Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: uwJfi2qDnD9D3lOHibzaLLNqJ5WsMZdqQagRaUkHwiw=
Subject key identifier: A7:A1:BA:AA:11:85:BF:E4:9C:43:0F:F2:84:52:BD:C5:2E:0D:92:CE
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019E2BBA34D30FFDB1589B352699461B87AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 024D
Signing time: Fri 15 May 2026 13:01:23 +0000
Manifest this update: Fri 15 May 2026 13:01:23 +0000
Manifest next update: Sat 16 May 2026 13:01:23 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: M7o3HOjCXzGeK1t8mJ9P5vGK6PUMsM24gPO763O2iDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:ba:34:d3:0f:fd:b1:58:9b:35:26:99:46:1b:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: May 15 13:01:23 2026 GMT
Not After : May 16 13:01:23 2026 GMT
Subject: CN=a7a1baaa1185bfe49c430ff28452bdc52e0d92ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:6d:45:43:31:a4:4d:9f:37:1d:b3:6a:dc:
ec:8b:c1:76:fa:43:db:e4:3d:aa:93:04:74:61:91:
ab:03:bd:6d:01:a2:64:9e:d1:13:fe:42:61:40:e4:
a9:26:ac:9a:8c:ba:be:9c:94:d3:03:99:a2:25:31:
52:50:f0:70:d9:62:7e:a1:d6:94:52:17:0b:85:d0:
e6:f4:01:ce:67:f4:7d:cd:74:dc:1b:ad:c6:5d:01:
71:63:03:f2:b4:b1:01:90:13:9a:95:61:2d:e9:d0:
5b:a7:8f:ee:25:11:7d:7c:a5:f9:27:78:db:36:a5:
6b:b5:40:31:75:56:c7:4b:c4:88:9d:f6:d4:83:22:
25:d3:73:b4:9f:54:c6:28:da:47:e1:14:5b:0e:2d:
af:70:a7:d4:f2:90:df:a7:37:dc:07:72:aa:ce:9d:
e9:c2:ab:1c:3c:02:d2:56:7a:44:fb:9a:fe:ad:ec:
7c:12:45:82:84:3c:c3:8a:46:af:09:0f:fd:3f:a3:
8d:a5:a6:14:00:5d:cc:d9:82:74:83:49:71:0f:a1:
9f:07:b3:4c:0f:e1:cf:40:19:d6:43:db:b8:56:82:
1b:e8:5c:06:9e:1a:c6:dc:b3:57:2b:de:e3:b5:12:
6a:f0:a4:d8:95:25:fc:a5:21:9c:ef:2c:b1:1c:8b:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:BA:AA:11:85:BF:E4:9C:43:0F:F2:84:52:BD:C5:2E:0D:92:CE
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:96:b1:d0:41:bd:6c:ad:e7:39:26:06:35:00:7f:2d:53:13:
28:5c:de:70:ec:3b:5f:b2:0a:08:4a:81:27:8e:67:8f:50:0e:
77:53:a9:75:ad:47:47:14:ec:a6:45:17:e5:e9:bf:bf:a7:31:
90:e2:d6:ed:ca:47:c6:4c:bb:60:37:ec:27:15:31:d4:b4:bb:
d2:b2:c4:86:0a:fa:aa:2f:15:7f:db:31:a8:c1:21:84:bf:db:
e8:da:68:6f:36:78:0c:ed:ba:72:bb:65:e8:79:54:7c:83:d1:
23:df:b1:90:02:b8:a9:61:81:04:f4:c0:64:12:b9:a6:ad:44:
70:45:88:7b:8e:4b:02:42:d1:02:50:be:2b:3c:da:ca:7c:1b:
38:74:ee:6f:7a:52:cd:5f:4c:36:24:96:90:55:3b:b0:a4:81:
8f:90:b3:66:21:51:42:e9:15:f5:4b:98:4c:ec:e5:2c:c6:46:
95:bd:01:a4:2f:0a:57:c8:e8:1c:23:7d:31:98:95:74:c6:8e:
1f:c4:91:4d:fe:ce:20:17:27:71:91:7f:47:9f:f7:65:96:aa:
99:41:0b:af:dc:b6:93:5e:c3:62:85:97:04:43:24:e5:99:29:
a7:52:b4:ed:47:53:65:f4:9f:83:1c:c1:d0:44:fc:10:c8:8c:
b8:40:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:32:07 2026 by rpki-client