Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: qUv1ZFeiRdR/7GoKwCy0OgTpV+nj1BJKJNEIDj7hlIE=
Subject key identifier: 31:CE:85:DF:B7:A5:AF:44:5B:60:DF:CF:62:34:97:8D:14:2A:7A:A6
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019F927FD64B8FDF38D97ABD0A2AF013F47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 05:01:19 +0000
Manifest this update: Fri 24 Jul 2026 05:01:19 +0000
Manifest next update: Sat 25 Jul 2026 05:01:19 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: O1QrilCjB6L9wu9kdkwB/0vzWGiBX4ACakhufL/IiNM=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:d6:4b:8f:df:38:d9:7a:bd:0a:2a:f0:13:f4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 24 05:01:19 2026 GMT
Not After : Jul 25 05:01:19 2026 GMT
Subject: CN=31ce85dfb7a5af445b60dfcf6234978d142a7aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:e6:d9:91:0b:cf:fa:72:4d:91:19:bb:07:
1e:6f:3e:8c:fc:16:44:36:95:b0:1c:5e:19:92:c3:
e8:61:d0:a7:5b:bd:d4:22:3e:20:52:f3:a2:a8:6f:
92:da:8f:80:4a:d7:2c:69:ac:eb:34:2b:f4:b3:c7:
70:2f:4c:71:3f:c4:37:6d:62:82:9e:58:e6:5c:a2:
7e:10:92:63:a8:12:f4:70:42:48:43:5e:71:23:a8:
ea:a8:d0:c0:e8:d4:da:62:e9:d1:0c:0a:d3:89:90:
63:6a:f7:ec:af:2d:69:c0:71:eb:f5:1e:ff:ef:1d:
25:e8:ff:f4:e6:c0:d1:f2:ec:2f:e1:8b:89:49:67:
6f:8a:0d:d2:81:66:54:bf:ce:3d:b3:c3:7a:81:35:
a8:23:a5:cb:92:9c:92:08:5b:e7:31:84:56:da:99:
98:47:d2:7a:2e:be:f1:91:6b:c9:99:bf:f2:ef:90:
a4:b9:6e:26:02:fa:11:86:f8:8c:ea:eb:00:ed:23:
50:0e:72:ea:19:2e:86:3a:d5:d5:7c:9a:28:f3:18:
a1:e0:4a:7f:29:4f:5c:e1:e3:7f:6f:4e:c5:fd:f6:
70:ae:73:5e:69:a9:6c:48:8b:8f:79:e8:a9:c7:6b:
8f:38:3a:f0:78:36:ac:4f:4f:4e:7b:bb:38:3c:ad:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:85:DF:B7:A5:AF:44:5B:60:DF:CF:62:34:97:8D:14:2A:7A:A6
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:39:42:71:19:c5:30:6e:67:d0:78:37:aa:9f:15:14:6e:
f7:64:74:83:30:c0:6b:bf:26:5e:70:09:a8:21:6b:24:e3:82:
d5:3c:98:57:d2:74:ee:4e:49:16:b2:bc:b8:43:1e:94:78:f8:
17:b7:88:c4:99:14:bc:fe:80:56:8c:b1:a8:d0:f6:3a:fd:a7:
35:6c:a8:26:a6:d9:f2:c7:b0:f1:4d:b6:01:a4:3a:1f:5c:32:
e8:12:3b:bc:14:d0:10:5a:b6:d2:35:45:27:8e:ee:a2:2c:c2:
cb:c7:bc:5e:fa:34:33:c2:bd:19:e4:24:e1:0b:f5:25:bb:38:
e7:e3:0e:37:17:88:3c:99:bd:7a:27:66:ba:08:ff:9e:a6:ea:
02:15:54:0a:57:42:4a:a3:84:70:ac:ff:86:d6:6e:12:29:49:
6a:38:0d:08:0a:72:c3:ca:5e:2c:b9:00:68:85:0b:8b:15:cf:
cf:ee:57:c9:08:16:4d:ca:46:82:66:9b:62:1c:28:fe:0c:a3:
50:17:9b:4c:23:5d:d9:71:fd:49:64:e8:63:9c:03:4f:fd:09:
eb:5a:ef:1e:c3:84:3d:bd:6e:79:b8:7c:85:d5:97:2f:ca:61:
e7:18:ef:99:2d:b8:28:2f:5a:02:b2:5d:f7:94:94:84:5c:85:
4f:4b:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:21 2026 by rpki-client