Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
File: Nw9PXYTCtc7jxukDy1MNapH0BLo.mft (raw, json)
Hash identifier: JyhFyYmQIsLK1UM2HxxA4Kx2qEYlVhboQFKA3sXjW2A=
Subject key identifier: 45:40:2F:85:1D:A5:3E:80:BA:25:B5:73:93:CC:51:41:1A:AB:15:1C
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F9022E9800BE25D8FF6185D650A768564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
Manifest number: 41
Signing time: Thu 23 Jul 2026 18:00:34 +0000
Manifest this update: Thu 23 Jul 2026 18:00:34 +0000
Manifest next update: Fri 24 Jul 2026 18:00:34 +0000
Files and hashes: 1: Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa (hash: p8sAzT87uCiO5lnenDGKFMx6AhGEdEoqJ/Myeptn3ZU=)
2: HUTjNxMDyTWfIeACtHVXKD8A41A.roa (hash: JXFmwel69gCfyCsynPXE0VRtMMoBcAjcMhowe4HtpoI=)
3: Nw9PXYTCtc7jxukDy1MNapH0BLo.crl (hash: Xbpm/OwApmM9cZh5ADeEV2FzlPyBlGatX19Ye8iP+R8=)
4: ZL6zrkemzEADAhC0Fi3nhK_pom8.roa (hash: vHAbtfbPDaOsa5CvBYtUditrWJEPKQpb6oj185KbRTc=)
5: etGPt2jesAgywvKvXb4eae0QhGs.roa (hash: O32NEww1ELuE+mxxWCi+G2R5kqYIhKJafeEnMHRBI8I=)
6: jltpBKXiQBCP3TAqLQdxnsIEzXE.roa (hash: G4dhanvX94kK84q1bgMQYY5NYjqmSMrIZgDUfvnVnxI=)
7: uBliW8lm_-Es_oU23ZIgU9wo5GE.roa (hash: zArbV+ovixZNJT5zlNVtmsFx8eat6ALekSg9jiC4bKY=)
8: zgvEdMDZHbRR3S85g3W5-vdoz24.roa (hash: gVCQ/4xNYvogByqiF6Uw696rFdgMuXOWFwRJziSooto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e9:80:0b:e2:5d:8f:f6:18:5d:65:0a:76:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 23 18:00:34 2026 GMT
Not After : Jul 24 18:00:34 2026 GMT
Subject: CN=45402f851da53e80ba25b57393cc51411aab151c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:b6:aa:d8:87:74:92:a6:c3:33:e7:f3:79:
3e:1b:be:d9:d8:26:dc:d2:1c:2a:2b:0a:0a:16:fa:
8a:0e:55:7c:0c:92:32:7a:14:ca:7c:b5:14:df:22:
45:b1:ef:0f:4b:a4:9c:00:65:c9:e2:53:3f:3f:31:
64:e9:15:14:b5:bc:12:aa:a4:97:13:79:de:a2:05:
ad:b6:d7:ea:e3:13:ca:5c:e3:f9:df:63:1b:2c:33:
8a:61:ed:cf:44:c4:32:5e:9b:34:28:0b:20:92:99:
1e:49:70:06:67:2f:5f:12:a2:2a:3a:a7:55:6e:42:
4d:28:fb:25:b8:49:39:2c:84:c1:ea:70:f2:80:b7:
62:7c:da:07:08:04:36:5c:a6:2a:6d:ee:8b:04:1f:
18:d9:53:46:06:05:cd:6f:86:2d:9a:94:d8:3a:a6:
30:e4:3d:62:03:8d:99:e6:08:59:62:2f:8e:4d:ab:
c1:4f:15:a9:ae:c6:4e:34:dd:82:84:ec:fb:1f:77:
4f:a6:13:82:6b:48:c7:e3:08:6b:ff:6a:4c:58:01:
67:75:85:25:81:a8:d8:56:88:09:b9:10:23:f9:31:
