
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: p7awt7r23ZLk4FD2DEQAiL9z18tcn7LfoiAPiHLUJL0=
Subject key identifier: BF:2D:F0:24:74:C9:6F:68:25:30:E1:98:2B:86:D7:56:DF:9E:2B:0D
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019F71E16FC61B6D608E8CB4F291E62C1276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 0510
Signing time: Fri 17 Jul 2026 21:00:27 +0000
Manifest this update: Fri 17 Jul 2026 21:00:27 +0000
Manifest next update: Sat 18 Jul 2026 21:00:27 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: sGgIiXUezoU6kwSMWYMkpxE1lIj4KJ5IsEI2UsnWP6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:e1:6f:c6:1b:6d:60:8e:8c:b4:f2:91:e6:2c:12:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Jul 17 21:00:27 2026 GMT
Not After : Jul 18 21:00:27 2026 GMT
Subject: CN=bf2df02474c96f682530e1982b86d756df9e2b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:e3:0e:27:f8:ca:a2:16:70:69:e5:67:d5:
65:e3:8a:4a:79:bb:02:1b:8c:9d:60:67:15:d4:66:
00:68:22:ef:49:32:6f:27:ff:3f:73:3e:0a:f4:a5:
5e:9e:7d:0b:ce:ff:3c:05:41:c8:d6:a1:c6:99:44:
6d:46:3c:37:23:16:29:fe:52:f7:b5:20:52:3a:a0:
13:f9:e9:c8:fa:4f:fd:d2:c5:6a:bc:ac:02:5a:a8:
51:78:f0:7c:70:88:11:53:23:54:ae:c6:3e:7c:78:
d8:0e:61:b4:6c:9f:86:94:5b:9b:c9:19:64:7a:fc:
92:1b:cd:78:2c:9f:24:bb:0d:15:88:a9:bb:4e:ff:
a8:f4:6c:4f:ec:96:43:40:3d:51:69:c1:b6:c8:b0:
8b:8d:7e:ed:4c:05:d7:33:e1:54:cc:b9:31:61:05:
e2:60:6e:11:fb:ba:3d:01:4a:4e:24:ae:f7:64:4d:
2e:47:42:32:ec:a9:6c:15:31:c8:a8:30:5a:81:fc:
2a:c5:15:c0:9d:4a:f6:a4:39:2e:97:db:89:2a:71:
36:69:a1:e9:e3:11:35:e8:71:fc:15:f2:67:6e:61:
0b:fb:78:b6:c2:de:46:33:d1:f2:4a:9b:f4:d7:45:
81:0e:0e:3a:55:23:c7:a4:50:68:d8:e1:e8:c9:e4:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:F0:24:74:C9:6F:68:25:30:E1:98:2B:86:D7:56:DF:9E:2B:0D
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d2:2f:65:0d:8b:fc:2e:d1:37:42:93:a4:be:e6:2a:cb:e7:
25:e0:73:23:e8:bc:1d:18:87:24:4b:4c:76:a3:f1:73:c9:90:
03:d9:6b:e5:2d:d3:dc:09:a4:2e:f3:8e:5d:31:47:73:48:e3:
d8:b6:ef:fb:d2:30:60:6c:26:c6:d5:eb:71:f7:e9:82:53:c1:
bc:64:23:7a:62:07:11:1e:c2:fa:86:68:09:28:33:15:fa:f1:
2c:51:80:65:ed:cc:59:d0:df:db:bb:7f:a4:3b:b5:cd:ea:98:
a0:8a:45:29:79:a6:d5:17:b8:f9:e8:34:06:71:b7:3e:a3:e0:
75:d2:d7:34:d5:ce:d8:8f:c0:d1:5d:14:55:fe:11:e3:38:f1:
d4:54:19:84:12:e7:dc:bc:63:77:fe:6e:6e:4d:6b:eb:2c:b0:
59:33:0b:d1:27:e9:ee:13:af:3e:60:fb:4f:18:0d:7b:d6:2b:
55:5f:92:8c:3c:f4:d5:c5:4c:46:d8:34:aa:65:1d:8f:32:d8:
69:fc:bb:5e:f6:c8:0b:c4:9e:0e:fa:ba:f2:12:84:8d:f4:4c:
6c:64:6b:aa:6b:38:79:d6:bf:c3:3b:45:9c:ad:89:aa:6b:25:
bd:84:1c:91:7f:b4:c7:4d:11:db:8e:5c:08:df:a2:63:3a:94:
0e:96:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:56:12 2026 by rpki-client