Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: KstaNqd+isgus5Dg+YauztQEziUNY4wk+Htd5aOh7yM=
Subject key identifier: 85:62:E7:BB:C8:EC:73:21:A7:00:0F:93:04:CE:D3:4D:CF:18:D7:5A
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019FAF40DC21A6F0FBDDD7F98AB5F588633D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 19DE
Signing time: Wed 29 Jul 2026 19:01:31 +0000
Manifest this update: Wed 29 Jul 2026 19:01:31 +0000
Manifest next update: Thu 30 Jul 2026 19:01:31 +0000
Files and hashes: 1: Fk_uxWdkQeYx2z70vxU8pKeQvYc.roa (hash: ktKC7e3hjBfZooC8pVGtH47x/POHGeRio9bH7/rdzsY=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: ciePbHWJkt10BkqSF6T1Hf+HbGTHmozggUHfEa5HLpg=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=)
5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=)
6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
7: oJ2ks5YNwiHAq9WzT5_4e1nkYaE.roa (hash: bo5UpeN+wQ6nH/bLCuevf6K58UPiHvne75tCF8e9eKo=)
8: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:40:dc:21:a6:f0:fb:dd:d7:f9:8a:b5:f5:88:63:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jul 29 19:01:31 2026 GMT
Not After : Jul 30 19:01:31 2026 GMT
Subject: CN=8562e7bbc8ec7321a7000f9304ced34dcf18d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:e1:90:82:36:d4:db:8f:1e:46:e9:71:b9:
d3:8a:72:11:0c:01:53:27:d9:f0:ef:d6:63:3e:54:
b2:83:d6:2f:94:5b:b8:a5:96:26:12:dd:71:fe:5d:
5d:5f:3e:c8:26:43:ac:ea:e0:c2:7d:b3:11:73:8e:
8d:e2:e2:29:6e:ee:d8:3f:e6:9b:f1:61:d3:0c:c1:
b3:a5:b0:e5:9e:3f:ee:1f:4a:f0:4e:0d:1f:f2:84:
d1:e8:0d:c0:2a:a5:68:36:48:ae:dc:6c:25:13:a6:
20:f2:d5:e4:35:8b:38:8d:10:ae:11:c7:52:65:f7:
98:b5:97:8e:4c:4b:67:20:fc:c3:f9:f4:d0:01:05:
de:2c:03:ea:88:84:35:d3:77:da:54:96:e7:bd:e8:
c3:33:8f:10:98:ad:8e:fd:36:42:09:e3:5e:ef:e3:
71:9e:20:93:71:82:15:4e:d9:61:14:66:47:9a:31:
e7:e2:49:8d:e3:01:6f:64:d3:44:70:b9:d2:ac:ec:
d5:42:02:af:88:5c:ec:d1:7c:9c:5c:26:27:d5:1d:
f6:af:6a:8f:b1:40:7c:7f:51:43:dd:b1:88:44:0f:
0b:4c:8a:98:2c:a7:1b:5b:84:4b:b3:c5:f8:81:3c:
10:cd:53:ab:4c:31:33:e4:2b:12:ba:c3:19:4b:d3:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:E7:BB:C8:EC:73:21:A7:00:0F:93:04:CE:D3:4D:CF:18:D7:5A
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:0e:e1:48:78:b7:c7:8c:43:c1:98:10:4c:38:c8:1e:2b:
f7:de:8c:cb:f9:4a:e0:4d:50:49:7d:5b:06:1f:51:52:5a:42:
b3:4d:b1:3a:bd:72:86:ad:4b:e7:b6:e9:c8:ce:bf:da:31:0f:
d4:d2:ff:d2:4d:4d:5c:cb:21:9a:84:31:89:5c:ce:c4:e5:43:
17:9c:43:41:4a:cf:2d:4c:89:32:fc:9e:84:a3:d7:40:fd:27:
fd:ef:61:6e:f6:8b:18:f1:f4:d6:04:4d:0a:57:74:f6:e4:0c:
78:46:11:61:a6:f8:64:b0:77:e0:ef:53:94:a6:63:7b:94:c4:
24:3c:83:fb:d2:20:2a:c7:b5:89:1f:c6:30:db:a8:e2:e6:37:
5c:7e:16:a4:50:22:19:a0:3f:a1:fa:97:66:c0:52:12:92:15:
d3:71:ae:02:c2:d6:34:50:b2:d8:eb:37:74:15:81:61:74:9f:
3e:1f:10:e5:17:8a:cf:e2:48:9d:68:86:b1:6d:2d:58:9a:72:
79:97:14:6d:81:09:fc:5d:4a:09:c3:65:a3:8c:8c:c0:b0:28:
c1:1a:cb:f1:5e:4b:b2:e4:38:be:4d:ec:10:08:46:9b:16:d4:
d7:ea:f5:f2:2c:d5:0e:f2:32:a8:05:32:f7:d6:62:dc:60:5d:
9b:6e:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:41:20 2026 by rpki-client