Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
File: NLMfafzU7VExoTlBfOtyA1c7dHs.mft (raw, json)
Hash identifier: lzoeZ+lyoUUepnYYuALsFrSjQxUH/uiIV4Uu8y9JXbc=
Subject key identifier: 13:2E:A1:EC:C6:20:AB:83:36:85:CB:EB:F3:CE:FE:97:56:18:C9:CB
Authority key identifier: 34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
Certificate issuer: /CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Certificate serial: 01A0016F714F0FA5E65136B785738F97C31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:15 +0000
Manifest this update: Fri 14 Aug 2026 18:01:15 +0000
Manifest next update: Sat 15 Aug 2026 18:01:15 +0000
Files and hashes: 1: J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa (hash: zkDVkJoPYShr6OXV8fPBb2NBPcUAp8SMVnGkrnquQLQ=)
2: KxVm34lNwlkrW5qrAU5Pjsony_E.roa (hash: Cv1CrCyZqmGqKdKvIPVNc1SNxI2ozAn85+sLNV8uOnE=)
3: NLMfafzU7VExoTlBfOtyA1c7dHs.crl (hash: s8F3U6/YOkgo2IOA3cBvV8TuyPgvFXDRyThO+LjCL3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:71:4f:0f:a5:e6:51:36:b7:85:73:8f:97:c3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Validity
Not Before: Aug 14 18:01:15 2026 GMT
Not After : Aug 15 18:01:15 2026 GMT
Subject: CN=132ea1ecc620ab833685cbebf3cefe975618c9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:c0:5c:a3:32:ca:ae:d1:55:41:58:86:cd:
72:17:9b:c3:83:0c:6d:32:69:11:51:ea:29:65:27:
6c:28:c9:06:d1:72:18:ad:6c:3e:e9:22:67:27:05:
0b:6a:d2:f6:5d:8b:5b:06:3f:e7:59:49:b2:58:c4:
b7:fe:34:63:ce:4d:44:ef:f7:01:01:87:4c:64:e9:
80:ae:91:bc:29:8c:62:61:09:55:2b:00:b6:b3:9e:
8f:01:13:e8:af:bc:42:8c:f9:dc:2d:71:58:4e:49:
b7:0e:98:44:43:31:e5:71:d3:5f:18:77:82:63:82:
76:f1:79:46:e2:58:82:c7:6e:a6:e6:5f:c6:39:a8:
15:c3:ef:b5:32:76:cd:2b:96:77:c3:0c:bd:b1:97:
b9:ab:a2:4f:20:34:5f:03:49:a0:7d:5b:d3:45:fc:
6f:a2:a9:a9:f7:cc:88:5f:6a:ea:7e:dc:b1:fd:b2:
24:35:e2:25:5f:3b:a1:52:90:5b:bc:50:f5:4c:44:
75:bf:85:89:60:bb:0d:c9:94:e4:74:4a:b2:ad:17:
b8:a8:39:70:a1:f1:84:a9:94:6e:c1:c5:64:87:a8:
0d:39:b9:32:d9:fc:ae:44:52:e5:10:7c:fe:a6:00:
2a:94:1a:5b:90:bb:b0:12:3e:f1:87:d3:cd:81:ec:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:A1:EC:C6:20:AB:83:36:85:CB:EB:F3:CE:FE:97:56:18:C9:CB
X509v3 Authority Key Identifier:
keyid:34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c9:0d:8a:f3:40:9a:54:52:b9:59:a9:41:e7:1b:8b:aa:a4:
3f:50:60:e5:f6:a1:24:ce:df:ec:e4:03:9a:0f:45:e3:36:c7:
63:6f:0d:7e:47:78:61:57:c7:dc:6b:95:d0:85:b2:af:84:df:
20:6a:5f:df:31:a0:24:7d:0a:da:4a:2e:07:5c:1f:03:dd:99:
8a:14:67:e3:b4:27:e8:c0:2f:fc:ca:dc:d7:88:5e:cf:bb:41:
37:1f:c4:09:d7:2e:12:8f:e9:05:da:19:d3:69:90:4c:42:ee:
81:b1:9e:74:6f:1f:ab:ed:76:d2:52:ad:cf:c4:7c:a1:00:95:
68:09:c0:3d:8a:b0:3d:d9:a9:c8:16:b2:5f:57:b0:9f:3f:41:
52:a3:b6:a4:82:8a:30:75:c2:96:5e:a2:42:03:47:97:cc:a2:
8f:47:3c:6d:65:52:6a:16:b8:9a:25:07:35:e7:5b:50:48:32:
22:c9:d0:8f:23:f2:48:d1:4d:8f:27:72:c3:40:46:02:8e:c7:
af:84:4e:4c:7f:4c:df:2d:8b:ce:a1:88:d8:73:7b:14:ad:c6:
e1:92:42:08:d3:e3:9d:54:b7:9d:6d:9f:15:c2:43:f9:10:88:
98:c7:64:e5:7b:42:0c:7b:62:85:62:b9:4d:e9:d4:54:78:da:
4c:00:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:01 2026 by rpki-client