Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: Hv6SoPbvN0aRO2wOePoSncgUVmM68dBt841Zipux/2A=
Subject key identifier: 45:5F:B7:C9:2F:9C:3D:7B:5B:C1:A5:47:FB:26:CD:C2:04:04:22:0D
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019FA1F26E8252E39BEC037CA3F41EAC91E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 14CB
Signing time: Mon 27 Jul 2026 05:00:47 +0000
Manifest this update: Mon 27 Jul 2026 05:00:47 +0000
Manifest next update: Tue 28 Jul 2026 05:00:47 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: mYq8u0xGDlOLYuUG7xrGMOA9lX7c4Dq1ZWy/ZDYOgU0=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:6e:82:52:e3:9b:ec:03:7c:a3:f4:1e:ac:91:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jul 27 05:00:47 2026 GMT
Not After : Jul 28 05:00:47 2026 GMT
Subject: CN=455fb7c92f9c3d7b5bc1a547fb26cdc20404220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:68:6f:88:d3:72:9c:42:45:2b:40:0e:9b:
1c:6f:0f:03:6f:6d:36:fb:29:b3:b4:a2:ee:d5:11:
b8:bf:91:e2:84:17:5a:9a:71:be:60:80:0b:fc:db:
17:75:41:04:ab:77:4d:bd:b1:f6:27:42:e8:22:05:
61:63:0b:cc:bf:3b:fc:68:20:5d:07:3b:c3:10:18:
60:0a:cf:7a:28:31:92:45:41:7f:70:0a:d4:b7:75:
e2:b6:0e:9b:ca:72:d5:fc:c1:86:82:5c:2a:bd:68:
9a:59:c3:08:f2:d8:5a:57:65:3a:6f:5a:46:b9:3f:
2d:8a:06:3a:cd:ed:ba:e8:23:09:ee:d0:c7:c2:30:
2e:11:54:7f:96:1b:64:78:d5:de:9f:bc:27:d3:67:
44:6e:78:47:77:0d:bd:52:36:67:be:d2:d5:74:79:
b5:87:c4:1c:b6:9b:db:c4:b1:5e:00:82:4c:b5:79:
b8:d3:82:74:87:de:08:bf:44:01:95:2f:3f:54:c5:
d6:7e:56:0c:91:36:09:86:0b:1e:94:44:34:13:f0:
55:51:2a:f0:e4:73:bc:85:ea:a4:d6:61:cf:d1:cc:
1d:b2:7b:9c:f2:d2:a9:3e:42:2b:c6:fb:20:58:b2:
8a:3b:7b:a3:86:ee:07:8e:2a:04:1a:7a:e3:5f:c7:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5F:B7:C9:2F:9C:3D:7B:5B:C1:A5:47:FB:26:CD:C2:04:04:22:0D
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:08:46:8a:42:ed:02:ba:77:62:6b:48:75:43:80:49:fc:
2f:ee:9a:30:46:35:d3:26:c0:d5:7a:06:12:55:e6:0c:eb:2b:
e6:90:aa:f2:c9:5d:6a:0c:95:c6:76:33:b0:a2:e3:34:27:7c:
44:21:bc:b0:87:38:ee:05:c7:d9:4c:c5:1f:81:55:9f:8f:0a:
9a:8a:bb:91:b9:a8:8e:a8:62:ea:98:7c:79:af:61:f7:1e:f9:
7f:ab:05:15:69:53:15:48:f5:52:9b:96:b0:45:20:d7:b9:a7:
cf:5f:26:23:ec:06:c4:53:7a:b9:79:a6:b3:d2:69:d4:4d:7c:
82:e7:3e:3f:a2:0e:af:eb:15:97:a3:b2:c8:8a:3a:18:5c:ee:
26:39:a4:34:eb:61:6a:52:0c:62:20:9d:4d:9e:bc:d9:0d:be:
10:08:b9:dc:80:7c:08:6c:b5:82:57:b8:90:cb:02:f8:e0:10:
97:21:50:ac:39:b0:43:11:1c:9d:b7:4b:a1:3d:eb:6d:df:21:
8e:db:39:d1:ec:e2:ba:b1:4d:e0:9c:4f:8d:38:2e:7b:d0:2e:
f4:64:be:b6:62:04:b8:42:ee:7e:5b:1b:3a:72:10:87:2d:cc:
0c:cd:9a:5c:5d:6d:2b:3c:48:12:f9:23:01:bb:46:ca:be:11:
06:51:ea:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8m6CUuOb7AN8o/QerJHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjYwNzI3MDUwMDQ3WhcNMjYwNzI4MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg0NTVmYjdjOTJmOWMzZDdiNWJjMWE1NDdmYjI2Y2RjMjA0MDQyMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcRob4jTcpxCRStADpscbw8Db202
+ymztKLu1RG4v5HihBdamnG+YIAL/NsXdUEEq3dNvbH2J0LoIgVhYwvMvzv8aCBd
BzvDEBhgCs96KDGSRUF/cArUt3Xitg6bynLV/MGGglwqvWiaWcMI8thaV2U6b1pG
uT8tigY6ze266CMJ7tDHwjAuEVR/lhtkeNXen7wn02dEbnhHdw29UjZnvtLVdHm1
h8QctpvbxLFeAIJMtXm404J0h94Iv0QBlS8/VMXWflYMkTYJhgselEQ0E/BVUSrw
5HO8heqk1mHP0cwdsnuc8tKpPkIrxvsgWLKKO3ujhu4HjioEGnrjX8cVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVft8kvnD17W8GlR/smzcIEBCINMB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf4IRopC
7QK6d2JrSHVDgEn8L+6aMEY10ybA1XoGElXmDOsr5pCq8sldagyVxnYzsKLjNCd8
RCG8sIc47gXH2UzFH4FVn48Kmoq7kbmojqhi6ph8ea9h9x75f6sFFWlTFUj1UpuW
sEUg17mnz18mI+wGxFN6uXmms9Jp1E18guc+P6IOr+sVl6OyyIo6GFzuJjmkNOth
alIMYiCdTZ682Q2+EAi53IB8CGy1gle4kMsC+OAQlyFQrDmwQxEcnbdLoT3rbd8h
jts50eziurFN4JxPjTgue9Au9GS+tmIEuELuflsbOnIQhy3MDM2aXF1tKzxIEvkj
AbtGyr4RBlHq5g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:03 2026 by rpki-client