Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: j/ZpOaPwA9gWJiQnrDOp7TU4dbo2YfzC8z5KlvtOO/4=
Subject key identifier: 7B:5E:86:80:EC:51:DC:95:72:66:9D:04:85:CE:3B:E9:D9:1B:52:9D
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 01A17A3AD9087944E32E9FC90BA6BA2024C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 17EB
Signing time: Mon 26 Oct 2026 22:00:39 +0000
Manifest this update: Mon 26 Oct 2026 22:00:39 +0000
Manifest next update: Tue 27 Oct 2026 22:00:39 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: 0DSfgll3dt+xb3Typ4bZipRWk8DpNe754tdcbFm2/Fw=)
2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:d9:08:79:44:e3:2e:9f:c9:0b:a6:ba:20:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Oct 26 22:00:39 2026 GMT
Not After : Oct 27 22:00:39 2026 GMT
Subject: CN=7b5e8680ec51dc9572669d0485ce3be9d91b529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:f7:df:63:7d:a3:34:42:90:8a:7b:df:4b:
02:05:4e:b5:2e:b3:ef:51:00:a9:e2:d2:b8:22:76:
4e:f5:7e:9c:07:42:23:2d:3e:59:cd:10:3b:b6:38:
39:b6:98:7e:14:8b:ba:60:3f:66:73:91:b2:6d:ec:
3d:97:e0:d0:bb:c9:17:95:65:d2:e4:a7:08:24:08:
f0:11:30:33:db:8a:83:44:64:b2:37:14:69:cb:aa:
83:cf:19:1d:a7:74:ec:48:e8:cf:fd:92:2e:2a:c3:
75:1a:27:b9:11:7b:2f:7f:94:85:a6:e1:b0:84:5c:
fd:4e:1a:55:cc:a1:a7:0e:a7:d2:b3:70:d4:90:e8:
c7:fa:6e:b6:31:95:85:7f:c6:36:2b:d8:f7:57:15:
7c:63:3b:a2:48:c2:d0:28:92:6c:7e:b6:d4:1d:e9:
8f:02:8b:25:fe:3a:f0:bf:05:75:49:b2:83:1c:a3:
b4:2f:ee:20:34:f7:38:2d:f4:b3:fa:3e:e6:c9:50:
c5:42:83:3d:ed:07:4d:f2:97:e4:c5:3b:c3:21:2f:
5d:4e:c0:4f:1e:7e:7b:34:aa:47:b3:c7:bf:21:cc:
a9:ff:e5:cf:61:c6:58:cc:6e:de:09:13:1b:f0:f4:
ba:0d:84:67:a4:80:9b:2d:d6:29:60:f9:95:db:b7:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:86:80:EC:51:DC:95:72:66:9D:04:85:CE:3B:E9:D9:1B:52:9D
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:da:2f:f7:6f:b3:e1:66:8c:5d:97:49:64:a5:c7:2b:d6:bf:
47:99:b7:1d:80:b6:94:3b:35:0b:c4:b6:a4:80:cd:11:eb:f6:
10:00:c3:8c:0e:c7:d3:f2:75:d7:51:b5:94:7e:b7:f0:40:78:
15:e0:8b:d3:c8:98:61:84:35:34:ef:23:5e:92:00:a4:a7:0a:
e6:73:8a:b3:e8:89:37:13:0e:01:e9:d8:24:5c:b2:98:e3:9d:
c0:b1:32:83:a1:5e:d3:78:7f:77:25:0a:9e:e8:7c:b3:9b:71:
df:9b:e8:97:38:63:83:7d:27:67:d1:c2:ba:d3:f3:c2:f5:ac:
c9:a9:0d:02:52:ac:78:77:d6:07:c8:b4:cf:e4:08:ca:68:41:
c8:6c:c0:c4:69:94:96:f4:16:96:d6:32:fb:73:6f:2c:7b:e8:
ad:10:c0:40:dc:9e:0f:ae:ea:01:4f:35:aa:5c:4d:38:67:4e:
22:ce:3b:a1:e5:fe:ad:83:16:a0:48:95:69:08:95:8b:0a:4a:
63:a9:04:22:ca:fd:ed:ce:5b:02:d5:6b:12:c2:12:09:e3:00:
60:35:84:8b:3e:f1:81:51:15:d2:02:54:80:51:29:5d:8f:a4:
d8:f9:af:e2:27:ff:fd:9c:b3:5f:57:32:d3:30:86:d1:8b:c1:
62:c6:86:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6OtkIeUTjLp/JC6a6ICTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi
MmQxNDgwHhcNMjYxMDI2MjIwMDM5WhcNMjYxMDI3MjIwMDM5WjAzMTEwLwYDVQQD
Eyg3YjVlODY4MGVjNTFkYzk1NzI2NjlkMDQ4NWNlM2JlOWQ5MWI1MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz73332N9ozRCkIp730sCBU61LrPv
UQCp4tK4InZO9X6cB0IjLT5ZzRA7tjg5tph+FIu6YD9mc5Gybew9l+DQu8kXlWXS
5KcIJAjwETAz24qDRGSyNxRpy6qDzxkdp3TsSOjP/ZIuKsN1Gie5EXsvf5SFpuGw
hFz9ThpVzKGnDqfSs3DUkOjH+m62MZWFf8Y2K9j3VxV8YzuiSMLQKJJsfrbUHemP
Aosl/jrwvwV1SbKDHKO0L+4gNPc4LfSz+j7myVDFQoM97QdN8pfkxTvDIS9dTsBP
Hn57NKpHs8e/Icyp/+XPYcZYzG7eCRMb8PS6DYRnpICbLdYpYPmV27dz2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtehoDsUdyVcmadBIXOO+nZG1KdMB8GA1UdIwQY
MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt
NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0
LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndov92+z
4WaMXZdJZKXHK9a/R5m3HYC2lDs1C8S2pIDNEev2EADDjA7H0/J111G1lH638EB4
FeCL08iYYYQ1NO8jXpIApKcK5nOKs+iJNxMOAenYJFyymOOdwLEyg6Fe03h/dyUK
nuh8s5tx35volzhjg30nZ9HCutPzwvWsyakNAlKseHfWB8i0z+QIymhByGzAxGmU
lvQWltYy+3NvLHvorRDAQNyeD67qAU81qlxNOGdOIs47oeX+rYMWoEiVaQiViwpK
Y6kEIsr97c5bAtVrEsISCeMAYDWEiz7xgVEV0gJUgFEpXY+k2Pmv4if//ZyzX1cy
0zCG0YvBYsaGJw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:42 2026 by rpki-client