Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: 0jK9I0/jTrTjBcVSORYrwcajbOufYgTQMxvB+KrzXgk=
Subject key identifier: 11:4A:8F:96:25:4C:AC:F9:8C:A6:63:61:66:7C:2A:AD:7D:AB:B3:05
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019F9391B4352445AF4795689FC019228D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:00:27 +0000
Manifest this update: Fri 24 Jul 2026 10:00:27 +0000
Manifest next update: Sat 25 Jul 2026 10:00:27 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: YL8wUgmMZcNMy1pZCiRZzgg4txpM3mwq16xpySktWwI=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b4:35:24:45:af:47:95:68:9f:c0:19:22:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jul 24 10:00:27 2026 GMT
Not After : Jul 25 10:00:27 2026 GMT
Subject: CN=114a8f96254cacf98ca66361667c2aad7dabb305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:b1:bb:16:80:05:cb:0b:98:cf:fb:cc:eb:
1c:ae:77:ce:0f:72:d7:2c:57:18:56:13:41:e7:cf:
36:a7:e8:8d:cc:b8:33:0a:9a:b3:6c:24:2c:76:43:
94:db:86:51:c3:bc:3d:c2:17:eb:4c:d0:18:8e:91:
b8:ca:ad:c0:3c:4c:75:1e:93:b2:72:20:97:a7:a6:
c8:d5:83:b0:a9:ea:1e:76:f2:73:6d:46:a5:e5:61:
81:5e:b1:a5:bd:15:d9:54:29:d4:ef:aa:75:c4:21:
90:96:12:69:cf:be:0b:9a:84:49:bc:c9:aa:da:90:
fb:39:90:38:2c:65:20:8c:97:7e:d7:01:5f:14:5e:
26:97:a2:03:67:7a:d3:18:22:39:5d:9e:d8:bb:09:
ba:4b:2c:e9:1b:58:43:7b:b5:cf:cf:18:f1:d7:af:
51:0b:dd:0c:87:b3:fe:a3:f7:66:67:9b:9f:ea:f8:
51:6c:13:8d:0c:58:ae:6a:54:d5:01:02:38:6d:08:
93:c5:3a:fe:bc:a3:ff:b0:5a:e8:61:ad:bf:d1:8c:
34:d5:65:22:f2:13:f9:2d:85:9a:22:1d:bb:a4:41:
90:b7:ad:8a:3f:cd:11:73:a2:50:8a:84:28:b9:67:
38:e1:fc:08:2a:42:ed:fd:72:a5:30:7d:9c:b9:7d:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:8F:96:25:4C:AC:F9:8C:A6:63:61:66:7C:2A:AD:7D:AB:B3:05
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:29:b2:7b:46:d5:a7:07:2b:75:0d:6b:1c:55:c8:68:eb:06:
ff:34:fb:e3:e2:63:ed:b9:73:be:6e:d3:51:a9:24:d4:aa:a2:
19:66:4f:99:a0:37:21:9d:07:65:e0:ce:35:af:a9:36:c3:24:
26:52:01:65:b3:95:2c:23:b9:71:9d:b4:99:b9:99:18:cc:63:
eb:4e:3d:ff:b8:de:e1:af:dd:5b:29:8d:b3:2a:f8:a6:0e:4f:
e7:65:1e:97:0d:8a:58:99:ab:72:0c:f7:cc:91:7c:e9:66:24:
14:9d:ff:79:23:80:fb:24:2f:22:7d:79:7c:9f:f8:58:71:4c:
87:30:65:e5:81:b8:dd:39:78:a8:ee:cc:88:53:83:65:c3:f3:
18:c3:72:dc:7d:9c:5d:ba:7b:50:56:f1:c4:cb:76:20:b9:dd:
76:49:a1:43:3e:09:6a:26:7e:1d:1e:e4:e9:e4:ad:48:7e:33:
d6:3c:9d:27:20:7b:2e:5e:f1:56:9c:10:f4:90:08:2b:8f:a5:
72:00:03:51:24:ed:a3:b2:1d:04:ec:a7:f2:db:a9:f9:5a:9b:
a5:81:ec:d7:db:8d:1f:e8:12:09:91:52:4f:c9:93:2f:50:c4:
b5:4a:28:19:aa:16:0e:d9:e9:80:d2:30:24:19:4c:02:9f:3d:
81:33:e9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkbQ1JEWvR5Von8AZIo1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjYwNzI0MTAwMDI3WhcNMjYwNzI1MTAwMDI3WjAzMTEwLwYDVQQD
EygxMTRhOGY5NjI1NGNhY2Y5OGNhNjYzNjE2NjdjMmFhZDdkYWJiMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZqxuxaABcsLmM/7zOscrnfOD3LX
LFcYVhNB5882p+iNzLgzCpqzbCQsdkOU24ZRw7w9whfrTNAYjpG4yq3APEx1HpOy
ciCXp6bI1YOwqeoedvJzbUal5WGBXrGlvRXZVCnU76p1xCGQlhJpz74LmoRJvMmq
2pD7OZA4LGUgjJd+1wFfFF4ml6IDZ3rTGCI5XZ7Yuwm6SyzpG1hDe7XPzxjx169R
C90Mh7P+o/dmZ5uf6vhRbBONDFiualTVAQI4bQiTxTr+vKP/sFroYa2/0Yw01WUi
8hP5LYWaIh27pEGQt62KP80Rc6JQioQouWc44fwIKkLt/XKlMH2cuX3shwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFKj5YlTKz5jKZjYWZ8Kq19q7MFMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaymye0bV
pwcrdQ1rHFXIaOsG/zT74+Jj7blzvm7TUakk1KqiGWZPmaA3IZ0HZeDONa+pNsMk
JlIBZbOVLCO5cZ20mbmZGMxj6049/7je4a/dWymNsyr4pg5P52Uelw2KWJmrcgz3
zJF86WYkFJ3/eSOA+yQvIn15fJ/4WHFMhzBl5YG43Tl4qO7MiFODZcPzGMNy3H2c
Xbp7UFbxxMt2ILnddkmhQz4JaiZ+HR7k6eStSH4z1jydJyB7Ll7xVpwQ9JAIK4+l
cgADUSTto7IdBOyn8tup+VqbpYHs19uNH+gSCZFST8mTL1DEtUooGaoWDtnpgNIw
JBlMAp89gTPp/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:22:31 2026 by rpki-client