Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
File: NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft (raw, json)
Hash identifier: 8v+hxHuAYA6St5yBJqKjA4gzwS05YSHIbLd+ffZbbTg=
Subject key identifier: D4:02:C0:E4:AB:B7:6F:6D:A5:13:6F:AD:6B:D0:E0:E4:B3:ED:79:F9
Authority key identifier: 35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
Certificate issuer: /CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Certificate serial: 019FCC38ED3861280C98A6996837229B7B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
Manifest number: 07
Signing time: Tue 04 Aug 2026 10:01:50 +0000
Manifest this update: Tue 04 Aug 2026 10:01:50 +0000
Manifest next update: Wed 05 Aug 2026 10:01:50 +0000
Files and hashes: 1: NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl (hash: tH7wmhAZt5xhy7Rs3KlZyQZzh7I2CoXqoL8H6Yv8jZ4=)
2: oV7oEBtVkW-ZG0CNfBXZibq26cI.asa (hash: mCEcA0bMAnu7Jp7d+IWKI+vKl49ls8wLdVUMkuF36Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:38:ed:38:61:28:0c:98:a6:99:68:37:22:9b:7b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Validity
Not Before: Aug 4 10:01:50 2026 GMT
Not After : Aug 5 10:01:50 2026 GMT
Subject: CN=d402c0e4abb76f6da5136fad6bd0e0e4b3ed79f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:ff:bf:b9:25:79:e1:2a:da:6d:5f:83:85:
49:e0:1a:f7:76:0e:9d:c6:b5:a6:7f:dc:12:31:98:
9d:88:3c:5d:b8:4b:2a:25:b3:30:a4:06:da:5c:fa:
9f:88:b9:5a:59:9a:a9:fe:d2:e0:c7:19:fc:0e:eb:
40:08:17:29:e7:38:8b:81:da:25:1b:8d:1b:a3:83:
3f:b2:6e:64:7a:a2:39:7b:c3:9f:b6:70:22:76:cb:
13:cc:21:4b:a1:5f:43:5c:1a:6c:fc:46:ad:ed:12:
ae:0d:f4:37:91:44:76:9f:7e:56:95:fe:50:c0:b8:
fc:7a:cf:d9:16:e2:b4:7b:8c:87:38:5f:fe:48:bf:
75:6d:5a:2e:70:30:d9:72:aa:96:42:d7:06:11:35:
9d:44:71:1c:ab:a3:e3:00:73:07:bd:46:bb:01:9d:
41:27:ff:40:f9:57:cb:97:8a:16:bd:9f:f5:49:29:
47:cd:c3:1f:fb:a3:f2:6a:26:52:da:bb:6f:e6:06:
75:35:51:3a:a5:a4:e4:f9:53:e8:97:86:64:63:0e:
81:92:42:92:30:a0:c9:1e:14:38:fe:41:15:64:b7:
50:81:a8:8e:c5:44:02:33:23:ca:67:3e:99:91:c2:
d0:fa:de:8d:f2:4b:43:bc:86:ab:31:aa:73:e3:44:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:C0:E4:AB:B7:6F:6D:A5:13:6F:AD:6B:D0:E0:E4:B3:ED:79:F9
X509v3 Authority Key Identifier:
keyid:35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d4:dc:81:9c:91:29:b8:1e:02:50:d8:55:f1:65:72:8b:ba:
50:c8:e2:c5:8d:5b:71:ef:82:8b:b2:b5:75:77:d5:68:04:d3:
