Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier: 3bTqo9T8tJS+/KQyW4lxT0+n1he24UAhQRs0YOeJQ+k=
Subject key identifier: 93:32:91:41:B9:BE:D3:6F:AC:79:C6:59:87:15:6D:47:45:B8:92:C7
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019FC9A51674FE28D0A4E00976C1280FE5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number: 1A20
Signing time: Mon 03 Aug 2026 22:01:07 +0000
Manifest this update: Mon 03 Aug 2026 22:01:07 +0000
Manifest next update: Tue 04 Aug 2026 22:01:07 +0000
Files and hashes: 1: 41lbXeJXKl4CiDGWnnMHpB24gPU.roa (hash: kG6Cncs4+D3tofS5cOrSl2kOR5wHI2wRUBR4uUbXqUs=)
2: 9eWyQcwhhtcWSOgLAyvjVSN69_0.roa (hash: WQam9mNIAyIv9GJMj3n6lEuVNq1iCgTWLcCsWIhP4W4=)
3: B5xzluZY3MO07Y-DnPhReukzoAM.roa (hash: yLbG1QhNKSifZB6S6ehHViwPbt5RRExGQbO6VZAzEXk=)
4: EL9_D6jbpPm0f93FbIMJFjXA39Q.roa (hash: u2EHA4Ca3HUJR0DK3eXdJPDlTwL0hlSO69OLTZssz5Y=)
5: Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa (hash: SXovFZCanvTkxojFFLSIhxdKBc7pAkz+ovEDvaWHEfE=)
6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: DB4Z0o7n746m+br60XDGF8OmoaEB4x/SpRLNpwO3jV0=)
7: cxpnqAln6hhdNSSyG6qFvgqIbyw.roa (hash: iyYEFth/WwaalutGJ5J/GHoRvV6KCxdd9XrPvperx+Y=)
8: hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa (hash: Wa5Ke4FZahcAqtbVLwkcn3uM1gDF8FKkh2X50wELyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:a5:16:74:fe:28:d0:a4:e0:09:76:c1:28:0f:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 3 22:01:07 2026 GMT
Not After : Aug 4 22:01:07 2026 GMT
Subject: CN=93329141b9bed36fac79c65987156d4745b892c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:dc:df:be:03:de:4a:6e:b7:09:1b:24:71:
73:66:89:2c:df:cf:f5:a6:78:90:44:79:9a:60:b2:
9c:3b:99:46:67:cd:0c:49:76:2f:27:87:d8:c9:52:
4c:5a:ea:11:0f:87:b0:7f:e4:62:98:41:eb:1c:18:
57:26:03:bf:ae:e6:63:f2:c4:64:c0:21:fb:7d:76:
e5:54:69:28:64:c8:9d:83:f3:44:e7:82:33:26:bd:
99:9c:a1:b6:df:1f:0c:d6:9a:95:df:17:99:e4:b4:
d4:43:21:fc:35:12:93:7c:3b:0f:15:54:0c:a3:d4:
00:c4:c9:d5:3b:1a:d1:d1:79:e6:20:ca:8b:30:39:
b8:3d:c2:e0:ab:ba:af:5f:f9:42:b3:ef:57:14:fe:
ab:ec:8f:e0:d0:5a:f5:cb:4d:92:46:0a:ef:72:0b:
03:02:27:8d:38:13:e8:b9:45:fb:9c:49:89:d5:5d:
f6:b7:b1:25:8f:72:ef:61:96:8a:f4:03:c3:37:b2:
6c:41:2f:62:43:1e:5b:e6:88:ae:6a:93:fd:b6:7f:
05:26:42:bd:f7:1d:f8:eb:b4:f6:03:2f:8c:bf:96:
25:4f:25:aa:ad:3c:5b:38:bc:b9:49:a8:68:53:1c:
89:2b:f9:fc:db:6b:c8:ad:de:2d:f9:dd:2a:0c:66:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:91:41:B9:BE:D3:6F:AC:79:C6:59:87:15:6D:47:45:B8:92:C7
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e6:f6:57:10:8d:89:2a:15:2a:1e:f0:2c:20:12:35:7e:d9:
f8:b7:e8:e8:19:b7:99:2f:67:c1:2b:c8:bb:19:fa:b2:31:54:
3b:af:a5:3a:bb:46:cc:1a:a9:c5:b8:28:70:51:48:86:4d:e1:
3e:2c:66:82:fd:8f:b4:45:19:26:88:73:ba:4f:77:98:43:94:
84:10:f5:8b:4d:0a:5f:f2:1e:01:bc:63:8b:a1:93:3b:b6:db:
46:e9:5a:16:7e:a2:b5:9e:7a:ed:d9:03:e2:c4:ad:37:bd:f3:
74:4b:0f:b2:59:03:5b:9f:15:5f:ee:b5:a8:5c:21:5a:f1:bd:
18:30:5c:f6:0c:e9:60:52:f7:8e:7e:a8:4c:84:07:65:dd:b3:
b0:d5:49:61:6c:60:af:39:21:4f:2e:91:88:0c:49:6f:0b:bb:
d2:b7:71:e4:48:11:64:9e:d9:5d:8e:74:0e:cb:13:ca:d5:fa:
c7:25:b0:f8:dc:6b:47:b0:e6:84:93:d0:dd:f2:e6:b9:05:af:
90:8f:a3:ae:8e:68:36:b0:39:e4:08:b3:96:6a:a2:0c:54:b8:
bc:b9:b9:8c:c2:af:f4:02:ba:2d:11:1b:45:e7:fc:3d:60:c3:
04:40:5a:d4:56:af:5d:a3:b6:ea:bb:8a:e8:4e:10:ed:68:a2:
27:a3:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:45:22 2026 by rpki-client