Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: tQjrDfNOhKbIUwIw/bQAEgv3peJAblYWaap3HHbI8Ek=
Subject key identifier: 1A:FE:4F:F2:EF:2F:04:19:82:74:22:5F:1B:91:5E:9D:12:25:56:0B
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019F90913DC446D7A3A67FA5C5B8B233AF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 14C2
Signing time: Thu 23 Jul 2026 20:01:05 +0000
Manifest this update: Thu 23 Jul 2026 20:01:05 +0000
Manifest next update: Fri 24 Jul 2026 20:01:05 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: Dql/KBwldWBb4cqunLYk+KOXjMkdg5MI6mqJfg8QAYk=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:3d:c4:46:d7:a3:a6:7f:a5:c5:b8:b2:33:af:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jul 23 20:01:05 2026 GMT
Not After : Jul 24 20:01:05 2026 GMT
Subject: CN=1afe4ff2ef2f04198274225f1b915e9d1225560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:0a:e5:db:6e:82:f6:fc:8a:70:7d:4e:2a:
0a:31:e9:21:cf:44:6d:d1:ce:e8:8d:a9:98:78:1d:
b3:91:e5:f0:f6:6a:0d:69:2f:bb:fb:16:b7:d5:89:
26:9d:3f:a7:00:53:c7:6c:35:50:de:6a:95:65:1c:
e5:7f:b5:f1:ba:e1:7a:7d:25:51:9d:f1:f8:63:71:
85:04:41:d4:3c:41:7b:79:fd:3d:06:cc:e3:a4:f7:
fb:47:5d:50:0f:49:de:73:c2:df:43:26:ca:c5:4a:
80:29:af:31:7a:87:70:5a:89:51:46:06:e3:7f:15:
0a:9e:14:b2:d7:35:b6:49:e7:d1:4e:59:ba:d8:c0:
ec:1c:df:4a:c4:13:59:b6:17:ee:7e:1d:01:15:5e:
cd:af:ec:fc:ce:a6:86:73:77:a9:fd:b3:ee:ad:c6:
6d:21:54:e4:b6:75:69:d2:1b:db:68:7a:ba:a9:c2:
24:05:d7:d0:27:11:a7:8d:32:b5:2b:f2:d3:7a:f0:
df:17:6e:4a:59:98:b6:c9:e6:c7:5c:d1:08:f0:64:
25:45:26:c6:3b:91:8b:af:8e:b1:3d:73:3a:20:3b:
92:cc:9d:50:ff:cb:b6:f0:f2:b4:80:3f:da:d1:51:
42:f9:d1:ec:e6:a8:01:b6:9f:58:ac:72:c7:02:a5:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:4F:F2:EF:2F:04:19:82:74:22:5F:1B:91:5E:9D:12:25:56:0B
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ac:c3:60:d4:81:0d:85:a8:48:bf:6a:24:59:97:ff:1a:d6:
db:76:8c:3a:fd:e3:e6:83:67:df:d3:6b:82:18:34:2f:2c:b5:
5f:75:d2:d5:05:81:60:63:c9:2c:15:7b:f6:24:3b:36:c5:67:
17:5d:5d:a4:a6:ce:51:c4:2f:30:44:5d:79:eb:75:48:26:83:
4d:72:3c:4c:f1:a7:ac:97:7a:96:00:66:4d:8a:a1:68:96:68:
f6:69:fa:b0:c8:60:0b:d2:87:f9:c5:9b:cb:2d:f8:ee:d3:77:
5e:f7:c7:7d:f6:da:e0:d0:2a:3b:c9:a3:98:8e:41:64:f1:a0:
7e:8b:37:aa:36:d1:fa:e7:13:5f:7f:b4:c0:5b:f8:21:90:a0:
69:27:17:0e:ee:00:dd:cb:cf:6d:8a:1c:f7:0f:d8:5c:ab:d4:
3a:5e:33:9e:d2:47:69:48:49:3f:9c:34:80:06:af:e1:52:3b:
fe:1f:82:97:50:ad:88:1b:35:14:8b:2c:62:f4:ea:e6:47:ec:
75:fa:12:b1:ca:24:b1:b6:02:cd:f0:9c:81:f7:b5:c0:d2:42:
45:7a:d9:61:d7:78:0d:ee:e8:c4:45:5f:07:54:66:65:e1:50:
66:25:ce:77:30:20:ac:2d:08:f4:53:ae:0b:b0:bf:57:db:8e:
f2:49:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:51 2026 by rpki-client