Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: qlP01al4mO+QqSJ3fFmD9JEWQKfDUbSVP+hWMtMFme4=
Subject key identifier: B5:C0:41:F3:04:E2:1E:47:A2:F8:07:30:00:B9:31:1A:17:CF:42:7D
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01A06D9529EB3F3EB2125B63D289A6B0C971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 12FC
Signing time: Fri 04 Sep 2026 18:01:27 +0000
Manifest this update: Fri 04 Sep 2026 18:01:27 +0000
Manifest next update: Sat 05 Sep 2026 18:01:27 +0000
Files and hashes: 1: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (hash: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4=)
2: E6wT0b-k1u6FR3wlv4qrEUuXVus.roa (hash: QZbCRhopOeDIiKUt1DVyRJURDTW9xWZnCSsr7ayZmWw=)
3: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: Vxh11Todt+HWEGrWspetOZaKIq+wUnkc+7L5PuaHB7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:29:eb:3f:3e:b2:12:5b:63:d2:89:a6:b0:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Sep 4 18:01:27 2026 GMT
Not After : Sep 5 18:01:27 2026 GMT
Subject: CN=b5c041f304e21e47a2f8073000b9311a17cf427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:6b:0f:27:2e:72:18:a6:f7:78:61:e1:18:
b4:e9:d4:83:f3:97:56:bc:38:7e:0f:b8:32:2b:f6:
76:8a:f2:af:7d:f8:bf:40:3a:d9:68:5d:09:85:50:
6c:c5:19:12:b8:09:34:4a:a3:2c:bc:a5:98:d3:82:
34:a2:05:b3:56:ae:04:e7:84:5b:d2:41:48:86:3e:
eb:68:01:c4:2c:0a:07:eb:e0:9b:03:43:b1:c8:3f:
e9:5b:00:a7:35:12:d3:53:59:b9:ff:c3:da:a2:55:
77:0b:09:6d:2b:45:36:da:dd:22:65:dd:e3:f4:28:
4f:7a:7a:4f:fc:54:e4:f3:ae:af:8b:59:4c:5f:24:
a4:ca:eb:ae:be:77:59:d5:2f:ab:d1:8f:ae:59:0f:
0b:78:b1:fa:97:b8:08:d5:bc:46:81:92:83:e5:8b:
59:54:6f:68:f0:7e:3b:12:2a:75:32:d2:66:98:cd:
f1:25:47:e1:7b:54:51:4a:67:6a:66:08:e8:50:ea:
2b:cf:ce:bd:d6:2c:a4:b5:7a:32:f0:53:ae:e9:83:
65:8f:fc:44:a9:b7:20:91:20:f4:22:41:11:a3:eb:
2f:a4:33:00:10:6c:cd:ba:ab:7a:21:1c:be:65:4e:
52:c1:44:46:e4:a2:41:13:c8:e4:66:9c:53:b8:9d:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C0:41:F3:04:E2:1E:47:A2:F8:07:30:00:B9:31:1A:17:CF:42:7D
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7a:22:71:8d:6f:60:90:f9:70:43:df:63:f3:6e:ee:30:5e:
d6:fe:10:a1:46:87:86:f1:af:58:e5:80:88:55:ec:4b:6f:da:
4e:92:50:ac:af:83:0f:43:d3:67:e7:f5:de:b2:bd:5e:b4:60:
5b:96:51:0c:31:3e:e6:1b:31:62:23:3a:fc:9d:b7:bd:80:9d:
8d:95:69:af:4d:30:1e:f1:ae:ec:c5:3c:32:ae:df:33:e6:ef:
c0:db:73:08:26:ee:56:32:d2:b2:0e:1e:ad:8f:ab:f2:4d:34:
33:4a:3b:50:cd:75:f9:50:1c:56:88:e8:46:a7:81:9f:ed:42:
48:4b:1a:33:09:4b:9d:03:d8:dc:cb:19:7b:70:39:ef:c0:ee:
83:5f:70:9d:2f:05:21:d4:42:ee:a0:04:b5:f3:6c:c1:8a:62:
53:3e:68:d7:c9:5d:9d:bf:e7:ad:6d:07:ee:a1:4b:29:fb:6c:
07:f0:8c:dd:3e:65:fa:f0:d1:f7:43:12:01:21:db:44:de:dd:
5b:fc:37:4b:4b:c4:74:39:f9:56:42:6e:56:e4:73:22:97:e7:
dc:dc:61:d4:07:54:74:57:7f:95:3f:17:3f:25:60:a7:e1:80:
46:97:99:b7:55:37:51:5c:a3:38:e5:96:89:05:82:18:ed:62:
ba:4f:60:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:44 2026 by rpki-client