Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: VGXdWvy8x8+KejCUzK+ZY2KMRL9g+QqZSXXAnLRrLHs=
Subject key identifier: 9C:36:48:28:8E:4C:1C:71:20:A9:D1:C5:A0:D1:9C:8F:A2:94:F1:94
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019FA3056D0F53F58DC7BB32CC8C3C2C5D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0221
Signing time: Mon 27 Jul 2026 10:01:09 +0000
Manifest this update: Mon 27 Jul 2026 10:01:09 +0000
Manifest next update: Tue 28 Jul 2026 10:01:09 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: LaOvT+sT0os1ePZiUyKg7QjPP5o7BV+O+O49sOPCt8U=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:6d:0f:53:f5:8d:c7:bb:32:cc:8c:3c:2c:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jul 27 10:01:09 2026 GMT
Not After : Jul 28 10:01:09 2026 GMT
Subject: CN=9c3648288e4c1c7120a9d1c5a0d19c8fa294f194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:56:4c:d5:b7:db:01:db:40:f0:a1:06:69:
b7:30:b3:c4:11:74:d0:75:7c:18:df:87:6e:e9:03:
8d:d3:c3:d7:b4:20:80:8d:a1:43:46:4c:59:81:15:
6a:68:59:5f:3b:ea:42:6c:44:e9:a7:07:6d:a9:47:
a4:c3:72:55:0c:17:5e:11:5c:de:84:bf:aa:cf:d7:
cf:06:4d:9b:6d:5d:68:67:b8:5d:58:0f:65:1c:c1:
7a:44:b5:5b:a2:d8:31:eb:c4:7a:17:84:29:2c:2f:
fa:64:96:9b:ee:a4:3e:36:41:db:ef:82:e9:84:fb:
1e:c8:5e:b6:93:d6:b1:a7:a4:42:24:c9:0e:31:f3:
de:d3:65:b3:a1:dc:26:1f:56:5b:f0:eb:e2:5f:77:
1d:7e:68:b9:c3:67:3a:dd:e0:40:d7:cb:29:01:ea:
65:e0:f0:6c:c6:be:df:50:4d:f5:ec:e7:47:2c:35:
72:ad:ca:f8:1b:33:97:c2:52:d3:37:9c:bc:42:10:
b8:73:96:b0:3e:d7:93:dc:1b:bf:63:de:15:3d:03:
26:6a:aa:56:aa:46:7e:30:aa:f0:50:d4:bd:81:2e:
4f:4c:1e:98:b7:ce:34:69:57:38:7d:67:f3:51:1a:
36:d5:b5:7f:32:95:a1:fb:1e:e7:eb:b9:10:53:70:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:48:28:8E:4C:1C:71:20:A9:D1:C5:A0:D1:9C:8F:A2:94:F1:94
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:0a:0f:6f:73:0f:b9:fd:d4:c2:7f:1b:6d:ab:bf:6e:c0:
f2:1d:d8:a5:b1:77:9f:20:b4:de:e3:d7:bf:92:21:4a:bb:89:
96:6d:17:50:48:8e:10:dc:9a:3c:7c:ea:93:5d:70:ae:7b:39:
83:58:c6:47:44:d4:8c:f0:14:a6:48:bd:fb:bb:8b:26:e4:d2:
c5:6d:a5:ef:4d:f9:58:79:5d:14:39:c9:7d:44:54:42:a7:42:
61:d3:63:85:8b:cc:5d:d1:01:9c:1d:ab:90:88:f9:c2:11:bf:
cf:fe:12:68:be:2b:ae:94:9b:62:08:30:79:7a:7a:c1:28:d8:
b5:0e:4d:bd:c6:31:e6:93:02:62:80:ba:36:c1:8e:65:29:d9:
6f:4e:85:25:70:ba:51:9b:b8:ed:21:42:de:5a:5e:8d:73:54:
43:b5:2d:bd:e6:03:56:f7:94:0a:25:e9:3d:f4:88:f4:7e:f4:
02:b1:7f:d7:cc:7c:f0:df:62:80:d2:2a:a2:6f:bd:d6:b7:7d:
75:22:2d:54:21:d2:39:d9:a7:08:21:aa:56:48:90:ab:69:f4:
7f:e2:40:0e:99:fd:ad:14:e8:a2:6a:eb:53:ee:7f:ab:17:29:
5f:9c:69:a8:e3:da:8d:cf:bb:ea:cf:33:f3:a1:c9:50:84:ca:
3c:c8:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:12 2026 by rpki-client