76:6a:8f:d2:fc:57:af:f7:bb:aa:21:b0:64:fd:d7:
5a:2d:fd:7f:b6:bf:50:e0:6c:cd:c9:20:b6:17:6f:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:2F:85:1D:A5:3E:80:BA:25:B5:73:93:CC:51:41:1A:AB:15:1C
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:41:39:62:51:c3:7f:a0:53:4c:73:ba:d2:da:d9:ce:69:9e:
aa:e9:53:83:60:cc:50:63:a2:2a:2e:44:60:cb:ea:43:91:b8:
65:e8:7b:80:6c:7f:3a:2d:db:1b:31:33:bc:59:88:33:18:c5:
92:42:86:1b:59:aa:ea:5c:41:55:ef:b0:d6:06:90:c1:95:d6:
7b:c9:ed:bc:a7:ca:ce:e0:12:8d:cc:3e:4f:b6:e3:37:23:7e:
aa:cb:46:d2:5a:00:03:9c:c6:20:5c:20:62:c0:b2:bd:88:22:
fc:d0:98:5b:50:f3:c3:e2:1a:42:56:fe:a8:e1:6f:ae:7a:a4:
53:d9:c7:bf:68:64:1b:bc:43:73:64:ba:7b:68:36:5a:80:77:
14:ac:6b:5c:f2:49:8c:2f:34:af:3d:70:44:3b:f3:a4:2f:1e:
a5:fb:18:2f:5d:32:c3:b0:1c:be:ad:c3:63:a3:ca:7c:57:81:
0e:6b:6f:9d:e2:bf:20:65:ee:5a:9c:9b:40:51:0f:20:4e:e4:
85:65:49:97:c1:ca:82:c8:02:e8:f5:68:4a:99:fa:2d:6f:6b:
03:e7:0e:a3:d8:85:91:3b:c1:b7:d7:04:e9:94:68:34:b1:d2:
72:e7:67:bc:2b:22:63:7a:ce:c6:88:c5:bb:d4:35:78:ac:e3:
87:03:5c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIumAC+Jdj/YYXWUKdoVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGY0ZjVkODRjMmI1Y2VlM2M2ZTkwM2NiNTMwZDZhOTFm
NDA0YmEwHhcNMjYwNzIzMTgwMDM0WhcNMjYwNzI0MTgwMDM0WjAzMTEwLwYDVQQD
Eyg0NTQwMmY4NTFkYTUzZTgwYmEyNWI1NzM5M2NjNTE0MTFhYWIxNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm62qtiHdJKmwzPn83k+G77Z2Cbc
0hwqKwoKFvqKDlV8DJIyehTKfLUU3yJFse8PS6ScAGXJ4lM/PzFk6RUUtbwSqqSX
E3neogWtttfq4xPKXOP532MbLDOKYe3PRMQyXps0KAsgkpkeSXAGZy9fEqIqOqdV
bkJNKPsluEk5LITB6nDygLdifNoHCAQ2XKYqbe6LBB8Y2VNGBgXNb4YtmpTYOqYw
5D1iA42Z5ghZYi+OTavBTxWprsZONN2ChOz7H3dPphOCa0jH4whr/2pMWAFndYUl
gajYVogJuRAj+TF2ao/S/Fev97uqIbBk/ddaLf1/tr9Q4GzNySC2F28VPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVAL4UdpT6AuiW1c5PMUUEaqxUcMB8GA1UdIwQY
MBaAFDcPT12EwrXO48bpA8tTDWqR9AS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukE5YlHD
f6BTTHO60trZzmmequlTg2DMUGOiKi5EYMvqQ5G4Zeh7gGx/Oi3bGzEzvFmIMxjF
kkKGG1mq6lxBVe+w1gaQwZXWe8ntvKfKzuASjcw+T7bjNyN+qstG0loAA5zGIFwg
YsCyvYgi/NCYW1Dzw+IaQlb+qOFvrnqkU9nHv2hkG7xDc2S6e2g2WoB3FKxrXPJJ
jC80rz1wRDvzpC8epfsYL10yw7Acvq3DY6PKfFeBDmtvneK/IGXuWpybQFEPIE7k
hWVJl8HKgsgC6PVoSpn6LW9rA+cOo9iFkTvBt9cE6ZRoNLHScudnvCsiY3rOxojF
u9Q1eKzjhwNcJA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:03:00 2026 by rpki-client