Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: s+G88keMCUhUZiOk8nSb7e2olBsj64Pveh6o5yP48UQ=
Subject key identifier: 71:7A:C1:11:A2:D5:C5:CF:A6:8C:33:B8:94:1C:6F:5F:8B:0C:25:29
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019FA1F2DDD6A38F49139A4BE06108BE8710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 05:01:15 +0000
Manifest this update: Mon 27 Jul 2026 05:01:15 +0000
Manifest next update: Tue 28 Jul 2026 05:01:15 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: WGwPNZIwG8IiGbmahw6wrXGMw1aQCvTDJReaUL0QdPA=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:dd:d6:a3:8f:49:13:9a:4b:e0:61:08:be:87:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 27 05:01:15 2026 GMT
Not After : Jul 28 05:01:15 2026 GMT
Subject: CN=717ac111a2d5c5cfa68c33b8941c6f5f8b0c2529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:be:bf:77:2d:40:26:20:c9:14:a8:d7:cb:
4c:cd:53:94:a7:47:ad:6c:57:4d:4b:62:0f:a7:6a:
e2:cd:e3:fe:fd:07:5a:bf:7d:87:fc:42:c3:f4:0b:
00:6c:e2:56:63:fd:d5:22:34:6e:69:2e:66:a6:84:
b0:e7:af:30:92:1a:5e:7c:f3:55:41:fc:b0:7d:5c:
83:54:11:30:55:56:97:d9:b8:82:2c:c6:0a:2a:d3:
62:9c:df:48:9e:65:38:1a:85:64:94:5e:96:ce:e1:
6d:d5:c5:eb:3d:0d:99:2d:e9:ef:4f:5a:9d:2c:f6:
23:95:3a:6f:c5:14:d1:cd:20:e8:7c:87:27:64:3c:
32:dd:92:76:72:51:42:40:18:bf:ce:3b:66:0f:a2:
e3:f9:65:6e:7a:b6:e4:8d:ae:e3:21:d8:0f:0c:99:
a8:54:3a:22:61:cc:1f:14:dc:dd:41:84:b5:ba:1f:
f9:ec:b2:f0:af:51:8f:b0:d3:a9:bc:52:d0:01:80:
53:76:3a:43:8d:cb:a1:4b:63:ee:5e:29:cc:10:e6:
86:57:37:81:e1:75:fc:6f:e2:38:c6:53:7a:5c:01:
25:83:37:60:c1:d7:6d:80:40:b0:28:aa:b1:01:a7:
86:44:b8:48:bd:47:21:c0:dd:2f:30:5c:a4:ed:1a:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:C1:11:A2:D5:C5:CF:A6:8C:33:B8:94:1C:6F:5F:8B:0C:25:29
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9b:f5:61:7b:02:84:3c:9b:8a:26:84:df:de:83:17:c6:f5:
e1:8c:8e:d6:63:39:77:a0:ba:19:d5:1e:f1:d9:45:2b:49:d2:
fb:79:d2:fc:7e:e6:d9:93:c1:ec:46:fa:dc:65:c8:95:38:7e:
68:91:2a:6c:55:4b:57:87:fc:4b:62:40:ba:4a:31:ad:05:8e:
1c:b1:f0:ec:76:3c:ea:80:d0:53:2c:45:5a:98:c2:fc:dd:13:
12:8e:e3:91:82:f4:d3:c2:2c:75:8a:df:a0:07:aa:75:04:24:
36:97:02:2d:2f:19:86:21:98:a7:72:9e:a4:03:3e:56:70:bc:
e1:97:5e:74:ca:7f:55:e9:99:6e:22:4e:0e:8d:4c:81:15:82:
35:6f:51:2e:50:f1:a1:4d:d8:aa:bb:ed:fd:3e:be:49:76:1d:
4f:88:5d:0d:f2:c9:7a:67:24:15:20:90:16:29:24:69:21:8c:
ec:b0:80:1e:08:8e:8a:d0:1e:28:db:79:b6:c4:ae:a6:12:46:
61:72:52:a7:9f:46:3b:1c:5e:07:53:af:ce:1a:86:46:9e:c5:
50:58:87:c3:8a:d7:dc:21:1b:9e:47:37:8c:c4:91:38:f4:18:
4e:18:99:6c:5f:62:9a:80:b7:cd:00:c4:bb:ad:b5:83:e2:fa:
14:05:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:25 2026 by rpki-client