Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: aLBZ6vkDQkSnEL03ajyDxYhSHwJJJav7F/NSg8de/P0=
Subject key identifier: 63:58:F2:59:6C:FB:10:19:EB:D2:6D:0B:38:37:98:1D:F6:23:FB:7E
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019F97007EA42A10150AC4637B71D2C5F986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 19E7
Signing time: Sat 25 Jul 2026 02:00:19 +0000
Manifest this update: Sat 25 Jul 2026 02:00:19 +0000
Manifest next update: Sun 26 Jul 2026 02:00:19 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: gosVcbCyDyALBF/7fjR35kY0+670eAeShd/JwJKjvcQ=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:00:7e:a4:2a:10:15:0a:c4:63:7b:71:d2:c5:f9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 25 02:00:19 2026 GMT
Not After : Jul 26 02:00:19 2026 GMT
Subject: CN=6358f2596cfb1019ebd26d0b3837981df623fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:dd:6d:40:19:aa:67:2d:58:d0:75:30:df:
6b:90:31:26:5b:60:df:e5:97:7c:82:da:64:6a:21:
f3:e3:9b:32:25:53:87:96:90:72:52:d2:44:9e:59:
04:40:42:e0:37:cb:9d:92:7a:46:12:cf:70:7e:01:
0c:7c:43:8c:5c:58:69:c7:fd:aa:c1:6c:47:b9:b2:
43:98:ee:d0:ef:9a:c8:b5:de:e1:7e:2d:51:92:02:
d0:79:09:46:a2:12:a4:3a:4d:7f:9b:6f:1f:0a:60:
2f:d8:fe:ca:eb:c7:c8:76:8d:ac:a5:77:99:83:3d:
05:38:3f:2c:04:9d:5d:ab:3a:d4:f3:68:27:4c:71:
51:00:45:bd:a7:16:63:f9:ee:99:e9:e1:6a:98:ae:
de:b4:d5:b6:b2:9f:92:a7:cd:91:f8:de:33:f5:e8:
26:93:f8:b4:c5:c0:c6:b2:d8:73:c4:c6:41:63:be:
73:da:7e:32:6d:ba:e3:86:94:01:89:58:2b:fa:0f:
e2:60:ea:4c:dd:76:fb:d0:e4:f6:0d:dd:7c:6a:7a:
15:8f:f6:e3:35:10:7a:50:c7:dc:d5:e0:61:97:dc:
0f:19:32:0e:0e:6c:44:20:38:d2:cf:c3:93:f1:3d:
55:e3:2e:5a:e9:b0:0b:6c:27:e0:8f:02:91:1f:ba:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:58:F2:59:6C:FB:10:19:EB:D2:6D:0B:38:37:98:1D:F6:23:FB:7E
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:f3:d6:a3:55:6d:bd:4a:5a:c5:16:4f:98:09:84:f8:44:
b9:af:3e:11:48:f1:d8:3f:03:f3:9f:e6:6f:0d:13:52:7c:9a:
10:86:b3:bd:63:ef:de:eb:5c:22:e9:79:48:1e:73:42:fd:d1:
6e:cd:ed:2a:50:5e:75:e7:cd:6f:80:d4:2a:3d:a3:2d:83:20:
fc:34:0f:4b:92:17:b3:ca:b3:f8:69:8d:3a:75:b7:34:0e:b9:
46:c2:f8:95:ff:c4:db:2e:e3:1c:d5:bb:68:95:02:84:f8:ba:
be:b4:c5:e0:ff:28:52:69:eb:f1:6d:98:d1:ed:ad:3e:6b:b7:
2d:f7:b3:f4:85:18:92:92:00:08:f9:ad:51:fe:69:35:44:a5:
ef:53:2b:f6:a1:1e:e2:34:fb:51:25:28:8c:79:6e:d8:06:25:
e5:ac:28:c6:6d:fb:82:12:6c:14:0f:e2:88:33:38:ca:17:b0:
ae:f6:51:a4:79:03:ca:6a:f5:06:8e:83:46:85:98:c0:72:fb:
f4:0c:d4:a6:12:ff:ca:7a:74:1f:ce:e4:7f:c0:ed:39:4d:af:
90:a0:54:ae:02:0f:13:84:9c:97:9b:aa:ee:f7:d5:06:37:3c:
c8:2f:e4:93:62:e5:42:97:f1:a3:4c:b5:05:ce:28:cb:38:c7:
37:2c:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:54:31 2026 by rpki-client