0:e4:7a:88:8b:33:ad:5f:ba:4f:
0b:72:0f:b7:06:ee:60:2f:e5:9b:ae:49:00:ab:f5:09:38:4d:
c6:e9:b8:71:0c:7d:01:4a:a0:c5:87:a9:71:6f:87:98:d0:b5:
7f:b8:50:4d:f0:08:43:15:d0:f6:d1:6d:99:43:c0:eb:16:8a:
0d:f7:ae:ba:a1:48:3f:d1:dc:1b:fd:e8:73:42:c7:b2:4f:14:
9f:f6:31:b6:7a:fa:8b:02:72:0f:5c:fb:7a:3f:f6:bf:b9:9a:
21:76:17:82:1c:70:26:ac:35:ac:39:7b:16:28:98:48:f7:24:
5e:94:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:49 2026 by rpki-client