Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: cDkSeVUTFPGSgoduYpazYt3SBHtt0mPImBxBw4kKvj4=
Subject key identifier: 1D:3F:A0:FE:7A:73:65:45:B1:0C:A5:69:5C:E2:A4:DB:03:BD:3C:9D
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019FA1167C485F56CF66B4C5DF1CDA1F3C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 19DD
Signing time: Mon 27 Jul 2026 01:00:33 +0000
Manifest this update: Mon 27 Jul 2026 01:00:33 +0000
Manifest next update: Tue 28 Jul 2026 01:00:33 +0000
Files and hashes: 1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: hpU20wgjR1jcGe1UZfB0pRQLIj8CWUe62qFTl3BTflA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:7c:48:5f:56:cf:66:b4:c5:df:1c:da:1f:3c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jul 27 01:00:33 2026 GMT
Not After : Jul 28 01:00:33 2026 GMT
Subject: CN=1d3fa0fe7a736545b10ca5695ce2a4db03bd3c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:fe:70:02:0d:5b:bf:fb:2f:55:c3:0e:fd:
72:2f:6e:0c:a0:fd:12:d0:cb:58:77:15:29:68:ee:
29:39:9b:a6:8a:94:84:f2:2a:07:d2:d1:47:ad:0a:
c8:c8:e2:1b:c1:db:58:5a:a5:a4:40:8c:08:2f:51:
b7:1f:19:86:36:39:ab:11:3b:57:d5:86:49:fa:41:
de:6e:8e:93:40:73:1e:04:e1:a7:df:0c:71:27:18:
c8:c1:2b:dd:e1:67:6a:f3:a5:f7:ac:ad:95:be:ec:
7c:31:11:34:1e:74:a5:59:37:3b:cd:66:31:ff:f9:
d6:b8:f9:f5:d4:88:aa:19:29:40:2c:20:72:da:37:
cc:2a:12:d7:45:24:6c:ef:53:38:b9:70:1f:10:3b:
c0:e3:de:2d:18:16:09:07:b4:82:dd:37:af:9b:5a:
ee:e9:78:70:c8:a6:3b:17:be:0c:4e:69:cc:d4:95:
7d:66:51:dd:8d:ba:21:db:28:c6:2d:87:f4:27:e3:
e0:02:51:ce:39:54:f4:03:c6:31:11:18:15:74:c3:
55:46:5c:90:32:45:84:70:d2:bd:de:e5:ca:9e:3d:
b2:88:04:0f:cb:86:20:07:f8:3a:c9:e8:18:19:45:
1a:b5:52:ee:da:04:50:b7:39:e4:90:f1:56:03:b6:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:A0:FE:7A:73:65:45:B1:0C:A5:69:5C:E2:A4:DB:03:BD:3C:9D
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:03:6e:3b:22:26:65:ac:79:7b:b2:f0:39:ed:09:04:85:
b5:c5:d8:fd:18:12:57:be:15:b6:44:df:70:d9:a8:e0:d7:37:
b0:f8:37:39:ac:03:e1:bf:30:bb:b6:a7:b8:3e:26:0b:95:6b:
ad:b1:b6:58:62:ad:2c:24:ae:db:0c:29:cb:52:a9:9d:c0:7d:
df:74:ea:d9:d7:c7:4d:a9:df:13:d5:d3:7e:93:a9:e7:1b:e0:
e9:e5:13:aa:50:f2:67:b0:47:df:08:10:2f:1b:2c:8d:d0:7b:
fb:fa:b0:c6:4a:6b:44:f8:7e:7b:5e:1e:97:55:4a:84:c2:53:
bc:24:ce:d5:19:1a:f7:53:cc:80:96:ea:bc:79:dd:90:23:20:
0d:fb:d6:98:b3:41:8d:38:4c:76:1b:3f:6e:c7:a0:d8:bf:ad:
9c:59:0d:78:5d:42:0e:a2:5d:91:b9:84:5a:f7:46:40:e6:a5:
2c:f8:ec:b2:d2:a7:07:7a:4c:da:a4:fe:26:80:fb:f8:ba:a2:
e2:fd:8c:49:61:de:00:61:e8:28:c3:02:d5:a3:ec:e3:b2:85:
b6:09:97:97:31:a8:0d:c8:93:75:fe:22:90:12:58:85:3a:ff:
d6:9d:d1:1c:36:39:21:59:36:b8:9f:6c:d0:fd:60:43:ab:05:
4b:90:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:47:53 2026 by rpki-client