Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: hLgLMJxohW1xLA0492a7gfHmndT4OqXkswJLoywxS6k=
Subject key identifier: 03:5B:21:24:C5:DC:09:F0:87:53:3A:40:9B:73:5F:AB:3D:E5:EA:15
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019F9135DC591CDD504B84274B04AC1CFE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 23:00:53 +0000
Manifest this update: Thu 23 Jul 2026 23:00:53 +0000
Manifest next update: Fri 24 Jul 2026 23:00:53 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: YARO96HTIPb1sCUxDYDqqOQeNbk5vfgkPKC2omWQmgc=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:dc:59:1c:dd:50:4b:84:27:4b:04:ac:1c:fe:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jul 23 23:00:53 2026 GMT
Not After : Jul 24 23:00:53 2026 GMT
Subject: CN=035b2124c5dc09f087533a409b735fab3de5ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:4f:4d:ae:9d:6a:ec:5f:75:5f:f6:3b:35:
92:58:b4:c3:7e:7f:b5:5a:6a:01:83:1b:f6:1a:46:
15:88:21:e5:ba:57:eb:b2:dd:4b:0b:8f:50:78:56:
fc:fc:a9:80:66:78:79:69:32:64:31:30:b3:af:d5:
74:10:61:69:a5:b3:ed:51:f4:1e:82:19:78:f8:97:
cc:00:67:80:2d:1c:85:4f:ce:56:4a:85:22:1c:86:
86:24:39:aa:19:81:d9:04:cd:f9:93:f7:20:f3:be:
c6:3b:57:9e:5d:f5:e5:64:73:2a:c7:21:18:59:97:
bd:37:65:a4:66:42:82:60:9b:ca:a4:42:af:70:d1:
fd:1b:0f:6e:ce:b2:67:7c:4b:c0:c9:cf:b7:e5:e4:
34:5b:19:5e:91:7a:28:7e:02:ee:f6:f8:60:c0:e9:
56:b4:b4:43:67:e7:e3:27:33:3b:22:a0:26:1a:75:
e5:71:f2:d3:a9:b2:03:9f:f0:96:5e:28:ab:cc:56:
df:49:62:e4:c6:83:ec:70:dc:24:72:43:11:52:4f:
c8:45:ec:38:80:01:9f:ad:a7:17:62:c2:d4:81:29:
0e:7e:ec:8e:17:a2:a8:38:75:6b:53:58:d5:45:b5:
66:b5:d3:2c:f7:5c:a3:70:d2:d0:fc:83:e4:14:d1:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:21:24:C5:DC:09:F0:87:53:3A:40:9B:73:5F:AB:3D:E5:EA:15
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ea:5e:41:2b:24:84:cc:37:45:3f:40:ff:81:c7:60:b5:21:
fd:36:75:ac:d4:eb:50:7f:7d:b7:97:d5:45:dd:66:13:e6:6d:
c2:ed:98:2b:53:c2:55:4f:4a:4c:a9:40:bb:f4:1b:c0:05:a3:
97:2a:35:37:86:60:31:92:98:46:9d:0a:a3:0f:d4:46:b6:e8:
89:86:c8:ae:47:f7:b8:f6:c8:35:0c:3e:6d:81:b4:18:e4:d4:
c6:e6:f6:e9:19:ea:7b:0d:3c:b5:28:23:d6:ba:df:c8:67:9b:
88:45:32:fa:09:75:3b:96:04:98:96:e8:66:da:85:a3:08:6d:
bf:98:43:48:5c:73:c9:47:98:15:83:c7:03:c9:bc:1a:59:b5:
84:5a:c7:bd:87:87:16:3a:59:6d:9f:28:ff:1b:8b:2a:c4:07:
58:69:bc:b4:f9:07:d3:cb:cc:a1:d9:59:a0:12:54:ce:90:28:
11:fe:1d:ff:44:e9:16:3a:59:8d:d1:b9:4c:97:b2:a8:a4:bb:
23:4c:7f:8e:f1:91:de:ba:1e:23:e8:50:c1:34:21:50:4a:40:
d9:8d:9a:d3:d3:a1:03:44:95:30:d1:5a:89:d2:8d:76:2b:c8:
8a:63:85:87:d7:d5:a6:8f:82:b5:c6:ff:bf:67:cd:eb:2f:55:
c8:4d:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:12 2026 by rpki-client