c7:c1:7b:ab:49:75:a8:5b:29:30:97:3c:a2:0a:6b:f4:95:13:
b1:ff:58:1d:2e:10:a0:17:18:dd:fc:25:3f:b2:f9:36:6b:c8:
1c:e7:80:3a:00:35:87:65:db:f3:9a:54:4f:5a:80:8f:dd:88:
6e:f6:ee:55:15:75:dd:4e:09:fe:e6:a1:98:f4:b9:f4:b1:6b:
ae:ee:37:ea:40:1e:24:51:52:2f:c1:b8:99:d6:dc:e3:b7:f5:
da:86:b5:3d:26:76:05:39:34:6d:7b:ef:c1:fc:80:d8:0a:1d:
08:0a:f4:f7:be:38:a3:68:46:1d:fc:9c:d9:68:d5:90:e2:52:
9b:e4:33:22:49:e1:ca:ed:2d:a2:71:87:99:40:65:fd:f3:26:
0c:c0:ec:fb:b1:cc:6b:ff:65:c1:4e:16:43:54:1b:dc:ed:32:
35:70:9b:28:3e:bf:52:3f:e7:36:35:13:68:3b:4a:f2:75:64:
83:e0:fd:5f:1d:98:4f:d6:bc:14:9e:6d:68:aa:85:ed:23:64:
10:2c:22:9a:fb:fc:3c:7a:85:a8:20:95:7a:ff:da:4b:03:10:
8f:00:4a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/MOO04YSgMmKaZaDcim3s4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjJkMjllYjJhYmUwOGU1ZTc3NTk3OGQwMDBhNjNkMGU2
ZWM4NGEwHhcNMjYwODA0MTAwMTUwWhcNMjYwODA1MTAwMTUwWjAzMTEwLwYDVQQD
EyhkNDAyYzBlNGFiYjc2ZjZkYTUxMzZmYWQ2YmQwZTBlNGIzZWQ3OWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyb/v7kleeEq2m1fg4VJ4Br3dg6d
xrWmf9wSMZidiDxduEsqJbMwpAbaXPqfiLlaWZqp/tLgxxn8DutACBcp5ziLgdol
G40bo4M/sm5keqI5e8OftnAidssTzCFLoV9DXBps/Eat7RKuDfQ3kUR2n35Wlf5Q
wLj8es/ZFuK0e4yHOF/+SL91bVoucDDZcqqWQtcGETWdRHEcq6PjAHMHvUa7AZ1B
J/9A+VfLl4oWvZ/1SSlHzcMf+6PyaiZS2rtv5gZ1NVE6paTk+VPol4ZkYw6BkkKS
MKDJHhQ4/kEVZLdQgaiOxUQCMyPKZz6ZkcLQ+t6N8ktDvIarMapz40RUxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQCwOSrt29tpRNvrWvQ4OSz7Xn5MB8GA1UdIwQY
MBaAFDWy0p6yq+COXndZeNAApj0ObshKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJMU25yS3I0STVlZDFsNDBBQ21QUTV1eUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zYTQ4YzAtNTRiMy00YzA4LWJmYmUt
MWYzNmU2YmFmNWZiLzEvTmJMU25yS3I0STVlZDFsNDBBQ21QUTV1eUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zYTQ4YzAtNTRiMy00YzA4LWJmYmUtMWYzNmU2YmFmNWZi
LzEvTmJMU25yS3I0STVlZDFsNDBBQ21QUTV1eUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtTcgZyR
KbgeAlDYVfFlcou6UMjixY1bce+Ci7K1dXfVaATTx8F7q0l1qFspMJc8ogpr9JUT
sf9YHS4QoBcY3fwlP7L5NmvIHOeAOgA1h2Xb85pUT1qAj92IbvbuVRV13U4J/uah
mPS59LFrru436kAeJFFSL8G4mdbc47f12oa1PSZ2BTk0bXvvwfyA2AodCAr09744
o2hGHfyc2WjVkOJSm+QzIknhyu0tonGHmUBl/fMmDMDs+7HMa/9lwU4WQ1Qb3O0y
NXCbKD6/Uj/nNjUTaDtK8nVkg+D9Xx2YT9a8FJ5taKqF7SNkECwimvv8PHqFqCCV
ev/aSwMQjwBKmw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 16:10:14 2026 by rpki-client