Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: DlP7UmE0DEx9/Zr9LFLfP50BDcU/ThrJoc0oZN+UJJM=
Subject key identifier: 4B:7A:B7:A0:36:2F:84:0C:98:EF:E0:E3:61:BC:E6:11:B3:07:D4:71
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 01A04197815B2122ECAC038CD7A8901A51F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 1A20
Signing time: Thu 27 Aug 2026 05:00:43 +0000
Manifest this update: Thu 27 Aug 2026 05:00:43 +0000
Manifest next update: Fri 28 Aug 2026 05:00:43 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: UG9p6hsBkB+CPcDuRK8ozxSCserjlSH+eKxoBdiKyds=)
2: PJf1Yws8p6oR_mrdRHX4LnOh1Z8.roa (hash: ceWACnB+ERuEfKRbsAjVw1PIFxKKxglKGhcLEOukNs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:97:81:5b:21:22:ec:ac:03:8c:d7:a8:90:1a:51:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Aug 27 05:00:43 2026 GMT
Not After : Aug 28 05:00:43 2026 GMT
Subject: CN=4b7ab7a0362f840c98efe0e361bce611b307d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:7e:70:7c:e0:30:b2:ef:76:1f:97:f1:1a:
bc:99:4b:56:87:4c:7d:c6:55:67:2c:0f:c3:29:a9:
87:b5:07:df:0f:f5:07:06:14:67:7c:81:58:3b:d6:
6c:7c:28:10:4b:07:d7:0a:54:02:32:94:9a:75:57:
05:3a:47:68:a2:0d:0d:a8:b3:eb:38:3e:8b:e8:e3:
7b:ca:32:fd:21:14:42:aa:98:2f:a1:88:db:e3:ba:
06:d2:10:06:97:06:06:b5:ee:24:cc:8c:49:11:60:
1c:f1:ed:88:aa:59:b1:0c:12:47:d5:7b:64:84:4b:
d9:ee:f8:00:a4:7c:1f:f2:29:e6:dc:89:a1:de:71:
50:88:e3:2d:18:17:8e:98:cd:e6:89:5f:4c:49:44:
8c:8f:8d:18:18:12:1b:e1:f5:ac:a0:a7:1f:76:aa:
dc:63:f7:02:94:80:24:e3:f8:40:58:89:c2:40:f4:
e8:6e:94:de:3f:d9:fc:91:4d:48:71:23:8f:2e:58:
30:01:c7:83:d6:35:b0:a8:75:08:e6:3f:68:b2:e5:
74:ee:37:8c:8c:9b:c7:7c:52:11:43:10:39:45:e9:
e6:14:53:e8:69:91:c6:d8:b5:3c:53:3d:e9:36:52:
f8:7f:8d:23:5b:0f:de:1a:35:fa:29:a9:bc:16:cb:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7A:B7:A0:36:2F:84:0C:98:EF:E0:E3:61:BC:E6:11:B3:07:D4:71
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:b6:78:66:29:ea:74:a6:fe:ff:cc:1a:13:98:ff:14:1b:
63:ef:fc:cc:28:7b:c9:bc:3e:22:68:88:52:52:b1:df:a6:02:
be:cb:8b:a3:46:06:29:ab:97:71:95:a7:d8:c6:87:6b:6d:0c:
ff:bd:91:55:ed:41:f2:a4:af:d7:05:7e:09:59:c1:aa:e1:c1:
85:c7:b4:98:a4:fb:5d:0d:9e:7c:d7:7b:52:14:84:3b:d1:21:
6a:67:5f:42:8d:fe:51:6e:78:8d:9d:d3:ef:a5:62:fd:8c:25:
a6:cd:59:1d:74:13:7c:49:86:23:a4:5f:70:08:5a:0f:d3:6a:
b1:41:31:78:a2:14:42:0a:82:46:b0:1c:0f:66:31:9d:94:41:
2b:19:8c:91:c3:79:b5:e1:7f:ab:da:10:7d:a5:61:70:c8:dc:
f2:0a:b1:9a:c3:24:ca:c8:8f:d5:13:64:10:6f:5a:fc:5a:c8:
e2:e3:c8:02:78:b3:7f:52:6b:57:9c:a9:45:b5:c7:66:0e:0d:
81:53:d7:a1:4e:8e:59:b2:ed:ed:04:43:05:21:e3:90:40:a7:
9f:0a:2f:d5:c5:ef:01:9e:15:1b:53:6e:f5:ea:ba:a6:5c:e4:
08:e4:e3:11:6a:16:bc:e2:0f:03:60:ce:65:ef:40:b0:38:d9:
4b:1e:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:45:18 2026 by rpki-client