
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier: z2q+FP6s7+j/YjDLsIMAxMUbE2RhvzQWxRBcjxGUx38=
Subject key identifier: F7:06:35:DE:89:71:9D:92:C0:1D:96:93:BC:13:C4:09:09:D9:1E:D6
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 019FA03ACA72BB18DE874634F04B48C58E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 21:00:35 +0000
Manifest this update: Sun 26 Jul 2026 21:00:35 +0000
Manifest next update: Mon 27 Jul 2026 21:00:35 +0000
Files and hashes: 1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: jhIkVCUA6Nr/oNYF/vJyhNHNLSk2zk816m5IYowhUQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:ca:72:bb:18:de:87:46:34:f0:4b:48:c5:8e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Jul 26 21:00:35 2026 GMT
Not After : Jul 27 21:00:35 2026 GMT
Subject: CN=f70635de89719d92c01d9693bc13c40909d91ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:26:dc:8e:dc:d6:cf:ed:cb:15:81:1a:95:
39:1c:bc:4c:28:31:f5:53:05:63:ab:18:7a:01:b5:
83:9d:aa:6f:72:c4:da:23:75:2d:7f:92:18:90:7a:
7e:34:7c:ae:44:68:e4:68:93:c4:51:22:dc:d9:a8:
bb:7c:c0:37:dc:32:0a:d4:69:90:c7:ce:cf:d9:0a:
14:25:35:00:40:40:9d:3b:2c:7f:45:8f:86:15:01:
dd:d6:93:32:82:68:05:f2:0d:0e:dd:39:4c:a6:79:
02:a3:82:25:a8:97:f5:72:a0:5c:07:61:f2:26:94:
5d:8c:94:04:35:e3:93:22:72:84:51:1a:c7:51:94:
b2:dc:c6:23:f4:65:2e:70:96:b2:14:5b:34:4b:c6:
2d:40:75:10:59:c5:47:81:16:81:92:f9:25:0c:1e:
81:3d:4d:a9:f9:29:b4:b4:7d:85:4f:91:6b:3b:a9:
38:0c:46:70:bd:23:48:71:89:eb:85:40:d5:58:7f:
b3:a8:9d:de:78:d0:6b:08:f5:8c:d5:c7:ad:2f:5e:
b2:3b:8b:42:67:c2:4a:27:db:f1:7b:be:8d:35:c6:
d1:75:d7:2b:de:f9:90:35:f0:d3:c3:8d:d3:f2:35:
88:f9:19:1f:28:f3:e5:ab:a5:45:87:15:60:14:8e:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:35:DE:89:71:9D:92:C0:1D:96:93:BC:13:C4:09:09:D9:1E:D6
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:df:15:45:02:b6:c4:90:81:39:a0:ec:cd:54:34:f7:82:
49:62:72:5f:c5:96:00:29:6b:a5:6f:d3:68:75:f9:ed:53:64:
32:b2:7f:33:18:cf:90:d6:a5:0a:c4:27:49:5e:2c:82:59:a2:
00:72:76:fa:f8:c7:87:ce:2c:c6:6d:33:4a:73:52:36:2b:c8:
f7:7e:44:b6:90:73:de:19:0a:4d:c6:14:bc:05:b1:04:c9:fc:
43:2c:6e:f3:6a:e5:07:bb:bc:00:85:24:58:12:c4:ac:f6:86:
ed:34:d3:38:67:1e:0c:93:06:b6:b9:c5:6d:9c:b3:83:6c:60:
6e:b7:b5:f7:59:77:43:9a:f9:a2:f5:55:ff:8f:3b:91:1a:93:
70:9b:40:b3:7a:f8:b5:c3:5a:5b:ef:6e:d6:c6:de:a1:ad:18:
5b:5b:68:db:16:35:f7:ed:bc:f6:14:c6:a6:42:a4:9a:fa:1c:
8a:00:7b:5d:37:66:ff:e8:97:92:b9:69:1f:4f:a7:89:63:11:
37:39:b8:e2:de:7d:85:20:ec:77:c0:9e:a5:5b:ca:30:52:e7:
88:c1:b0:b9:23:30:b8:42:4d:9d:97:aa:b1:a9:44:39:96:eb:
34:c9:34:78:e4:a0:67:94:15:83:9f:f6:a4:66:60:6f:65:1f:
e3:c6:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:37:48 2026 by rpki-client