Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: 7HTqU9A7IZeFasGNIJO10hMgUVEP+TN04OdhkQoRoYA=
Subject key identifier: A3:81:04:E5:41:82:03:7B:8D:9A:03:D8:09:F8:C2:50:48:52:A8:C1
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 019FA0718E21470685C620ED6B36043684C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 19CB
Signing time: Sun 26 Jul 2026 22:00:24 +0000
Manifest this update: Sun 26 Jul 2026 22:00:24 +0000
Manifest next update: Mon 27 Jul 2026 22:00:24 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: 85x3EiFPWeMVuzBun8tPsxDDRlybB/4J9JjzFUB+0x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:8e:21:47:06:85:c6:20:ed:6b:36:04:36:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Jul 26 22:00:24 2026 GMT
Not After : Jul 27 22:00:24 2026 GMT
Subject: CN=a38104e54182037b8d9a03d809f8c2504852a8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:3b:36:09:05:bc:31:f4:35:54:64:da:64:
7a:19:13:85:46:e9:ec:54:ec:23:b4:42:8a:1d:04:
79:2e:d7:95:07:cc:23:9a:17:df:87:be:9d:1c:a9:
d4:9c:75:4e:f3:77:bf:cd:7c:80:8e:68:42:79:fa:
2d:1f:78:e3:ae:79:97:90:97:0d:e9:c5:41:75:f6:
c7:76:cd:70:f3:a1:d2:4b:18:14:4a:06:d9:6f:6b:
fa:81:11:e2:8d:6e:f4:57:73:5f:2e:ae:98:0b:bf:
1c:27:74:cb:28:44:d2:f1:c6:a5:53:53:ee:19:1e:
df:78:dd:02:89:51:12:7a:ac:0d:99:d9:84:3e:e6:
96:a4:38:ab:20:c1:4e:29:75:17:d9:6a:3b:89:f5:
24:ed:1e:a5:71:5c:a2:f6:ba:b2:dc:71:11:28:7c:
4f:10:40:9a:d7:d9:d5:b3:2f:6c:6e:0b:74:47:4d:
02:f3:f2:61:28:77:e5:98:0c:e3:b3:b8:46:49:43:
fd:7b:4b:42:38:06:b9:f8:19:9e:a1:28:f7:d3:3a:
80:98:e7:57:45:3a:00:59:26:f8:a1:c6:bd:1c:c8:
7e:f1:96:73:7c:2e:8d:2d:b2:cf:ab:21:e9:68:45:
a7:83:38:77:71:d7:c1:7f:eb:d8:fe:06:24:59:94:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:04:E5:41:82:03:7B:8D:9A:03:D8:09:F8:C2:50:48:52:A8:C1
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d8:52:25:ad:38:aa:f8:73:3a:63:a4:96:ce:56:b6:c3:be:
1b:d1:4a:32:82:6d:75:fa:5f:6b:93:dc:84:de:15:5e:f1:d4:
de:56:89:ac:82:ce:11:de:4b:6f:36:f8:5c:f9:70:bb:f2:9b:
78:49:8b:2f:dd:a1:f3:1d:f3:63:df:12:a9:7c:db:e9:0d:23:
c8:18:a2:7f:20:51:a1:96:e7:17:7d:18:b3:78:cc:54:23:71:
15:61:8c:58:16:32:da:e2:33:aa:4b:b9:0d:48:e8:97:f1:79:
55:4a:9f:7d:fd:71:74:e5:38:a0:b4:56:d7:96:d2:8c:48:7f:
61:10:6d:b3:5f:32:7e:29:09:ec:d6:06:7a:70:4b:71:50:fa:
49:54:b5:2e:8d:de:bb:63:1e:03:f2:db:59:27:d1:9e:8d:2e:
09:15:38:a0:68:9b:0d:85:89:35:37:b5:a4:2a:60:53:f6:69:
d2:75:bd:39:17:4d:dd:af:a8:13:ea:1b:1c:63:de:ad:f6:c5:
af:dc:c2:e0:c4:34:c6:74:70:e1:00:5b:ae:52:48:d7:96:1f:
94:6c:55:8a:0e:07:5e:d2:87:5f:00:ac:56:86:cb:d8:56:f7:
2c:1c:e6:1b:d7:7c:3c:36:ef:5e:52:8e:10:ad:16:71:0d:00:
64:de:03:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcY4hRwaFxiDtazYENoTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNGM3MjdjZTBlNGUxNjZhYzZiZTMwNGZmZjI1MTgxNmQ1
MWE0NDIwHhcNMjYwNzI2MjIwMDI0WhcNMjYwNzI3MjIwMDI0WjAzMTEwLwYDVQQD
EyhhMzgxMDRlNTQxODIwMzdiOGQ5YTAzZDgwOWY4YzI1MDQ4NTJhOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHY7NgkFvDH0NVRk2mR6GROFRuns
VOwjtEKKHQR5LteVB8wjmhffh76dHKnUnHVO83e/zXyAjmhCefotH3jjrnmXkJcN
6cVBdfbHds1w86HSSxgUSgbZb2v6gRHijW70V3NfLq6YC78cJ3TLKETS8calU1Pu
GR7feN0CiVESeqwNmdmEPuaWpDirIMFOKXUX2Wo7ifUk7R6lcVyi9rqy3HERKHxP
EECa19nVsy9sbgt0R00C8/JhKHflmAzjs7hGSUP9e0tCOAa5+BmeoSj30zqAmOdX
RToAWSb4oca9HMh+8ZZzfC6NLbLPqyHpaEWngzh3cdfBf+vY/gYkWZS//QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOBBOVBggN7jZoD2An4wlBIUqjBMB8GA1UdIwQY
MBaAFJ1Mcnzg5OFmrGvjBP/yUYFtUaRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZTNmZGQtYWQ4MS00OWIyLWI2ODAt
YWIwOTMzYWM5YWY1LzEvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZTNmZGQtYWQ4MS00OWIyLWI2ODAtYWIwOTMzYWM5YWY1
LzEvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9hSJa04
qvhzOmOkls5WtsO+G9FKMoJtdfpfa5PchN4VXvHU3laJrILOEd5Lbzb4XPlwu/Kb
eEmLL92h8x3zY98SqXzb6Q0jyBiifyBRoZbnF30Ys3jMVCNxFWGMWBYy2uIzqku5
DUjol/F5VUqfff1xdOU4oLRW15bSjEh/YRBts18yfikJ7NYGenBLcVD6SVS1Lo3e
u2MeA/LbWSfRno0uCRU4oGibDYWJNTe1pCpgU/Zp0nW9ORdN3a+oE+obHGPerfbF
r9zC4MQ0xnRw4QBbrlJI15YflGxVig4HXtKHXwCsVobL2Fb3LBzmG9d8PDbvXlKO
EK0WcQ0AZN4D5Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:27 2026 by rpki-client