Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: 1Y0MUqZLSggRMYHyLb6Q3QgGjwnkrV+W/LpUZr9M5a0=
Subject key identifier: E4:3D:4B:C2:D7:75:34:B1:B2:5F:FE:43:D6:C3:58:92:CF:DA:16:7E
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019F965CA770B43F071F7FDCD4D424A3A1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0DA7
Signing time: Fri 24 Jul 2026 23:01:22 +0000
Manifest this update: Fri 24 Jul 2026 23:01:22 +0000
Manifest next update: Sat 25 Jul 2026 23:01:22 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: QjJT/tcddOZ/WrQS6LdFZ+CTRa48r+dqqT8WvGqHqCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:a7:70:b4:3f:07:1f:7f:dc:d4:d4:24:a3:a1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Jul 24 23:01:22 2026 GMT
Not After : Jul 25 23:01:22 2026 GMT
Subject: CN=e43d4bc2d77534b1b25ffe43d6c35892cfda167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:f3:30:1b:c0:c6:87:c7:0e:72:03:51:e4:
b7:c2:55:de:fa:ff:19:3e:60:0c:10:70:ee:53:da:
16:94:03:0d:b4:76:94:e2:26:c7:b4:8b:af:01:55:
00:be:af:b1:db:89:bc:ce:02:4b:83:6f:ae:e0:16:
aa:ff:b7:34:5c:1b:c2:61:ab:04:47:63:03:0c:53:
11:ff:fb:4b:04:68:c5:27:e8:d7:90:8a:ce:b0:5d:
f4:96:18:c8:eb:19:10:83:e2:60:7e:d4:e9:04:a2:
3b:cc:d7:df:a1:ae:90:bf:59:a0:d1:56:4b:23:51:
a6:5c:54:17:31:c3:51:e0:80:97:d9:24:a2:c5:6f:
3a:fc:54:6f:ff:93:8c:a2:04:07:6b:22:c5:4e:45:
98:8a:1f:0d:b0:fa:10:3f:26:d7:7b:50:e1:51:f1:
20:bd:13:65:85:63:dd:88:7b:97:aa:47:e9:cf:58:
55:8d:e5:cf:1a:cc:06:51:55:3c:f4:b9:8c:6c:46:
a9:4c:1c:26:e7:71:b0:9d:f9:92:70:36:ba:1a:b6:
73:2b:26:3f:da:81:a0:34:7f:37:ff:93:db:03:69:
d1:82:2f:38:09:93:0a:25:0d:58:60:33:6d:1d:d3:
53:2b:c5:d1:15:5b:b3:39:9a:f9:96:da:c5:e3:0a:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:4B:C2:D7:75:34:B1:B2:5F:FE:43:D6:C3:58:92:CF:DA:16:7E
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:07:25:66:58:d4:78:d3:41:45:62:2d:9a:e7:4b:f1:2c:
82:ef:3a:ef:bb:34:c3:2d:9b:90:74:d4:e8:82:63:d3:71:6f:
b5:06:2f:68:ee:65:30:3f:10:fc:99:07:45:21:9c:f8:21:d2:
6b:b1:53:8e:5c:23:0f:5f:fd:0d:e9:5c:67:2c:32:65:76:42:
cb:b3:25:f8:6c:8d:e6:71:bd:99:d1:cb:13:76:94:91:18:80:
32:b4:fb:d5:96:c8:b2:c2:57:fe:2b:eb:91:d4:7f:5e:86:d1:
2f:cb:6c:4e:52:51:b6:ea:ec:a3:a1:fc:7a:ee:bb:06:62:52:
c4:f3:e7:62:45:73:f7:a2:3a:31:2a:b5:28:2e:13:e1:30:c5:
35:54:bd:cb:fd:48:41:82:d1:4e:7d:2e:db:bc:94:52:c1:15:
8e:e7:6b:e2:d8:19:49:90:c6:a3:d4:73:f6:e1:ad:84:1f:f6:
c1:47:e5:19:41:28:63:d6:89:40:43:a8:41:94:84:2d:6b:2a:
09:36:04:ca:d8:54:a4:f0:8a:66:0d:a4:56:f9:a2:16:8b:39:
24:b1:39:2d:fa:45:fa:93:ac:c4:c2:0f:ae:ca:b3:99:ad:30:
b6:a5:60:f6:29:dc:ca:90:cb:92:1e:88:99:34:27:30:1a:9e:
d8:29:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:26 2026 by rpki-client