Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: d38thVc5oGW63GsHf2g68AB2ZybsZc7IoHza96xAkeM=
Subject key identifier: 2A:0C:E4:CC:14:ED:87:50:62:AC:47:26:AB:44:60:5A:FE:B7:07:D1
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019FA116591AD5B8304261CBD669331E4810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 01:00:24 +0000
Manifest this update: Mon 27 Jul 2026 01:00:24 +0000
Manifest next update: Tue 28 Jul 2026 01:00:24 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: TxaLwp/6RpNoRD2STiQo/zRaK8IrhpZOvrpVwvwTm3M=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:59:1a:d5:b8:30:42:61:cb:d6:69:33:1e:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jul 27 01:00:24 2026 GMT
Not After : Jul 28 01:00:24 2026 GMT
Subject: CN=2a0ce4cc14ed875062ac4726ab44605afeb707d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:b4:0b:9b:9e:10:fb:67:a2:bb:9e:b8:47:
12:80:54:f9:d3:d8:6b:0a:29:40:ba:e0:ab:11:0b:
07:25:40:91:48:ad:f9:d9:f0:87:23:89:29:12:76:
e8:b7:7a:d3:e0:6f:94:fa:96:a5:6a:95:bd:0a:ca:
58:a9:0a:b8:fe:2c:80:a0:23:2a:54:84:2d:f4:d8:
99:e3:30:0f:14:2f:81:33:c7:98:05:c2:9c:17:28:
d6:dc:53:0d:88:3c:e3:21:19:64:8e:08:cf:c4:3d:
27:f3:37:fd:5b:0a:d8:26:aa:d5:3d:c8:49:de:a5:
31:37:97:b5:6c:75:e2:e8:02:e8:e8:61:70:0a:84:
d3:56:b4:a4:8c:39:9e:c2:dd:b3:91:b0:a3:fe:79:
cb:37:4b:fb:3a:c5:ec:4d:ff:62:13:11:5d:b6:a9:
c7:1f:9e:9f:d8:d1:51:92:7c:bb:78:9a:c5:a2:c3:
9c:86:95:6f:63:12:48:7e:68:ce:76:dc:d3:b8:0f:
52:09:b2:5f:c5:1f:57:39:c6:40:3e:74:c5:79:01:
b4:bb:3a:11:a5:69:8c:e3:35:89:10:a2:91:d8:81:
79:7e:09:6b:dc:e3:e5:3b:e6:76:ae:a9:fc:a5:5c:
70:0b:2c:6e:70:5b:4d:6b:c5:ff:0c:29:3e:7f:2c:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:E4:CC:14:ED:87:50:62:AC:47:26:AB:44:60:5A:FE:B7:07:D1
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b7:31:10:0a:e2:58:f5:23:cc:d6:6b:b4:bc:21:ee:35:3f:
9e:2f:c9:b9:b6:ef:42:27:35:8a:b1:1a:b7:1f:75:dc:7a:3c:
5c:70:28:c6:dc:64:38:46:2e:5c:83:bc:42:c5:b9:ca:7b:d2:
c1:65:97:ad:8e:e9:dc:0f:47:6b:90:c6:c1:7d:cd:11:75:58:
ab:8a:78:35:fe:6d:4c:62:6e:00:c6:3b:1f:45:54:d4:d3:e0:
bc:0b:e0:68:cb:1f:1e:69:c5:40:08:07:f7:8a:52:dd:f7:64:
9a:d1:43:76:1b:b0:3b:b9:06:e3:ac:68:5b:f0:fc:0b:81:f6:
a2:c3:10:a7:b3:7b:8f:d0:3f:78:af:84:7f:ee:11:2e:6a:32:
a8:5f:bb:73:db:9c:e2:db:6e:25:e5:54:e0:27:76:9d:43:be:
15:b4:61:53:d7:df:a4:2b:6d:b3:44:9d:f3:1a:f3:02:0b:96:
c4:5e:db:09:fc:c0:00:df:d7:b9:78:ea:3c:3b:9c:22:95:04:
20:53:fa:dd:2a:da:b1:60:67:d4:6f:b0:95:07:d5:b7:43:48:
a7:15:34:ce:a3:7a:10:97:bd:90:24:97:dc:ee:7d:6f:1e:e4:
0f:0f:43:54:5d:45:91:53:3c:ad:52:e1:63:60:c7:83:7b:28:
af:b1:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:49 2026 by rpki-client