Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: orNlXef1sjEbE+QjpV5N3BuRnC+3go1AC+dIrn5xBf0=
Subject key identifier: 21:67:73:4F:26:59:92:EA:90:69:FD:F8:E0:B0:1D:AC:95:6E:44:5F
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019E6BE2A34708A8C8AAAF5539AE3D1B194C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 11F2
Signing time: Thu 28 May 2026 00:01:15 +0000
Manifest this update: Thu 28 May 2026 00:01:15 +0000
Manifest next update: Fri 29 May 2026 00:01:15 +0000
Files and hashes: 1: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (hash: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4=)
2: E6wT0b-k1u6FR3wlv4qrEUuXVus.roa (hash: QZbCRhopOeDIiKUt1DVyRJURDTW9xWZnCSsr7ayZmWw=)
3: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: l+a0Xq43wb0citl2KOzO+8xBAsbVWpkL0I0b1rIiyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:e2:a3:47:08:a8:c8:aa:af:55:39:ae:3d:1b:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: May 28 00:01:15 2026 GMT
Not After : May 29 00:01:15 2026 GMT
Subject: CN=2167734f265992ea9069fdf8e0b01dac956e445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:cd:b6:ca:16:f5:6a:0f:89:fc:4d:1b:b0:
bd:b0:8e:bc:b7:4f:45:23:ea:a7:dc:86:47:21:f9:
ca:99:03:45:91:1c:3d:30:bf:c7:bc:3c:d8:48:3c:
db:94:f8:99:e1:5f:e6:4b:8d:34:60:99:25:9d:a6:
c8:af:10:68:3a:f1:96:36:14:ca:ea:06:46:23:1a:
13:84:6b:2d:54:80:80:85:0f:0a:62:3a:45:c9:1c:
d9:37:84:ae:f4:8c:ff:83:4d:3a:b2:40:f7:25:48:
0d:ea:81:8a:3d:6a:1e:53:41:11:12:c7:7c:fe:7b:
ef:fb:35:14:05:65:a6:3c:34:1c:ba:4b:d7:68:69:
a3:ae:06:06:a7:31:d8:97:44:4a:62:05:fd:d5:04:
06:f5:3a:ee:6b:6a:6d:ff:13:5d:4e:cb:4c:3e:de:
ef:55:0d:21:72:e5:84:13:66:9d:89:63:00:33:ae:
cb:0b:90:fd:6c:40:f1:8b:db:ce:cb:37:1c:a9:0c:
e2:45:01:17:e9:aa:a7:4a:11:ca:44:f4:62:74:87:
c0:bc:9e:fb:3f:cf:78:93:aa:b7:da:d8:49:10:b7:
0b:7f:9f:c3:31:12:f5:6d:d4:d7:6f:85:ca:ed:97:
d0:10:56:1a:74:c2:25:21:d6:bd:7a:ef:c6:f4:17:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:73:4F:26:59:92:EA:90:69:FD:F8:E0:B0:1D:AC:95:6E:44:5F
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:45:10:45:00:02:ea:4f:dc:1c:67:77:4a:d2:21:0f:0a:
15:2f:b8:42:df:27:45:55:61:25:a8:21:b4:65:11:70:14:cc:
50:70:96:7c:0f:df:74:a1:9c:32:ce:55:3d:4b:ed:a1:30:28:
6c:7b:ec:61:1a:7d:26:6b:8c:98:85:91:8b:e1:7c:e8:44:5f:
e3:47:72:d4:a5:42:eb:b5:0d:ad:b2:4c:a4:f5:0a:54:d9:6d:
64:4a:e1:87:ef:63:3a:cf:47:5f:a1:8a:26:12:30:e9:fb:8a:
8e:72:4e:54:8f:e3:b3:ea:49:d8:7e:e2:bb:ec:0b:ec:4f:36:
c1:83:9c:b6:78:c7:ef:24:2c:00:2e:1e:c8:d5:53:7c:27:24:
62:28:a7:ee:a6:cd:a2:91:42:30:95:a7:15:42:4f:cc:04:86:
b8:38:8f:92:3a:37:99:79:93:f4:a1:7c:7a:4b:8f:81:d1:ce:
6e:eb:e2:05:2d:ee:63:f0:43:0b:7a:c7:72:34:ee:06:94:08:
5a:aa:17:fb:7c:31:3d:f4:51:84:fc:cd:29:18:ae:77:d6:36:
d3:76:61:98:8d:1e:ce:9a:f6:1e:30:5f:3b:88:4b:17:a3:c1:
65:1a:08:bc:10:1e:04:5f:0f:31:f2:51:06:c3:41:87:62:07:
e6:fa:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 10:15:24 2026 by rpki-client