Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: EPuBx+2yNRBxW/QcDsNdVqiSTGSzgiZdb8UyWz0ND04=
Subject key identifier: 24:FA:15:F5:3D:B0:1A:AF:EB:14:8D:AE:C9:C8:17:F9:8D:06:06:9F
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 019F9135C3F7E595C4345B15592DE5B6D7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 1534
Signing time: Thu 23 Jul 2026 23:00:47 +0000
Manifest this update: Thu 23 Jul 2026 23:00:47 +0000
Manifest next update: Fri 24 Jul 2026 23:00:47 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: 4J7U2QzzriOK+sa8dDcsBrZBytBs4v2XFr6S6lNhUyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c3:f7:e5:95:c4:34:5b:15:59:2d:e5:b6:d7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Jul 23 23:00:47 2026 GMT
Not After : Jul 24 23:00:47 2026 GMT
Subject: CN=24fa15f53db01aafeb148daec9c817f98d06069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:53:30:cd:c0:c9:35:f4:68:e5:67:fa:2a:
a3:c7:74:cc:55:40:04:3f:25:b3:4c:27:76:f3:da:
a6:f0:1e:64:1a:60:88:07:26:9c:c2:13:44:46:5a:
b3:1f:96:25:87:aa:4a:66:c0:76:c3:29:5a:4d:08:
6f:6e:f1:bb:b6:8d:cc:17:7f:08:2b:ee:75:54:9c:
da:de:87:53:a3:92:32:13:d8:1d:ec:6c:d7:a2:6d:
f0:4b:39:8f:3d:1c:51:09:d7:fe:80:d9:3e:e0:ac:
5f:95:37:59:46:c5:75:d3:89:42:1f:f1:a5:70:3a:
bb:24:1d:0f:ce:25:28:a9:f9:5a:7d:ba:db:f3:4b:
8e:5c:53:12:90:c5:8e:27:5c:96:ed:55:84:e0:68:
31:6d:ce:30:f3:57:dd:4e:9f:4a:56:05:da:6f:76:
3c:3d:5a:df:98:a6:e1:12:28:fe:28:82:75:a8:4b:
85:98:15:fb:7f:35:ce:a2:84:ea:b7:ac:d5:7e:37:
d1:72:01:74:71:97:f6:e3:6b:d4:b6:9a:08:82:8a:
c9:cd:29:c6:46:7f:96:38:b9:f2:c5:ce:e4:9e:34:
37:77:cd:db:de:62:61:da:1f:9f:99:37:4a:06:1d:
e3:c6:f4:1e:c3:0a:a4:d3:e3:b8:93:e1:1a:b2:f1:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:15:F5:3D:B0:1A:AF:EB:14:8D:AE:C9:C8:17:F9:8D:06:06:9F
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a8:6f:94:bc:0e:fb:77:d2:8d:ff:62:00:e8:96:72:ad:59:
19:68:3f:76:f6:c8:cf:79:ff:44:b5:1e:8c:0f:f0:34:5d:2c:
4c:15:75:2d:c1:aa:90:84:26:33:8c:bd:1d:13:a2:2e:d0:cb:
9b:32:bd:aa:ed:dc:2b:3a:7f:e3:ef:82:5b:5a:ad:a0:bb:b4:
c0:6b:db:5f:34:57:b5:b4:12:22:d7:ac:06:17:83:d9:2c:5d:
8b:8d:8e:59:31:fc:15:36:ce:66:90:af:cd:4c:1a:52:61:87:
83:d1:0c:6f:ef:fd:96:e2:20:1a:51:e5:7d:b0:06:69:86:81:
06:9a:69:02:12:d8:f3:fb:1a:25:9f:94:59:29:09:22:d2:b8:
f0:89:cc:8d:d5:28:cd:02:c9:98:f5:af:97:59:5b:cf:f2:29:
89:80:42:4b:31:35:d5:07:0f:61:2d:a7:bb:56:b2:6c:ad:27:
fd:0f:8d:35:6a:36:55:d8:d1:b7:a5:f4:27:14:87:f0:54:48:
f8:7d:36:61:99:d1:41:48:05:ec:48:3e:1b:ef:5f:ec:c1:25:
df:c1:29:d6:4a:07:01:60:11:1b:42:e8:4b:1d:a0:61:25:82:
6c:44:4e:74:a4:19:8a:30:1d:aa:93:f6:3f:cb:ad:56:86:2e:
c3:20:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:17 2026 by rpki-client