Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: i/NKD8PRFSYmyze1Y8ybXs444B7Zz3Zqwvf1EYCuHbw=
Subject key identifier: 22:9A:06:9C:D7:7A:88:92:C5:B9:BC:E4:EA:E6:DE:D1:89:44:D3:EF
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 019F916C39DE46AA9B119827A6978E9DBE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 00:00:16 +0000
Manifest this update: Fri 24 Jul 2026 00:00:16 +0000
Manifest next update: Sat 25 Jul 2026 00:00:16 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: N3PY2/TxSL4klrEo1k2xJ1W6/7SjkKeX8mMHaW119V0=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:39:de:46:aa:9b:11:98:27:a6:97:8e:9d:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Jul 24 00:00:16 2026 GMT
Not After : Jul 25 00:00:16 2026 GMT
Subject: CN=229a069cd77a8892c5b9bce4eae6ded18944d3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b6:2d:97:5e:b3:9b:1f:78:e6:37:f2:88:39:
1b:4b:0a:16:26:9a:c3:0c:ba:da:fe:6c:16:21:eb:
23:7d:97:f1:ae:c2:01:f2:18:6c:d5:ce:c6:b0:dc:
02:78:ff:04:25:86:80:5f:b1:16:87:c5:fc:7f:46:
21:b4:2b:4b:b6:8d:4f:f5:4d:f8:ae:9f:19:3e:da:
c5:c3:ff:65:5b:9d:43:e5:13:3a:8e:cf:91:67:6e:
36:17:77:b9:ee:af:90:10:c2:25:a2:e4:d7:30:a8:
58:0d:5f:3e:22:00:bd:8e:c2:0a:48:db:7e:1d:fe:
fb:15:76:81:15:a2:88:67:b9:70:3f:46:ca:a3:9a:
0a:63:71:77:9e:74:cf:ff:00:38:48:e5:95:f6:a4:
fc:3c:c0:de:6d:7a:0a:b4:e0:13:62:9f:44:5a:32:
8c:5e:c5:d2:44:2f:e6:4c:43:25:99:db:66:43:fc:
36:fb:86:23:1f:2f:fc:74:36:5d:5a:92:a3:c7:ee:
a0:28:d9:65:c9:30:cd:8b:3a:cb:fe:1a:5e:4c:65:
9a:6a:81:99:4a:15:3f:69:b0:eb:e7:be:e6:22:da:
a3:b9:d9:16:a0:46:6a:82:77:38:2d:60:d0:48:e5:
17:a1:76:b9:c8:ac:81:8e:68:fe:b4:5c:d2:55:70:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:06:9C:D7:7A:88:92:C5:B9:BC:E4:EA:E6:DE:D1:89:44:D3:EF
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:d0:b6:fa:44:3d:c5:57:69:63:ba:ee:74:3e:0b:4e:25:
97:7d:73:f1:ef:1e:fa:be:26:4f:48:47:b6:4f:ac:aa:5a:8a:
5b:f6:b8:cb:be:7f:ea:4e:14:33:53:dc:d6:63:44:07:08:70:
c0:f5:96:ce:85:7f:ed:9b:8b:50:44:0e:04:a9:13:11:71:59:
ae:a2:6e:1d:ce:56:61:65:e0:97:88:54:bf:68:df:11:dc:9f:
93:98:d8:c2:db:5c:a4:96:55:16:1c:cd:e5:f2:6c:20:4b:48:
6d:b8:4b:97:a7:6e:19:75:9c:35:36:e4:0f:c0:ed:5e:b0:3d:
71:98:25:a8:c2:ea:fe:e0:dd:90:63:bb:a9:86:95:87:b5:7d:
e4:01:f9:e1:d7:d9:1b:52:a8:bd:3a:f8:d8:bf:88:95:71:7c:
90:fc:d4:72:30:a7:26:a2:15:00:e6:02:c3:08:b9:86:2e:b4:
55:39:25:af:83:90:f6:f0:b2:4c:b7:5c:ba:0c:53:c6:b1:19:
a3:01:96:5c:72:f7:8b:c9:92:76:f9:56:de:2a:b7:50:12:ca:
12:e7:c5:f1:50:ad:d0:de:c6:85:49:ad:da:f3:d5:02:87:9b:
22:1e:9e:d6:4f:9b:e8:fe:e0:4d:9f:82:bc:d9:d5:7a:5e:48:
e9:71:cd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbDneRqqbEZgnppeOnb5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3
YTYwNDYwHhcNMjYwNzI0MDAwMDE2WhcNMjYwNzI1MDAwMDE2WjAzMTEwLwYDVQQD
EygyMjlhMDY5Y2Q3N2E4ODkyYzViOWJjZTRlYWU2ZGVkMTg5NDRkM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bYtl16zmx945jfyiDkbSwoWJprD
DLra/mwWIesjfZfxrsIB8hhs1c7GsNwCeP8EJYaAX7EWh8X8f0YhtCtLto1P9U34
rp8ZPtrFw/9lW51D5RM6js+RZ242F3e57q+QEMIlouTXMKhYDV8+IgC9jsIKSNt+
Hf77FXaBFaKIZ7lwP0bKo5oKY3F3nnTP/wA4SOWV9qT8PMDebXoKtOATYp9EWjKM
XsXSRC/mTEMlmdtmQ/w2+4YjHy/8dDZdWpKjx+6gKNllyTDNizrL/hpeTGWaaoGZ
ShU/abDr577mItqjudkWoEZqgnc4LWDQSOUXoXa5yKyBjmj+tFzSVXD9jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKaBpzXeoiSxbm85Orm3tGJRNPvMB8GA1UdIwQY
MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt
MjdiODdiZmJlZTdiLzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi
LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpXQtvpE
PcVXaWO67nQ+C04ll31z8e8e+r4mT0hHtk+sqlqKW/a4y75/6k4UM1Pc1mNEBwhw
wPWWzoV/7ZuLUEQOBKkTEXFZrqJuHc5WYWXgl4hUv2jfEdyfk5jYwttcpJZVFhzN
5fJsIEtIbbhLl6duGXWcNTbkD8DtXrA9cZglqMLq/uDdkGO7qYaVh7V95AH54dfZ
G1KovTr42L+IlXF8kPzUcjCnJqIVAOYCwwi5hi60VTklr4OQ9vCyTLdcugxTxrEZ
owGWXHL3i8mSdvlW3iq3UBLKEufF8VCt0N7GhUmt2vPVAoebIh6e1k+b6P7gTZ+C
vNnVel5I6XHNaA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:51 2026 by rpki-client