Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
File: NOFy8gusVmf_hcr_gLRTZ1jm2po.mft (raw, json)
Hash identifier: 9spFJWxZSVHtqZgYNRQ7Ik4fLnWXq+d6WFe6rvLdyUw=
Subject key identifier: 3C:11:49:8E:4A:D2:F0:9F:95:1F:22:DD:23:3C:5C:CF:2F:0C:2B:0A
Authority key identifier: 34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
Certificate issuer: /CN=34e172f20bac5667ff85caff80b4536758e6da9a
Certificate serial: 019F916D5A85F08CE17F97DEAEF703EC9D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:30 +0000
Manifest this update: Fri 24 Jul 2026 00:01:30 +0000
Manifest next update: Sat 25 Jul 2026 00:01:30 +0000
Files and hashes: 1: ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa (hash: 6CkIgU30ZTpBXP27tZUxeNY4xYkwYzV9C1Gfa7vFkz4=)
2: NOFy8gusVmf_hcr_gLRTZ1jm2po.crl (hash: TyxiqXq88UUM4DlZQTdDfD+9O9iKIXdLAPJzdI+To4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:5a:85:f0:8c:e1:7f:97:de:ae:f7:03:ec:9d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e172f20bac5667ff85caff80b4536758e6da9a
Validity
Not Before: Jul 24 00:01:30 2026 GMT
Not After : Jul 25 00:01:30 2026 GMT
Subject: CN=3c11498e4ad2f09f951f22dd233c5ccf2f0c2b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:5d:e2:0e:ac:c5:1b:78:49:76:9d:71:46:
35:0b:ec:6d:56:d4:4e:ee:67:e4:0a:cd:f2:eb:d5:
2c:52:64:47:a5:f3:d3:b7:6b:57:2f:b6:40:0f:0e:
7d:1f:a4:5c:90:e0:58:3d:0f:e5:23:88:1e:50:7e:
99:73:41:26:13:4e:8a:de:8d:7d:23:d0:e4:31:d0:
3c:42:e2:e7:92:b0:c7:9c:7c:fc:f2:7c:9d:13:3c:
f7:8c:37:68:b4:e3:c5:d5:70:cc:32:51:13:c6:42:
10:58:ec:06:94:03:ca:cd:73:f3:6f:29:2a:80:8a:
e0:4b:f4:1f:1d:ae:e5:c7:06:23:a2:ea:08:b8:12:
af:19:10:ef:c6:84:f9:30:bf:11:1c:f7:02:94:8a:
cf:44:48:8b:28:9e:2f:e1:b0:04:f6:c5:d2:4c:ab:
1a:af:fd:69:af:04:39:ca:73:e6:05:9b:4f:3a:19:
cc:28:ca:74:76:7a:33:af:71:5e:33:a0:e9:af:b7:
1a:ef:32:41:94:80:68:62:d5:a8:c6:f5:e2:d1:ac:
18:18:23:7c:1a:bd:da:f0:96:7a:b4:44:4f:c1:c6:
f5:51:fe:17:77:81:14:af:07:ae:30:eb:80:ee:a3:
ec:84:c1:fd:d5:21:99:0c:f1:32:6a:72:73:66:47:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:49:8E:4A:D2:F0:9F:95:1F:22:DD:23:3C:5C:CF:2F:0C:2B:0A
X509v3 Authority Key Identifier:
keyid:34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e9:ba:99:7d:e1:8c:ed:93:ae:bb:94:9f:4a:14:23:2a:a8:
3f:0f:ae:ae:57:70:fe:bc:79:95:36:b7:f0:8a:b6:8c:af:f5:
88:cd:cf:37:55:cf:38:91:b6:83:52:90:58:48:ef:e2:73:ba:
e9:2f:1b:86:8a:13:9c:7b:67:81:a5:c5:7e:34:7f:9e:93:a1:
74:d0:6f:eb:5c:e5:aa:c1:f5:a2:41:82:bf:0a:fa:a8:9b:ec:
a7:e3:ef:04:f1:d3:0a:f9:4c:da:e8:0c:be:b3:c8:60:2f:9f:
0b:4d:66:15:90:45:62:45:c4:52:09:48:f4:75:d4:d2:85:a2:
af:ee:52:bf:a0:55:88:77:e0:df:b6:e1:0b:42:48:83:db:5a:
56:c3:f4:01:26:65:11:56:f8:58:9a:72:5b:4f:ad:94:51:63:
ff:86:6a:f8:c5:0f:b0:37:fe:0a:cc:60:33:e2:4d:86:c2:e1:
43:99:cf:81:51:96:ab:6e:87:19:0a:04:61:1e:74:fb:2f:b7:
98:68:be:a5:d1:d6:97:f2:e4:fd:39:70:ca:de:96:53:e9:54:
5d:12:a4:93:be:06:17:bd:20:7e:60:6e:e0:e1:76:a7:7f:66:
a9:52:d1:b6:2a:79:0e:61:8e:80:d1:e9:ff:97:e1:08:c5:89:
3c:78:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:59 2026 by rpki-client