Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
File: ND2aiq7MjjRw4ShmzmdE256WEVA.mft (raw, json)
Hash identifier: i5ZecQu838tJzVpMHC/YhzMknUDcWOj4OolSGJ6lppw=
Subject key identifier: 4A:71:29:A5:2B:C6:16:83:CE:91:69:BC:9B:57:78:19:F5:30:5A:4B
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 019FA0DFAB98BCF91B44AB7D74B12B480EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:40 +0000
Manifest this update: Mon 27 Jul 2026 00:00:40 +0000
Manifest next update: Tue 28 Jul 2026 00:00:40 +0000
Files and hashes: 1: ND2aiq7MjjRw4ShmzmdE256WEVA.crl (hash: WBqMKYVtahbAhFUqH2bBp8NcBkiZxswzhKfmkWkD1io=)
2: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (hash: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ab:98:bc:f9:1b:44:ab:7d:74:b1:2b:48:0e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Jul 27 00:00:40 2026 GMT
Not After : Jul 28 00:00:40 2026 GMT
Subject: CN=4a7129a52bc61683ce9169bc9b577819f5305a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:21:9e:06:a3:1e:08:c4:77:77:dd:f6:d3:
fe:80:55:3a:f6:8a:81:ff:01:1c:ab:52:8c:77:2d:
38:68:02:53:c0:0b:bb:a4:e3:81:4b:01:6b:15:8e:
f8:f4:2f:02:39:05:e7:f1:9a:3c:bc:4d:12:a1:a5:
81:9e:eb:ae:26:bb:fc:01:fb:60:70:d9:dd:bb:80:
21:b9:6c:32:71:fd:cd:80:f5:11:36:70:e4:ba:a1:
55:88:16:1c:12:db:a2:9a:b6:ae:28:64:55:a7:0b:
8f:12:35:1f:f7:ed:83:97:37:07:82:42:f9:55:bf:
49:9d:d8:fb:78:1f:55:74:a6:cd:a0:ff:7e:c9:ae:
1a:d5:a9:30:ca:74:f1:6d:a4:51:24:8c:4f:aa:01:
dc:64:65:c7:08:9a:a0:4e:fd:a2:b1:0d:ac:38:af:
ef:a9:c0:e9:1c:3f:9a:d9:7d:ae:5e:81:21:b8:88:
9c:13:b9:67:c6:7f:49:c6:22:70:b1:cc:42:9f:27:
38:a7:a0:3a:56:82:86:5b:5a:f0:48:34:2a:82:cc:
9e:c3:b7:71:49:77:6a:48:a0:a5:4a:d3:1b:85:e4:
ea:5f:47:94:36:c5:c8:33:f9:79:8b:f9:bd:64:c6:
87:7e:e7:52:d7:cd:13:4e:69:f9:f9:14:f5:1b:85:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:29:A5:2B:C6:16:83:CE:91:69:BC:9B:57:78:19:F5:30:5A:4B
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ca:c2:8e:d2:dd:c9:52:0f:a7:75:c3:ea:20:cc:71:c0:19:
b7:82:9b:d0:c8:3f:c8:8d:88:73:f0:e1:be:d2:6d:56:88:13:
11:eb:95:e2:75:b6:ca:dd:30:18:2f:86:11:45:48:9d:36:13:
f4:c3:86:7e:c3:a3:c5:4e:ac:dc:f0:9d:07:52:e1:35:a5:ee:
ee:8d:fe:0d:3a:d9:86:51:67:a2:ff:3e:a9:61:50:0f:13:61:
b0:9a:f6:22:b4:79:eb:0f:b8:c4:56:8f:cb:45:54:67:4f:75:
1f:81:18:ac:93:5e:d0:9b:21:59:54:bb:a7:65:a9:e9:b6:8f:
26:20:d2:10:f9:ef:b2:43:fd:05:8c:9a:44:54:7a:fd:de:02:
02:2f:6f:2c:6f:2d:1b:cb:be:08:43:4d:62:db:fc:32:cd:61:
84:f7:59:fa:9a:b6:95:9e:31:b3:71:83:87:d4:49:e5:16:e2:
61:b5:6c:52:74:9b:37:8c:f6:7b:f2:b1:a6:ce:44:df:4b:3b:
08:a0:03:0f:0b:15:e7:fc:ed:84:3c:30:37:d9:51:82:f5:8d:
4b:30:95:8f:75:6d:c9:d0:c6:92:ad:c3:19:51:63:dc:43:d1:
6f:c4:3e:ab:58:e6:f8:c0:ac:f2:76:54:da:ab:88:3b:78:90:
dd:75:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:34 2026 by rpki-client