Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: Gv7Nitw7zUa2wfTeViCVVZKAFBXJe/JLmmkCAcuKJJU=
Subject key identifier: 5D:7B:4E:A1:5B:73:F3:B5:91:D7:0C:9C:BD:F9:AE:B6:1B:F0:55:73
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 01A0024AC4F6B06340A29DF45528E3300C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 056C
Signing time: Fri 14 Aug 2026 22:00:49 +0000
Manifest this update: Fri 14 Aug 2026 22:00:49 +0000
Manifest next update: Sat 15 Aug 2026 22:00:49 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: G9FEq9N64Z818MLaJAhrRZdUfjI/DqP6Dc1bxMRUj9I=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:c4:f6:b0:63:40:a2:9d:f4:55:28:e3:30:0c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Aug 14 22:00:49 2026 GMT
Not After : Aug 15 22:00:49 2026 GMT
Subject: CN=5d7b4ea15b73f3b591d70c9cbdf9aeb61bf05573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:48:d7:51:f7:56:b4:28:96:81:ff:3d:95:
58:39:c5:e5:29:04:68:5e:5d:33:dc:9e:51:d2:06:
7b:a6:e7:d8:92:71:4e:ab:ce:ae:f8:fe:f9:74:4f:
b0:97:6b:85:b4:ab:47:a4:b4:d5:e1:9d:0a:3b:5c:
ad:bc:56:6d:41:c1:bc:4f:58:20:10:4b:fd:e5:08:
10:bd:78:c9:9e:0d:98:c6:d2:67:fb:24:56:ff:0a:
bc:c0:d4:94:f1:85:f7:fe:5e:58:cc:3c:86:b0:f8:
a0:7c:cf:71:d6:5b:f5:f3:d5:53:93:81:d2:6a:d7:
d8:4d:3f:bf:e8:7d:5b:4b:36:03:5d:68:a7:38:a2:
a7:ba:26:5b:ff:67:f6:7f:bd:d2:9c:9f:0e:f0:48:
14:0f:4e:3c:f1:99:75:82:99:be:54:ce:56:1d:89:
ea:90:a0:ee:5e:d8:cf:30:0d:b0:f7:4a:7e:f9:3a:
63:87:66:14:2d:61:d4:fb:9d:fa:21:54:1f:b9:6a:
1b:a2:b8:86:fc:c0:da:a5:91:db:87:f1:9d:ea:29:
63:40:f8:f7:fe:93:81:2f:6e:e4:75:31:2f:33:83:
ea:c1:af:1c:3d:b5:d9:87:f4:1e:15:4d:98:1b:7d:
fa:b5:e6:39:c9:bf:cd:46:aa:0f:b7:5d:e5:cf:35:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:4E:A1:5B:73:F3:B5:91:D7:0C:9C:BD:F9:AE:B6:1B:F0:55:73
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:5d:7f:09:98:39:9a:b6:75:c2:82:f6:f6:88:25:d8:b6:
27:cc:64:5c:60:dc:06:22:12:39:50:5a:69:f2:9f:0b:72:87:
af:45:66:e7:22:e3:3c:f4:a8:21:f7:aa:93:a2:e5:01:3a:79:
59:2b:38:68:d4:3c:fd:26:58:8c:af:75:1a:26:cd:5c:05:5d:
0d:81:82:0d:53:f9:b1:df:bc:bd:7c:91:4e:c1:85:67:96:6b:
ba:22:9b:01:a5:a9:18:14:35:20:98:fa:80:a0:f6:8a:33:34:
48:e5:50:44:eb:37:bd:eb:c5:96:a2:ec:c3:83:2c:ae:0b:e7:
f8:37:6d:e3:bc:fd:96:9c:10:69:3a:a7:7a:5e:41:ff:16:a9:
91:ac:df:7a:9e:75:d0:32:e9:82:fb:ba:04:5d:6d:7b:47:88:
ad:d1:24:9f:ca:b5:9e:0e:51:1a:3e:ec:85:63:f3:00:35:0a:
d2:f3:82:66:70:4a:27:e7:85:c7:d8:d7:ae:86:ae:97:63:c4:
9e:98:f4:eb:70:bd:a0:5a:a9:ea:60:a5:45:f2:23:23:a8:38:
99:be:0c:ef:f4:50:71:33:d5:b8:7f:ff:3d:ec:d2:01:cd:f3:
3b:7f:69:e7:58:fc:b5:95:a5:43:2f:41:42:3e:d9:65:db:65:
59:f2:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:05 2026 by rpki-client