Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: o4ldTBJtLPydpvc03+PzdenKtnT/ReGC5SHRt48nH3Y=
Subject key identifier: DA:EB:07:37:26:7D:B9:88:F9:5D:98:88:FF:41:D4:9F:B6:6C:0E:0A
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019F92B5E25C542BC1C9F8311DA3CD1592D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 025C
Signing time: Fri 24 Jul 2026 06:00:21 +0000
Manifest this update: Fri 24 Jul 2026 06:00:21 +0000
Manifest next update: Sat 25 Jul 2026 06:00:21 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: a6apG/7h1N9rzfsByJieyFuK4VBx2u7QOttUsREJSOQ=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e2:5c:54:2b:c1:c9:f8:31:1d:a3:cd:15:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Jul 24 06:00:21 2026 GMT
Not After : Jul 25 06:00:21 2026 GMT
Subject: CN=daeb0737267db988f95d9888ff41d49fb66c0e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:82:0d:af:7c:05:70:9c:56:fa:31:2b:41:
ad:c9:5c:63:13:86:e7:ac:a2:1f:d4:c9:0d:65:2e:
ef:f1:f6:b3:c8:ab:34:02:84:01:2a:98:cf:54:6c:
b5:e7:cf:f5:c7:44:a3:d0:79:ae:85:17:ed:de:1c:
d9:83:6e:5b:dc:8d:fb:c1:b9:a8:f0:df:9d:47:c8:
e2:c9:da:ca:ae:16:a9:2b:73:27:fa:0d:07:c7:17:
9a:11:35:3c:da:68:3e:30:ce:06:a1:db:a4:ba:97:
36:d7:4a:c8:37:c7:db:72:e2:f4:fe:3a:b3:3f:a7:
b3:e5:90:be:a8:1e:c2:58:7c:a7:84:46:c9:43:06:
bc:3d:0a:fa:6c:17:d0:27:58:88:30:b9:1f:95:b6:
a9:6d:a8:9e:17:6e:2c:6e:29:f0:58:6d:25:18:b7:
5c:da:fd:2f:f7:97:54:04:90:73:d3:dd:5f:02:2a:
e8:8f:37:21:4d:fc:0c:95:48:dc:6a:49:af:ee:88:
bb:49:2f:e9:d8:b3:9d:06:f1:3c:4a:53:48:88:e2:
cf:d9:a2:32:61:32:0a:2d:55:cd:25:e1:78:de:d6:
82:c0:09:3a:03:b4:ec:14:73:69:51:41:9f:eb:a4:
00:a3:22:25:9b:76:49:f5:7e:27:62:d1:99:8d:f4:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:07:37:26:7D:B9:88:F9:5D:98:88:FF:41:D4:9F:B6:6C:0E:0A
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:3a:8e:67:62:41:10:96:94:89:7e:1b:a1:83:cb:3f:3e:
38:39:26:86:fc:6e:01:e2:ec:22:e5:ad:83:9a:08:6b:47:72:
52:02:11:ff:3d:a5:72:f8:26:0c:0e:78:a0:93:f3:3a:c9:7e:
53:9d:ab:7d:a0:3e:74:75:e2:68:88:ea:2f:4f:7b:18:a9:3d:
0a:83:f2:ac:8a:3a:a8:5e:45:e3:c2:55:40:a7:62:5e:1f:a6:
cf:52:89:04:54:33:fe:78:11:0f:23:04:ab:e7:db:b6:51:9e:
54:bf:70:e7:fe:9f:b1:33:7f:bd:59:8f:72:81:22:e9:25:0e:
4a:d7:2c:a6:a7:33:34:14:12:95:b2:33:1b:64:fc:db:03:a9:
08:6c:b7:40:30:7c:61:62:91:e8:39:32:10:9d:70:86:73:e0:
c0:fc:4e:e6:07:5d:9b:8e:d6:3e:bb:bf:c7:5e:51:7d:6e:63:
c3:ea:48:b2:ae:55:bd:9d:b8:f3:59:59:a6:a6:87:09:f8:43:
be:95:2d:2b:fa:43:c5:4b:94:fd:ab:cd:4c:c4:ef:53:64:dc:
fe:c9:86:ea:09:5f:74:3e:c8:55:d1:a0:3d:58:aa:c5:f7:02:
0a:19:c1:75:b0:9f:67:cb:0a:60:d0:8b:df:71:f5:19:17:04:
41:1f:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:14 2026 by rpki-client