Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: 0W08TiGzPXzbOlREg/fWBWaelZywLnVwV8VtSBC/Hgw=
Subject key identifier: 2D:8F:40:B2:35:ED:5F:95:7D:29:25:30:2E:F2:89:11:C8:AB:35:0A
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019FA00439085303727BBB7AB2F2AFD71D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 20:00:58 +0000
Manifest this update: Sun 26 Jul 2026 20:00:58 +0000
Manifest next update: Mon 27 Jul 2026 20:00:58 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: vfkrMEP1gqC0fcCRzgIACpMFn27NFfAYV8eAcjwXnNA=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:39:08:53:03:72:7b:bb:7a:b2:f2:af:d7:1d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 26 20:00:58 2026 GMT
Not After : Jul 27 20:00:58 2026 GMT
Subject: CN=2d8f40b235ed5f957d2925302ef28911c8ab350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:33:66:ab:cc:2d:6a:fb:d5:e4:e4:41:41:
95:65:ab:ee:05:2d:7e:ea:9a:f4:ac:ed:0e:4a:1f:
a2:13:a6:e6:8e:8f:72:2a:2c:57:d2:c3:e2:73:f4:
95:78:4d:3f:d6:b2:ac:78:b5:09:e2:ee:4a:43:d5:
6a:b8:a9:6f:76:a9:33:3d:cb:00:0a:e2:2c:cc:c6:
1d:99:e9:40:e1:ff:08:09:e4:7a:c6:0d:54:ea:3c:
b3:c7:c0:3c:b4:7d:52:ae:bb:a5:71:62:6d:48:f2:
ac:20:e6:e0:85:c8:b0:f4:7a:93:34:96:8e:9f:4a:
42:4b:86:85:9e:5d:55:13:87:ed:f6:57:c7:fa:2b:
de:77:86:0d:28:b3:8d:22:f7:93:ae:6d:3a:8a:9c:
12:fa:f3:e2:0b:b2:45:7d:a1:49:bb:c6:bc:c5:d3:
db:3b:75:4d:a4:aa:1b:ca:3e:4e:49:f5:30:8f:05:
44:5d:85:7a:9a:5c:8e:4a:94:23:00:9f:90:20:02:
d9:c0:ee:a4:d0:2e:bb:0f:e2:f1:56:8d:24:96:71:
44:09:37:34:fd:73:3b:dc:40:4f:47:c8:3b:76:f4:
c6:76:44:e3:14:c5:9c:a1:ee:3c:74:c0:7c:68:c8:
93:ef:06:72:54:40:95:4b:f7:0b:37:e4:c7:5b:9c:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:40:B2:35:ED:5F:95:7D:29:25:30:2E:F2:89:11:C8:AB:35:0A
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:15:61:a2:1b:40:ce:7e:b3:38:09:fa:9d:83:6b:8b:b9:a8:
e2:7f:27:d3:b1:c7:90:c0:63:e1:aa:41:aa:41:4f:c3:b8:89:
70:6d:56:35:fa:e1:24:87:a7:31:1c:15:5a:6a:69:51:61:d6:
a4:40:fe:58:74:32:5a:cd:40:64:f5:2a:0f:1f:d6:eb:dc:c7:
57:3d:fd:8d:04:2f:70:2b:46:2a:54:ed:44:f2:25:df:12:79:
25:37:84:35:b8:ab:92:61:78:4e:21:85:e4:ff:d7:de:b0:a5:
02:8e:03:16:59:af:13:99:62:e2:7b:1c:8a:92:de:26:24:6d:
ae:f8:9c:f0:11:19:74:3f:57:77:a2:df:a5:ea:32:fc:5a:0f:
7a:31:c3:d0:57:b8:e3:76:ba:d3:46:cc:08:8b:af:42:bd:41:
0a:7f:44:1c:52:6c:4e:71:22:5e:4f:76:4e:f0:2f:c9:a8:eb:
ec:40:c2:71:f3:87:e4:59:1d:21:e4:b0:00:f9:6d:8a:10:42:
0d:31:1b:7c:a5:81:16:ad:8a:c8:35:41:65:62:9a:46:7d:34:
83:53:08:05:2a:22:3b:cb:ac:6a:ac:cf:96:6b:8a:f3:28:0f:
c8:f2:db:9a:6e:99:0e:57:5e:cd:66:a5:63:dc:79:57:9e:f4:
92:af:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:51 2026 by rpki-client