Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
File: N_k-RoBmZm0Fu1TFSr41Al023v4.mft (raw, json)
Hash identifier: SDsFs9B7fOceECPEDcQwoAJpUrN0tEkTSYTKM1ufOZo=
Subject key identifier: 78:5D:A1:CA:22:88:73:41:27:A3:2B:92:B2:95:74:39:BC:86:DB:13
Authority key identifier: 37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
Certificate issuer: /CN=37f93e468066666d05bb54c54abe35025d36defe
Certificate serial: 019F916C6D65FFE6EA40F122FF40815A5CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:29 +0000
Manifest this update: Fri 24 Jul 2026 00:00:29 +0000
Manifest next update: Sat 25 Jul 2026 00:00:29 +0000
Files and hashes: 1: IpOk2-baAJmBq3G0sGeE5MDiPGw.roa (hash: DK5qUCU0NDdVm+egXm1v6a3rNwDmd+BapaCsSxr03wQ=)
2: N_k-RoBmZm0Fu1TFSr41Al023v4.crl (hash: hXns5leyH4Eb0d8YpIuTnJD+4FmuSa+OFQ16Tq1IjUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:6d:65:ff:e6:ea:40:f1:22:ff:40:81:5a:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f93e468066666d05bb54c54abe35025d36defe
Validity
Not Before: Jul 24 00:00:29 2026 GMT
Not After : Jul 25 00:00:29 2026 GMT
Subject: CN=785da1ca2288734127a32b92b2957439bc86db13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:7a:70:5d:23:e5:a3:9b:4d:c3:15:b4:4d:
2b:20:ff:96:2b:a6:26:fa:22:3a:8f:8a:22:f4:84:
c1:34:d7:3d:9f:10:b8:02:ad:0e:ca:1b:ba:a7:8c:
16:6d:d8:72:ec:8d:b1:9f:43:1b:37:57:90:b4:ad:
cd:0a:36:65:f4:c0:b3:68:83:41:b3:b2:ed:e1:9f:
ef:2e:6e:08:8a:e3:fd:a6:3f:c8:0c:22:af:9b:5a:
0e:d2:63:0e:18:9b:4e:ea:c7:e4:e2:0f:a1:16:dc:
d5:76:1b:96:4c:01:9e:a4:99:5c:49:4c:d3:48:46:
1b:33:56:46:75:eb:d1:e5:d6:9d:54:2d:93:ab:6d:
10:d3:bf:aa:04:07:3f:51:ea:5f:51:b3:ce:07:0b:
86:27:1f:fb:d2:d9:05:22:c5:2b:da:a0:0a:17:cf:
d1:0f:b9:4e:13:b6:1d:24:65:d0:4e:eb:91:9c:a3:
7c:6a:47:c5:77:7e:20:96:3f:eb:ba:f6:89:9a:6f:
5a:c8:96:83:41:7d:28:a7:8c:a3:6a:2a:80:69:21:
e5:8a:b8:12:57:86:fa:48:51:9d:be:c6:5a:89:c9:
d7:99:ea:45:d6:e9:9b:fa:ad:c3:91:5a:be:02:3e:
3d:9a:27:ca:89:a7:38:3d:36:b3:b5:1d:15:2b:39:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5D:A1:CA:22:88:73:41:27:A3:2B:92:B2:95:74:39:BC:86:DB:13
X509v3 Authority Key Identifier:
keyid:37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a5:20:e1:09:d3:a6:f2:3a:45:26:97:fd:ff:aa:c0:f0:e5:
2c:3d:d3:94:b5:32:17:9d:ee:ea:f5:31:2c:0d:b5:38:e6:49:
48:c1:e8:5d:c9:43:61:28:39:c6:fd:7c:bd:9a:53:32:17:c6:
b6:ed:9d:05:52:40:4d:36:50:a5:10:ae:04:7f:96:5e:1d:0b:
59:56:27:c6:a5:de:09:57:ad:1f:9b:10:69:99:6d:31:1b:10:
5d:83:d0:02:e0:79:ec:f1:b0:ee:b0:0b:d4:0c:b0:31:e9:ce:
05:e9:eb:a2:af:be:3a:7f:8d:b8:21:cc:dc:ca:7b:5d:ba:60:
fe:3e:12:64:91:99:ea:06:99:ab:e4:ca:95:e7:ba:8b:52:9c:
92:d2:ac:3c:16:14:66:c6:95:9e:cb:4a:5d:64:93:8d:b7:37:
9e:91:ba:d8:29:a7:e5:7c:a8:db:44:35:1a:e7:30:7f:bf:8c:
bb:5b:78:d8:32:70:6a:63:8d:dd:91:a2:62:50:da:5e:9f:16:
48:0b:46:15:e3:1b:57:4d:0d:98:28:6a:15:88:71:8e:84:fd:
ff:bd:c8:c2:3d:2e:69:b0:11:5a:b2:76:53:e1:5d:d3:0f:fb:
4a:cc:7b:d4:df:3b:37:4f:08:eb:a6:62:6d:1c:04:1b:f1:21:
20:f4:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:30 2026 by rpki-client