Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: 6kNzmImZbLAPOUeHkTGvvS65IbISPUCoB6WjIvru6EM=
Subject key identifier: C7:0C:29:9B:91:A8:B6:E7:D8:C2:D8:DD:A7:32:EE:50:DC:C2:54:F9
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 019F1152A138E2F3DB59292CF9BD19E09F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 0100
Signing time: Mon 29 Jun 2026 03:00:55 +0000
Manifest this update: Mon 29 Jun 2026 03:00:55 +0000
Manifest next update: Tue 30 Jun 2026 03:00:55 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: 3u8RvMjQz/eVZkcR55lXKtc9AcM4UhaZwnbbAyk2gN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:a1:38:e2:f3:db:59:29:2c:f9:bd:19:e0:9f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Jun 29 03:00:55 2026 GMT
Not After : Jun 30 03:00:55 2026 GMT
Subject: CN=c70c299b91a8b6e7d8c2d8dda732ee50dcc254f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:bf:54:9d:52:13:2d:af:ae:66:4b:d5:66:
8c:4d:ba:21:56:55:97:af:ac:0f:20:9d:f6:32:6e:
f3:91:42:94:5d:41:4c:5a:a4:ab:03:0f:75:76:83:
99:bd:06:50:b4:f9:70:9f:51:c8:4a:23:1a:42:fe:
e2:57:98:a2:f1:5f:da:b9:65:98:16:16:73:0b:1e:
14:5e:df:be:bc:0d:ac:54:ab:d5:e6:fa:e7:ea:27:
c7:38:e8:0a:d5:93:2a:1a:4d:83:d1:aa:84:aa:78:
43:28:91:88:dc:00:e4:f1:40:5e:5b:cf:c0:4c:30:
58:d6:6f:45:86:1d:e8:ae:06:d4:e1:9b:42:5d:b0:
d1:cd:3a:55:12:fb:e1:25:b2:52:d0:55:07:0d:25:
0a:e8:5e:d1:50:ab:6f:51:36:25:d9:75:28:d9:ea:
dc:91:4c:0e:17:96:47:e4:a9:e4:5b:d9:0e:b8:f6:
42:6a:07:de:41:5c:65:25:71:34:7c:be:06:15:70:
36:fd:dd:ca:92:88:4c:9c:50:09:23:40:4e:d2:c2:
59:8d:36:cd:b8:9a:0a:b8:03:0e:7b:42:e3:f3:17:
e8:05:80:1b:48:8d:a9:8c:2f:ce:81:11:c8:91:24:
38:45:72:df:c5:36:9e:c7:2c:ee:9e:92:3a:03:6e:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:29:9B:91:A8:B6:E7:D8:C2:D8:DD:A7:32:EE:50:DC:C2:54:F9
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:b8:75:aa:d5:e4:d4:78:01:37:d4:3c:b9:bc:27:23:6c:
b4:6b:99:74:07:9f:9f:5b:f7:b4:41:46:cb:08:8d:0b:67:7b:
a8:d9:87:d7:fb:27:09:6b:1d:7c:88:6f:d3:bd:ab:d2:b5:57:
69:89:1c:23:1c:f9:10:0c:c3:ea:a7:e9:2b:a6:49:17:e8:17:
79:6e:70:55:9c:c5:f1:2e:59:91:69:ea:8f:41:25:17:a8:e9:
ca:a6:71:29:d4:d1:62:05:62:6d:43:ed:b4:7e:4c:53:13:5a:
72:3d:18:91:4d:2a:47:49:c1:9f:06:96:23:1d:6f:ad:7e:78:
48:bd:d3:9a:89:41:21:b1:c9:ee:a4:f6:a8:b6:ee:b1:21:94:
ae:91:42:48:fb:af:c3:49:bb:e8:11:a7:eb:d0:14:82:ab:7d:
c3:f3:6f:19:35:b5:10:87:32:d4:77:3b:36:1a:5c:11:3d:7a:
bd:56:4c:d8:db:c6:72:28:6b:81:73:c8:df:60:09:fb:43:a5:
ff:f5:89:f8:e8:7b:8f:8e:2c:d0:48:e9:ee:d6:97:89:4c:bb:
01:6b:58:5c:62:44:e8:76:0e:41:c8:14:8d:cf:a6:8d:a2:a0:
a6:83:c6:5c:bb:0a:de:6f:ee:8d:0c:2a:ff:53:0f:e7:52:80:
7b:44:2f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUqE44vPbWSks+b0Z4J8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjkxMWFmYjI5Y2UzMzUyNzY3ZTcxMzlkOWI5NWRmOGEw
NTk4Y2IwHhcNMjYwNjI5MDMwMDU1WhcNMjYwNjMwMDMwMDU1WjAzMTEwLwYDVQQD
EyhjNzBjMjk5YjkxYThiNmU3ZDhjMmQ4ZGRhNzMyZWU1MGRjYzI1NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszq/VJ1SEy2vrmZL1WaMTbohVlWX
r6wPIJ32Mm7zkUKUXUFMWqSrAw91doOZvQZQtPlwn1HISiMaQv7iV5ii8V/auWWY
FhZzCx4UXt++vA2sVKvV5vrn6ifHOOgK1ZMqGk2D0aqEqnhDKJGI3ADk8UBeW8/A
TDBY1m9Fhh3orgbU4ZtCXbDRzTpVEvvhJbJS0FUHDSUK6F7RUKtvUTYl2XUo2erc
kUwOF5ZH5KnkW9kOuPZCagfeQVxlJXE0fL4GFXA2/d3KkohMnFAJI0BO0sJZjTbN
uJoKuAMOe0Lj8xfoBYAbSI2pjC/OgRHIkSQ4RXLfxTaexyzunpI6A2784QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcMKZuRqLbn2MLY3acy7lDcwlT5MB8GA1UdIwQY
MBaAFJ65Ea+ynOM1J2fnE52bld+KBZjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYt
NjVlMjQ1NzEzMmVmLzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYtNjVlMjQ1NzEzMmVm
LzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXm4darV
5NR4ATfUPLm8JyNstGuZdAefn1v3tEFGywiNC2d7qNmH1/snCWsdfIhv072r0rVX
aYkcIxz5EAzD6qfpK6ZJF+gXeW5wVZzF8S5ZkWnqj0ElF6jpyqZxKdTRYgVibUPt
tH5MUxNacj0YkU0qR0nBnwaWIx1vrX54SL3TmolBIbHJ7qT2qLbusSGUrpFCSPuv
w0m76BGn69AUgqt9w/NvGTW1EIcy1Hc7NhpcET16vVZM2NvGcihrgXPI32AJ+0Ol
//WJ+Oh7j44s0Ejp7taXiUy7AWtYXGJE6HYOQcgUjc+mjaKgpoPGXLsK3m/ujQwq
/1MP51KAe0QvCg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:50 2026 by rpki-client