Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: Vhif5F6tqY0ahHRTi+Bztiswv8vZ61xMVvOOdz/nI2w=
Subject key identifier: EA:D2:08:07:F0:19:C6:CF:26:3B:F1:55:65:22:0C:FB:D7:AD:67:C7
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 019FA14D6FEE1E8C2471E4FD4C2469137233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0B41
Signing time: Mon 27 Jul 2026 02:00:34 +0000
Manifest this update: Mon 27 Jul 2026 02:00:34 +0000
Manifest next update: Tue 28 Jul 2026 02:00:34 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: wZHmPA6wOV1dsWS64K17t1EBUuNMsdGzX0TjzwbpFYE=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:6f:ee:1e:8c:24:71:e4:fd:4c:24:69:13:72:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jul 27 02:00:34 2026 GMT
Not After : Jul 28 02:00:34 2026 GMT
Subject: CN=ead20807f019c6cf263bf15565220cfbd7ad67c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:a4:e9:0a:b0:38:59:22:0e:ce:18:e3:49:
53:49:0f:97:e2:0b:4c:03:22:28:79:3f:7d:c5:8d:
49:52:69:fd:c0:1c:d3:4c:8e:22:ca:45:7f:0d:c7:
4d:02:f1:cd:16:93:1d:83:2c:c5:9a:37:f8:24:a4:
ad:72:08:c5:dd:68:70:1b:38:60:72:90:0b:57:69:
7b:0c:c3:f4:95:f8:17:2a:65:61:81:28:3d:fd:6f:
52:2e:8b:d9:23:bd:b9:2e:ce:4e:c8:05:1d:09:26:
ad:35:04:ed:53:3a:66:6b:98:5f:89:65:0d:51:4e:
4c:6a:5b:75:a7:67:49:18:b3:f5:3d:64:84:36:67:
61:bb:00:60:52:b7:ad:eb:ed:0c:0a:f3:1a:c0:4b:
d3:fa:a9:2a:cf:63:97:8a:b5:ca:5c:86:38:1e:30:
d9:84:a6:42:25:df:73:d2:4f:c9:61:b7:59:11:9b:
e8:f2:07:55:a0:bf:a3:85:59:a2:45:85:33:ce:b9:
1b:b1:54:36:61:11:a8:f5:0b:fa:4d:55:6b:13:3b:
c7:e9:04:f1:33:79:68:17:82:74:c7:fa:b1:bc:3f:
b4:9b:f8:e1:c3:55:54:33:db:78:88:4a:a6:02:1c:
4c:c5:ce:8e:8a:d7:5a:ca:ff:7e:e2:78:46:cd:7b:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:08:07:F0:19:C6:CF:26:3B:F1:55:65:22:0C:FB:D7:AD:67:C7
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:3d:6d:9d:e4:b3:69:d6:b1:31:14:8c:9f:d8:a4:d9:b0:
83:0c:94:f0:b3:d3:a7:58:9d:17:7c:9a:28:a6:23:81:1c:96:
2c:4c:ff:41:07:f2:e2:83:39:06:df:39:4c:93:f1:4e:ab:2e:
e5:ab:9d:7c:51:77:42:27:bb:4d:85:73:c9:2c:2f:47:4e:7f:
b1:ee:2d:d4:61:b6:ba:c4:40:bb:e4:fe:b0:55:0d:20:34:fe:
34:f5:45:3f:dd:09:7e:68:cd:91:f3:cb:c7:eb:c6:d1:47:42:
f1:dc:9c:be:8d:10:cb:12:da:1d:b4:a3:fc:9c:49:fb:c0:7e:
fe:d6:f7:2c:23:f2:d8:72:1e:72:91:a5:9a:da:97:48:61:8c:
e8:93:a3:14:5f:24:d7:8f:8a:7d:91:14:64:8e:4f:57:9b:17:
fc:6e:e6:81:78:e7:15:2b:e3:4e:1e:3d:b2:44:fd:2d:34:3d:
00:87:db:08:1d:13:ef:37:ef:44:e1:00:67:86:0f:d3:60:3d:
80:d4:0f:21:d3:e5:eb:47:cd:91:cd:35:65:fd:f1:4c:bc:a6:
e0:54:19:b3:3c:e5:95:a6:b2:b2:47:e9:57:b1:1a:a8:37:e6:
b8:21:f8:90:ea:d0:8f:16:d9:03:5b:f2:4f:42:f5:c6:5f:4e:
a8:e2:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:08 2026 by rpki-client