Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: TqLs5Vtnf4ZYhHmBtlJKs2PeWNRlzkgiOo2nlbNcQNA=
Subject key identifier: 55:50:AF:17:94:5F:2E:B9:24:60:35:2B:BB:8B:49:FF:94:DD:D3:6E
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019FA3E1141D1DCEF4AF5DD29FFEAEBDC5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 14CC
Signing time: Mon 27 Jul 2026 14:01:04 +0000
Manifest this update: Mon 27 Jul 2026 14:01:04 +0000
Manifest next update: Tue 28 Jul 2026 14:01:04 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: 8K4j6flI8cIH+pIsAzmwcZHovyXAmNN/Xf8nq29+yRo=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:14:1d:1d:ce:f4:af:5d:d2:9f:fe:ae:bd:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jul 27 14:01:04 2026 GMT
Not After : Jul 28 14:01:04 2026 GMT
Subject: CN=5550af17945f2eb92460352bbb8b49ff94ddd36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:64:53:13:4e:5a:0d:80:d4:02:82:7e:92:
ca:ae:38:55:f8:6a:6c:c1:fd:79:d6:e5:b5:9d:90:
0e:47:95:ff:34:cf:f2:35:80:f6:d3:33:e8:ad:12:
01:24:f5:dd:e5:3c:6f:cd:4c:35:5d:3b:fe:90:54:
82:9f:60:62:cc:ce:22:91:e3:e3:eb:73:5b:35:fc:
6b:0f:ed:d9:d8:e1:29:d4:ac:d5:9a:c8:02:71:88:
4f:2a:3b:fe:b0:06:bf:03:55:91:a3:1c:60:22:86:
8e:08:ef:91:28:c1:a4:ea:e9:62:ec:56:e6:d0:90:
5e:a7:51:f7:be:b2:80:42:b7:de:bb:f6:aa:fd:db:
85:be:3d:eb:9e:d6:28:da:92:ae:e9:15:99:67:ec:
f3:a1:27:71:d9:3e:d7:2c:d2:d3:93:1d:a2:f5:cc:
32:90:72:b5:a6:e3:ee:fc:56:63:19:b3:31:ad:9e:
11:f1:76:e0:ca:a9:fc:95:67:bb:5e:bc:6b:08:6e:
b4:cf:f3:44:dc:2f:6d:6f:74:d9:bb:0c:12:f2:a6:
24:c0:a4:4f:c2:b0:49:72:8d:b1:3b:f7:38:2c:40:
a6:95:05:b2:63:5f:04:29:35:b3:29:25:e9:70:90:
7c:55:20:72:bd:17:b8:9a:b1:50:8e:93:9a:c7:ba:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:50:AF:17:94:5F:2E:B9:24:60:35:2B:BB:8B:49:FF:94:DD:D3:6E
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:99:65:12:28:8f:92:f0:be:32:a7:6f:a9:3c:a8:69:d5:
96:22:20:e3:17:fd:90:be:7f:aa:88:ff:a3:96:95:bd:70:97:
77:53:34:8d:64:14:61:bb:4f:f8:42:d5:7d:b9:17:ec:f2:69:
d3:fa:f6:f0:04:4a:39:d6:9a:47:0b:2d:6c:fb:15:83:d7:75:
50:33:58:fe:91:bd:d0:41:9e:69:1e:4e:b4:62:37:61:94:34:
09:2a:de:3b:0f:fd:d1:70:5e:49:b3:d3:27:b8:34:75:c3:70:
64:e3:06:6d:10:da:10:55:a6:ab:0b:2f:40:c0:6a:04:9b:49:
05:54:16:44:14:ee:62:95:8e:13:6a:66:48:76:8d:ef:34:e5:
72:c4:64:d3:a2:02:88:07:65:cf:84:ea:9e:6a:8e:88:38:8f:
cd:a8:4a:2e:a7:b4:1b:c3:a6:82:49:49:c0:fc:6f:a3:8c:80:
c2:86:42:e0:79:8a:e7:cb:aa:51:b6:d0:97:f3:2e:9e:e5:55:
2d:46:97:93:f1:aa:94:66:4d:cf:43:52:25:e2:f9:f3:0d:22:
5b:af:f6:b6:35:06:1a:af:47:8a:08:b5:8a:78:ad:98:0a:a7:
a4:60:c9:08:34:94:ac:3e:c0:b0:aa:d8:86:f4:54:85:f7:43:
2d:0d:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:20 2026 by rpki-client