Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: Gg7QNbfUgAzTv2uZdQgJFjn2YvICZpSxWh67az9JxH4=
Subject key identifier: 47:2B:16:41:4B:83:8C:67:18:29:AF:06:72:75:8D:2B:4C:DD:0C:5D
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019F9248F8E00005D6D448909056BAA356C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 04:01:23 +0000
Manifest this update: Fri 24 Jul 2026 04:01:23 +0000
Manifest next update: Sat 25 Jul 2026 04:01:23 +0000
Files and hashes: 1: Fk_uxWdkQeYx2z70vxU8pKeQvYc.roa (hash: ktKC7e3hjBfZooC8pVGtH47x/POHGeRio9bH7/rdzsY=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: Fb3yzio/T6lxAOVcFPP/2NUseuzvJQPCvTJj7wKb5hk=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=)
5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=)
6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
7: oJ2ks5YNwiHAq9WzT5_4e1nkYaE.roa (hash: bo5UpeN+wQ6nH/bLCuevf6K58UPiHvne75tCF8e9eKo=)
8: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f8:e0:00:05:d6:d4:48:90:90:56:ba:a3:56:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jul 24 04:01:23 2026 GMT
Not After : Jul 25 04:01:23 2026 GMT
Subject: CN=472b16414b838c671829af0672758d2b4cdd0c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:cd:f1:d4:fa:7e:5b:fd:8b:9b:ad:63:b1:
be:f8:38:18:88:92:6d:e7:2a:40:b5:a5:7d:ab:cb:
3c:ed:3e:65:f0:65:79:ee:65:dd:d0:cb:33:a1:da:
c4:e4:7d:96:be:cf:59:ca:e6:47:c5:72:df:17:19:
4f:aa:1c:f7:cb:2d:69:cd:20:fa:17:8f:1c:c6:fc:
5a:f2:85:97:c3:6d:7e:ad:7d:b7:fd:b9:36:85:fc:
b3:99:6f:6a:35:9c:31:a3:08:30:a9:0a:36:7f:08:
1e:de:80:0a:c6:b6:c1:a7:ca:d6:de:55:6f:f9:6d:
88:32:a9:ee:b7:ba:d3:78:81:ce:de:2e:44:a2:f5:
a1:84:89:c4:0c:dd:6f:65:74:cd:bb:17:d1:5a:42:
82:cd:9e:9c:e0:8f:ad:3e:08:0c:a7:d3:5f:4a:19:
6e:ce:18:59:74:95:a6:11:56:aa:f8:8f:b5:cf:90:
8b:36:9a:6d:c7:e5:30:12:df:41:f8:f2:f6:c5:6a:
a1:78:0a:ac:c5:59:90:97:58:c5:b4:8d:55:69:cb:
e7:75:57:75:d7:80:93:36:e7:24:a0:0e:df:a9:4c:
35:6a:3e:e2:a4:e7:5d:f3:6b:ac:eb:9f:e8:b4:a9:
ae:54:55:36:5f:ac:f8:71:16:fa:f7:0d:e1:e9:2f:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:16:41:4B:83:8C:67:18:29:AF:06:72:75:8D:2B:4C:DD:0C:5D
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:6f:8e:18:00:26:12:21:1b:db:93:6e:46:bf:f5:15:90:
20:31:5d:7d:72:6c:b2:32:eb:ea:5b:20:8d:b2:49:59:8b:b8:
17:6c:0c:a0:f6:29:3f:0e:7c:f5:77:0c:be:7e:91:90:67:35:
26:b7:da:69:74:bb:14:09:9f:27:88:7d:62:24:64:a7:24:bf:
b4:2c:88:ce:ce:36:6e:44:f9:54:64:5c:f9:b6:22:b8:e2:4f:
83:f6:41:8a:f4:fd:12:04:40:ab:b3:db:89:b6:fd:dc:b2:b6:
6a:30:d6:5f:66:e6:a2:1b:27:a6:c1:71:f5:7d:bc:a3:29:47:
82:47:10:c6:b4:56:b1:67:bf:7a:1e:b2:5e:45:18:0a:9d:f8:
f6:5c:b3:c5:a4:d0:3d:2a:8b:ad:0b:c0:be:8d:89:02:0d:02:
07:f3:e6:25:81:83:97:5e:41:5e:9a:70:7f:73:2b:9a:9e:03:
84:b2:48:1f:b5:e7:73:68:6f:73:85:b7:58:9f:c9:e7:66:68:
e1:17:ef:c6:3c:38:bf:09:74:46:77:fb:44:39:d8:09:3c:97:
47:4b:17:5a:fa:4d:b9:c8:e5:ef:49:31:bb:ad:ee:10:23:9f:
16:a0:6f:55:d0:d6:eb:0a:fe:7e:d9:68:f8:cd:8a:81:c2:e7:
b6:bf:f8:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSPjgAAXW1EiQkFa6o1bGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjYwNzI0MDQwMTIzWhcNMjYwNzI1MDQwMTIzWjAzMTEwLwYDVQQD
Eyg0NzJiMTY0MTRiODM4YzY3MTgyOWFmMDY3Mjc1OGQyYjRjZGQwYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEPN8dT6flv9i5utY7G++DgYiJJt
5ypAtaV9q8s87T5l8GV57mXd0MszodrE5H2Wvs9ZyuZHxXLfFxlPqhz3yy1pzSD6
F48cxvxa8oWXw21+rX23/bk2hfyzmW9qNZwxowgwqQo2fwge3oAKxrbBp8rW3lVv
+W2IMqnut7rTeIHO3i5EovWhhInEDN1vZXTNuxfRWkKCzZ6c4I+tPggMp9NfShlu
zhhZdJWmEVaq+I+1z5CLNpptx+UwEt9B+PL2xWqheAqsxVmQl1jFtI1VacvndVd1
14CTNuckoA7fqUw1aj7ipOdd82us65/otKmuVFU2X6z4cRb69w3h6S9MMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcrFkFLg4xnGCmvBnJ1jStM3QxdMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiftvjhgA
JhIhG9uTbka/9RWQIDFdfXJssjLr6lsgjbJJWYu4F2wMoPYpPw589XcMvn6RkGc1
JrfaaXS7FAmfJ4h9YiRkpyS/tCyIzs42bkT5VGRc+bYiuOJPg/ZBivT9EgRAq7Pb
ibb93LK2ajDWX2bmohsnpsFx9X28oylHgkcQxrRWsWe/eh6yXkUYCp349lyzxaTQ
PSqLrQvAvo2JAg0CB/PmJYGDl15BXppwf3Mrmp4DhLJIH7Xnc2hvc4W3WJ/J52Zo
4Rfvxjw4vwl0Rnf7RDnYCTyXR0sXWvpNucjl70kxu63uECOfFqBvVdDW6wr+ftlo
+M2KgcLntr/4WA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:16 2026 by rpki-client