Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: zJ7+SRfdrs9OTv9FS8pzVThcUqfITq9+6Yz58w+R+tQ=
Subject key identifier: 44:AB:01:34:24:C9:5F:79:D1:C0:55:88:C2:55:41:FE:E0:E4:9C:F5
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019F9700B015CFADA7A6630E31F2E0DB82F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 195C
Signing time: Sat 25 Jul 2026 02:00:32 +0000
Manifest this update: Sat 25 Jul 2026 02:00:32 +0000
Manifest next update: Sun 26 Jul 2026 02:00:32 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: /OjfCy3aRLv0NLtw1NYyltoruc397bx1Cpp79I9YE4Y=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:00:b0:15:cf:ad:a7:a6:63:0e:31:f2:e0:db:82:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jul 25 02:00:32 2026 GMT
Not After : Jul 26 02:00:32 2026 GMT
Subject: CN=44ab013424c95f79d1c05588c25541fee0e49cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:f8:63:46:01:8d:4d:98:59:93:cf:36:a8:
3f:84:2f:aa:26:17:88:13:9c:2d:7f:af:cd:01:ae:
66:06:cb:6c:00:c4:46:8f:6c:2c:1c:8b:06:c3:e3:
73:f9:3a:6f:b6:74:3c:67:70:74:1f:c1:54:de:52:
02:14:6b:64:98:60:19:d1:a6:6e:c0:6d:02:a4:e8:
dd:16:f6:cb:8c:e6:c8:d4:11:36:97:2e:08:50:04:
38:3d:fb:f2:a8:15:3b:b6:76:31:99:27:f0:cd:3a:
6d:6e:7f:14:16:44:85:dd:bd:f2:d4:32:91:42:e0:
67:4d:8c:9f:a4:06:94:e7:d2:8e:df:90:b9:94:b0:
36:5b:4b:dd:9f:3d:4c:54:5c:17:1e:8b:2e:37:b5:
ea:44:57:42:50:49:ec:df:12:3c:80:73:bc:65:a3:
88:82:98:44:3f:35:38:f7:57:5e:cc:0d:79:7b:b0:
f6:60:16:01:d5:e5:b5:4c:97:9f:15:d7:9b:92:40:
95:3c:04:8c:9c:4a:be:7e:42:47:d3:13:a6:61:37:
00:fb:6a:9c:d4:b4:5c:b6:0c:3a:18:dc:ad:15:70:
f3:a1:fa:c6:ff:31:1a:73:cf:90:78:72:3f:1c:87:
ae:3d:86:77:49:c8:96:85:82:28:5a:68:41:42:fa:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:01:34:24:C9:5F:79:D1:C0:55:88:C2:55:41:FE:E0:E4:9C:F5
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:99:9b:34:0d:0c:4d:67:8f:58:9a:d4:0d:d8:93:74:6d:f7:
1d:a2:e7:bf:c5:03:6f:28:7d:db:30:cf:aa:9e:44:71:d2:e7:
db:97:d2:38:c9:b1:55:a7:a9:23:6b:83:df:d9:bb:ad:b7:24:
0d:a9:2a:35:d4:dc:27:eb:0d:1a:15:e7:03:f5:9f:96:f5:6f:
f6:35:7a:4f:7c:c9:c9:98:de:82:ed:53:10:d2:f9:c6:a4:e4:
cc:f1:20:6c:96:f6:35:a7:c7:5d:ef:a9:22:a3:e6:9f:08:92:
39:70:03:b9:9c:43:57:89:d2:b7:45:90:57:d9:2a:18:25:b6:
e2:44:e6:16:b1:18:f0:3f:15:6e:71:9b:c8:49:79:76:f7:ee:
5c:29:2d:ec:35:2d:0d:fb:b9:7e:d6:16:96:96:dd:c4:5d:92:
0a:72:63:18:96:fe:ce:f5:68:f7:d9:0a:16:7d:4d:92:09:04:
76:20:3b:3e:99:eb:55:b1:7a:9b:19:56:af:f7:2f:14:04:54:
3d:73:e5:70:60:e9:4a:dc:4a:15:1d:f5:20:e0:be:d2:dd:36:
cf:d0:26:7e:ac:1c:35:2b:11:4d:a1:b9:37:bb:b3:20:46:e4:
ab:82:0c:af:6d:9c:8e:b7:c4:d2:18:b1:36:91:5b:e3:15:d3:
d0:cd:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 11:43:11 2026 by rpki-client