Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: poYJX26sD5KZdUlMmVDbGoNeGxtzIbyyUwT6Q5iXVWw=
Subject key identifier: 73:86:FB:1C:62:DB:40:73:17:B6:65:08:11:3B:0B:EE:86:F1:BE:C2
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 01A027A0E5AD7FEA35304EC76C098F666CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 0354
Signing time: Sat 22 Aug 2026 04:00:51 +0000
Manifest this update: Sat 22 Aug 2026 04:00:51 +0000
Manifest next update: Sun 23 Aug 2026 04:00:51 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: 8NW1Vp+obSL2IExoGlqMxpC6wtEwv0nFHvqRnKVAamU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:a0:e5:ad:7f:ea:35:30:4e:c7:6c:09:8f:66:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Aug 22 04:00:51 2026 GMT
Not After : Aug 23 04:00:51 2026 GMT
Subject: CN=7386fb1c62db407317b66508113b0bee86f1bec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:09:8e:41:b8:ba:20:88:b6:12:f7:ef:e9:
6f:fb:02:28:b2:ae:05:4e:75:72:b8:a7:48:69:f2:
86:34:32:63:f5:51:7b:13:da:66:29:05:38:0d:e5:
a4:d8:96:86:06:9b:c9:45:98:e9:ea:5c:f8:2f:db:
fb:71:be:b1:10:b8:5d:73:8e:59:90:6e:75:58:ad:
00:f0:60:e0:16:00:12:ee:27:62:13:1f:b4:f9:42:
13:99:b6:ca:8b:a0:c7:2b:7e:80:b4:bd:79:96:b0:
58:33:e1:eb:bb:90:ef:13:93:69:cd:aa:83:44:d4:
a0:ed:58:3a:77:2f:fc:00:d2:06:51:78:52:3c:a5:
88:37:67:28:0a:7f:e7:b8:16:86:38:d6:95:fe:d3:
a3:13:2e:c2:34:98:4b:a7:b9:3e:92:34:06:b7:19:
1e:46:9e:78:f2:e1:ed:d8:c9:f0:73:7b:9b:32:29:
16:f3:6a:2c:99:81:99:a0:5c:a6:c0:21:7e:5f:a6:
91:b4:22:bd:2e:b6:1c:78:be:b4:63:db:da:74:ae:
f3:41:3c:d3:ed:20:bf:c6:9a:54:69:54:c4:02:ad:
97:00:5f:05:87:41:9e:a1:6a:dd:f5:80:72:4b:02:
b4:a6:94:5e:ba:3b:d6:93:1b:6c:ce:51:87:2d:ff:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:86:FB:1C:62:DB:40:73:17:B6:65:08:11:3B:0B:EE:86:F1:BE:C2
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d1:c7:73:16:d6:80:ea:38:3d:66:7e:e2:c6:22:7f:73:19:
48:0c:1f:6c:b2:63:68:e8:af:6e:f5:a4:0d:30:de:8d:ff:69:
e4:2e:1e:c6:b4:18:e2:cb:f4:32:6f:c0:fd:b8:58:a5:f7:7f:
7c:1a:bb:ed:e6:3d:40:99:db:73:8e:6a:9b:d2:cd:7e:ce:60:
f2:89:48:6a:2b:bf:16:e3:a0:ec:de:40:34:03:f1:e1:d5:27:
66:ae:c6:06:a6:ea:0d:dd:80:c4:76:f2:6c:71:7b:67:d6:0f:
cc:f4:a1:ee:31:d7:97:a0:b6:71:4e:82:d8:d9:aa:b0:91:f6:
62:90:90:01:8d:e6:bd:f3:f4:99:8f:9e:33:e0:cc:a1:c2:70:
ef:d2:53:d8:f6:7d:08:79:16:e4:f6:c4:27:8c:a6:36:df:ce:
d6:3e:54:55:b7:e2:43:ee:45:be:65:d7:3c:54:5b:a2:54:32:
65:09:35:ad:8a:8b:b1:b0:00:f5:e6:30:1f:a6:6c:33:70:b5:
ea:67:f5:8b:94:41:c7:d0:db:92:56:5f:00:bb:45:a7:a5:ae:
50:dd:3f:59:bf:31:1f:35:62:ea:56:ef:6b:6a:73:7b:98:9a:
55:01:5d:5d:10:16:d1:bd:27:40:55:a5:d3:34:9c:41:2a:4c:
f3:f7:e8:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAnoOWtf+o1ME7HbAmPZmzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5
YmIxNDQwHhcNMjYwODIyMDQwMDUxWhcNMjYwODIzMDQwMDUxWjAzMTEwLwYDVQQD
Eyg3Mzg2ZmIxYzYyZGI0MDczMTdiNjY1MDgxMTNiMGJlZTg2ZjFiZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQcJjkG4uiCIthL37+lv+wIosq4F
TnVyuKdIafKGNDJj9VF7E9pmKQU4DeWk2JaGBpvJRZjp6lz4L9v7cb6xELhdc45Z
kG51WK0A8GDgFgAS7idiEx+0+UITmbbKi6DHK36AtL15lrBYM+Hru5DvE5NpzaqD
RNSg7Vg6dy/8ANIGUXhSPKWIN2coCn/nuBaGONaV/tOjEy7CNJhLp7k+kjQGtxke
Rp548uHt2Mnwc3ubMikW82osmYGZoFymwCF+X6aRtCK9LrYceL60Y9vadK7zQTzT
7SC/xppUaVTEAq2XAF8Fh0GeoWrd9YBySwK0ppReujvWkxtszlGHLf8DQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOG+xxi20BzF7ZlCBE7C+6G8b7CMB8GA1UdIwQY
MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt
NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj
LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdHHcxbW
gOo4PWZ+4sYif3MZSAwfbLJjaOivbvWkDTDejf9p5C4exrQY4sv0Mm/A/bhYpfd/
fBq77eY9QJnbc45qm9LNfs5g8olIaiu/FuOg7N5ANAPx4dUnZq7GBqbqDd2AxHby
bHF7Z9YPzPSh7jHXl6C2cU6C2NmqsJH2YpCQAY3mvfP0mY+eM+DMocJw79JT2PZ9
CHkW5PbEJ4ymNt/O1j5UVbfiQ+5FvmXXPFRbolQyZQk1rYqLsbAA9eYwH6ZsM3C1
6mf1i5RBx9DbklZfALtFp6WuUN0/Wb8xHzVi6lbva2pze5iaVQFdXRAW0b0nQFWl
0zScQSpM8/foLw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:41 2026 by rpki-client