Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: YcJ0GL3eRSEn7BCXM6nCEzh38zTHWZlcHQ7mN7GCQTA=
Subject key identifier: AA:E7:3B:50:5D:72:92:A6:FA:A1:10:03:7A:19:B3:02:EA:84:FF:ED
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019F40BF01757DB5FF53131C69111E59423A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 157A
Signing time: Wed 08 Jul 2026 08:01:27 +0000
Manifest this update: Wed 08 Jul 2026 08:01:27 +0000
Manifest next update: Thu 09 Jul 2026 08:01:27 +0000
Files and hashes: 1: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (hash: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY=)
2: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: n2v8XrzdDEvXMAyk3t98AjC7D7osnob//2O+ejXpxF0=)
3: kZxYAWzX74NAE37QVjZYwdiy08g.roa (hash: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs=)
4: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (hash: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:bf:01:75:7d:b5:ff:53:13:1c:69:11:1e:59:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jul 8 08:01:27 2026 GMT
Not After : Jul 9 08:01:27 2026 GMT
Subject: CN=aae73b505d7292a6faa110037a19b302ea84ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:25:a2:f8:26:97:26:2b:98:23:46:16:17:
f4:4b:2f:44:44:57:44:79:ed:15:25:be:9a:c5:ec:
6d:2f:a4:eb:fa:3d:f3:12:79:0d:6a:ad:4e:f3:d3:
b4:80:ad:67:6e:10:cc:53:35:e1:35:35:df:e6:62:
fe:20:2a:c1:83:e0:15:92:47:37:84:e4:db:1b:4f:
40:37:de:4f:67:6e:20:cd:97:e6:58:a9:68:a4:d8:
af:e5:67:0b:4b:b0:dc:8f:c8:45:ef:04:89:84:cf:
e0:d3:bc:49:6e:17:3e:dd:92:79:19:ef:61:c1:49:
28:f3:bb:70:95:f3:2c:d1:d8:67:90:01:50:0a:bb:
35:c8:90:3c:e1:bb:b2:68:81:a6:af:31:97:04:53:
56:21:21:e7:14:a5:91:c1:96:dd:97:09:65:ae:0e:
c1:76:c1:0b:1e:db:c3:90:a4:ec:1a:e8:a0:23:03:
49:16:94:6b:d5:5c:82:d4:bd:32:b7:34:b5:6c:1c:
c2:42:fc:42:3d:2b:4e:5b:00:21:c6:a7:bb:25:09:
37:f1:30:ad:c1:b9:b8:e3:4b:9e:66:38:ac:94:5e:
0a:cb:e4:01:a3:7a:63:c2:b3:01:7a:fd:87:0b:49:
a7:98:6c:6d:36:d5:67:8b:d3:ea:75:9c:97:97:da:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:3B:50:5D:72:92:A6:FA:A1:10:03:7A:19:B3:02:EA:84:FF:ED
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d1:d3:82:35:ff:9a:90:fa:54:6d:c9:7c:a3:ed:6b:e6:ad:
9f:c1:31:42:41:1e:9b:31:42:d8:5b:11:bd:59:d2:41:53:1a:
88:55:e1:d4:c3:04:95:5a:da:93:5d:67:7e:44:80:08:7b:9e:
16:f3:4d:17:07:3c:50:2b:65:d6:8e:8a:8d:27:76:08:ea:d1:
b3:f3:80:82:d8:52:61:37:db:b7:bd:5c:ca:f7:58:f2:df:b0:
a0:a5:98:f1:02:1b:28:c4:ce:27:7f:ec:c3:2e:70:29:a6:ed:
55:5c:08:b9:cd:c7:b0:33:09:f3:18:36:fe:56:2c:d3:ab:ba:
b3:5a:be:b6:10:6f:b4:43:59:26:bd:09:d8:d1:df:03:08:8d:
9e:d7:8f:bf:8c:aa:99:81:f7:51:2d:ba:cc:b4:e4:11:f7:dd:
44:6f:82:01:f3:90:61:97:f0:83:8e:ce:02:61:71:46:bb:2c:
2a:df:33:6f:2a:b2:e0:d2:e9:39:0b:64:bd:de:e5:b1:2a:ff:
0a:ab:59:e9:6c:6a:a2:ed:e5:44:9e:90:f0:99:a2:f8:33:d3:
59:0e:4c:b3:44:8d:05:84:af:03:54:5d:8b:ee:01:df:8b:1f:
f6:f3:83:a2:41:09:79:0e:be:dd:ad:eb:db:0b:f5:6a:08:d6:
90:c4:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:19:19 2026 by rpki-client