Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
File: NVyaW8uDQBCKQchiduHLlKYefak.mft (raw, json)
Hash identifier: JSBzMALLm/T49BGUnhmZDsKUUoVUh6YJBuRC5GZWW5Q=
Subject key identifier: 23:AF:BD:1C:0E:27:DC:54:AB:55:36:C1:2E:C1:25:5E:B1:41:0A:B1
Authority key identifier: 35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
Certificate issuer: /CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Certificate serial: 019FA18426161C3B63F0050DAFA141A56FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
Manifest number: 1268
Signing time: Mon 27 Jul 2026 03:00:20 +0000
Manifest this update: Mon 27 Jul 2026 03:00:20 +0000
Manifest next update: Tue 28 Jul 2026 03:00:20 +0000
Files and hashes: 1: NVyaW8uDQBCKQchiduHLlKYefak.crl (hash: V8RsSICV97UsfcoQjQ3oq7sR2ykM1WJyXK5acopt4tA=)
2: wvN6kWBv9-WIzYsvm-bSWdFrGOY.roa (hash: CKPOzucBQdx5H4UpPqvBTwUGJcxs2W6ttGR5J1M+c5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:26:16:1c:3b:63:f0:05:0d:af:a1:41:a5:6f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Validity
Not Before: Jul 27 03:00:20 2026 GMT
Not After : Jul 28 03:00:20 2026 GMT
Subject: CN=23afbd1c0e27dc54ab5536c12ec1255eb1410ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:97:ce:73:11:40:1c:d1:83:46:61:2a:9b:
12:18:68:c9:3d:80:51:88:35:be:51:c7:92:32:4d:
58:74:42:6d:e2:83:aa:ed:f8:3a:19:59:79:7b:f3:
13:7f:29:cb:ed:08:f1:66:90:14:64:94:54:31:3a:
9f:ab:a0:81:fa:b1:21:73:75:ab:65:0a:14:37:53:
0d:9d:c2:24:4e:f7:13:23:66:c2:26:c8:92:4b:5f:
8e:1f:e7:b5:76:4b:0a:f9:8f:2b:33:b8:42:15:bb:
9f:b0:da:33:9b:36:14:df:bb:3f:f8:43:19:17:d3:
26:7c:b6:31:22:ff:18:01:3d:63:b2:49:56:98:3b:
1c:b7:41:18:24:28:56:07:3f:b7:be:7e:54:51:0f:
a4:f0:30:fa:a2:c5:c1:45:cb:83:29:cf:b1:85:fe:
7f:31:4d:df:67:c6:e3:13:a7:48:a6:68:20:db:43:
d4:79:3a:64:89:82:51:45:f4:6c:55:39:5c:1e:05:
72:c7:b6:45:aa:48:3b:60:73:ff:3a:a2:79:4d:b1:
3c:bb:05:1b:8a:c9:3f:fc:ab:c6:57:42:18:50:8b:
7a:61:90:63:c1:2d:dd:ac:00:9e:b1:58:20:98:c3:
5c:13:ee:1e:a7:53:3e:0c:24:31:3f:a1:eb:e7:22:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:BD:1C:0E:27:DC:54:AB:55:36:C1:2E:C1:25:5E:B1:41:0A:B1
X509v3 Authority Key Identifier:
keyid:35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:5a:30:e2:50:42:89:90:4f:4f:9f:32:4c:d6:d2:30:a2:
cf:eb:e4:30:eb:f4:e5:1c:35:8c:06:a8:14:f1:c8:8d:95:90:
36:90:44:3e:db:3f:fa:a1:6d:f9:3d:ad:21:46:f6:98:ac:9c:
17:62:ad:af:ce:f9:bc:d0:33:4f:d8:3c:5b:6a:ac:da:a8:a9:
b0:97:e7:b6:0f:4e:90:4c:ae:0e:ca:26:44:b5:d3:cc:fc:fa:
cb:cf:79:2a:27:33:ea:d9:6f:b3:37:5e:d1:d9:2d:f3:61:58:
e9:2d:8d:e8:d6:87:3a:8e:3f:ef:f6:43:8a:1d:1e:06:e2:8e:
16:ad:13:dc:70:e8:0a:50:29:74:89:95:17:ff:5c:8e:59:e2:
30:53:c2:1b:a7:2f:54:c5:32:8b:2a:c1:d5:a0:4e:84:26:b2:
b2:53:c7:77:c8:ad:a5:8b:9c:fa:a7:f5:f7:76:58:73:cc:70:
5d:f6:65:e8:46:b8:dc:99:00:74:cd:0c:95:a0:a9:f2:6b:f6:
e5:8f:f4:32:01:c5:f1:e7:30:5e:84:70:91:c8:00:75:42:d4:
f3:9a:de:d0:7e:2b:5a:2f:ee:46:a7:94:9c:e2:b1:56:b1:0a:
20:1d:36:51:e2:42:c8:51:25:d3:3c:cc:36:1b:e3:a7:81:57:
24:b4:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:09 2026 by rpki-client