Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: ESAl+yeRk70AJfi/Ya1hIxZyj+69GMScDHat5BsmNdY=
Subject key identifier: 36:B4:27:EC:C9:2B:BE:AF:3D:73:2B:EA:12:6B:0A:5E:78:7A:CC:F2
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019F28B6A1DD2463A53AEB1284F8A009314D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 02D0
Signing time: Fri 03 Jul 2026 16:01:25 +0000
Manifest this update: Fri 03 Jul 2026 16:01:25 +0000
Manifest next update: Sat 04 Jul 2026 16:01:25 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: mY27m+w4FFaJI3ctV3oD0fOytPrl4IAFMLZXUJLc0xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:b6:a1:dd:24:63:a5:3a:eb:12:84:f8:a0:09:31:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Jul 3 16:01:25 2026 GMT
Not After : Jul 4 16:01:25 2026 GMT
Subject: CN=36b427ecc92bbeaf3d732bea126b0a5e787accf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:32:a1:e4:68:b7:aa:10:43:ea:96:8e:37:
0f:85:3f:df:5e:d1:28:63:22:3d:39:0f:7c:95:6e:
7f:0f:bf:c8:e8:02:da:37:83:8d:e1:f3:c7:65:a0:
0d:f7:54:7f:e6:06:30:a5:c0:9f:b5:b7:be:e4:f8:
66:38:48:d2:bd:42:96:4f:bb:77:ea:a0:97:f1:41:
08:3a:58:de:35:ed:52:1f:86:b5:6e:65:99:df:77:
73:d9:6c:89:9f:cb:f3:0d:67:cd:76:23:24:35:80:
d9:3a:cc:e4:de:b9:13:dc:14:37:73:24:45:3f:5e:
22:46:2e:fb:b6:c2:66:cd:8c:91:38:05:27:e1:b3:
d2:29:9c:69:8b:cf:71:b3:3f:dd:33:8e:1d:e7:8d:
cc:3d:d3:f1:14:57:f9:8d:1d:d3:d9:e7:e7:75:2e:
f1:6b:bb:fd:3b:56:54:da:af:63:68:c2:1e:86:4e:
da:78:a3:8b:5c:61:cb:99:27:3a:86:67:5e:84:5d:
79:dd:1f:29:ec:5f:0b:68:57:60:b5:23:65:ac:05:
fd:fd:27:c6:97:4e:a0:de:1c:be:1d:7b:ee:e8:25:
a6:d3:83:e4:44:77:8b:07:b5:3c:3f:81:2f:b2:23:
cd:67:e3:15:ee:a3:83:ff:af:c2:03:ac:f9:2c:70:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:27:EC:C9:2B:BE:AF:3D:73:2B:EA:12:6B:0A:5E:78:7A:CC:F2
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ce:ff:ed:27:9f:4c:2e:93:67:54:29:e5:4a:94:63:11:24:
0a:e3:87:a8:05:a3:33:4c:51:2b:5e:55:c3:8d:36:6b:24:2a:
0c:04:ea:57:b4:82:de:0f:3e:39:51:7b:a3:6b:fd:5f:49:39:
26:e3:c1:3b:85:a9:b7:e3:99:83:1b:3e:8a:6f:65:b7:6a:bc:
22:e4:6c:4b:25:ba:94:95:05:44:b7:02:ee:f6:e7:6e:4b:4d:
60:f5:d3:15:e9:48:ff:4c:8f:68:71:1c:b6:2c:ff:88:91:c8:
1d:57:77:ec:3e:1e:93:e8:dc:6d:aa:28:d5:d6:36:c9:53:76:
63:15:bb:3d:81:66:f3:b0:5a:7f:3a:5e:b7:a2:16:bc:d7:d7:
9f:55:a4:70:3a:d5:d4:b3:f7:da:2f:59:38:5f:c9:a6:9f:a4:
66:c0:82:e8:fc:74:95:bc:f9:96:fc:5b:a0:62:80:e2:44:6f:
68:33:c7:a9:fe:b5:40:e2:16:ab:b4:4b:ef:01:24:ac:c6:65:
2e:a8:73:82:41:41:c8:c6:63:63:5e:60:39:13:0b:e6:88:6a:
ac:ad:7b:1e:61:de:8a:6c:d9:d3:ac:52:10:2a:f5:43:42:f4:
5d:b0:e3:cc:13:bc:0b:53:1f:67:35:30:ff:f0:f0:02:9b:e4:
9e:f5:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:41 2026 by rpki-client