Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: xDHhlVaRKS29NOHuDnplxP3DnoOJG2n8Ys0GS9t3BKs=
Subject key identifier: 6A:24:B8:A8:8D:7C:12:44:FE:89:98:F1:6D:42:B9:0D:2F:63:2A:82
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019F189E42BFAADDB940673DF6253A111B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 04F3
Signing time: Tue 30 Jun 2026 13:00:52 +0000
Manifest this update: Tue 30 Jun 2026 13:00:52 +0000
Manifest next update: Wed 01 Jul 2026 13:00:52 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: M3UnwShOZIp8rDhKOUjy2y5j+yrjOssFM/NAuVRM4ks=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:42:bf:aa:dd:b9:40:67:3d:f6:25:3a:11:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Jun 30 13:00:52 2026 GMT
Not After : Jul 1 13:00:52 2026 GMT
Subject: CN=6a24b8a88d7c1244fe8998f16d42b90d2f632a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:a5:5c:f3:86:9d:f7:3c:47:70:d6:37:8b:
27:43:6a:5a:26:64:0f:ab:33:4a:0b:73:04:aa:6b:
14:db:3d:17:25:93:d9:ec:81:b6:92:7e:5c:5a:70:
0c:47:3d:ea:d3:c6:14:d6:2a:c8:f9:c5:27:b3:ca:
c0:94:0f:53:b9:de:04:b4:95:98:11:2e:2f:73:d6:
b6:a7:94:ef:ae:d4:88:09:28:26:43:93:1c:02:e6:
2e:94:72:fb:9b:00:09:31:f5:ec:03:77:00:36:c9:
b4:d8:10:19:fb:a8:dc:68:0e:57:ee:74:7c:cf:d9:
07:5b:35:8c:69:15:ce:66:1a:c0:64:eb:70:33:a5:
e3:0d:10:42:c1:27:14:ce:9b:f2:c7:79:9f:02:d5:
6b:3a:7d:63:d0:d8:45:4f:59:76:93:cc:58:bc:d2:
a6:30:c4:bd:2a:31:fe:7b:df:d7:86:27:3a:1f:90:
b7:06:f4:16:02:70:9b:b3:16:fd:7a:25:d3:94:e5:
8e:bc:6d:43:3e:d2:2d:6f:c9:48:b7:80:d9:1e:dc:
c9:dc:85:d5:91:2a:1e:ad:3b:d2:63:5c:5b:01:60:
d6:86:fc:ea:88:87:dc:19:95:0b:9a:55:c4:be:47:
52:ff:51:93:02:20:0f:e7:c8:fc:9a:bf:7f:0c:2b:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:B8:A8:8D:7C:12:44:FE:89:98:F1:6D:42:B9:0D:2F:63:2A:82
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:42:1d:ad:40:ca:54:a1:3b:9b:3f:fe:f3:3d:34:e9:1d:f9:
56:52:3b:00:42:77:e3:d6:70:f5:9b:0f:85:f2:2e:69:45:68:
fe:12:12:a0:86:7c:2c:73:00:c1:6b:f7:7e:f4:0b:2c:8a:8a:
64:8b:aa:be:fb:f9:13:6b:69:86:ed:32:d5:ad:22:69:c4:f7:
ca:a7:e1:cf:ec:75:11:ef:bc:c7:5a:08:d6:5d:cc:7d:45:1b:
f4:3b:1e:15:f8:1c:ee:a6:c5:df:c2:de:ee:8e:00:65:97:ff:
f9:18:35:61:a7:ec:e6:0d:45:e6:94:df:f2:7c:9d:e0:42:f2:
24:a7:17:57:0e:94:56:56:07:71:90:a8:60:a5:4b:76:92:90:
51:70:a4:60:40:02:97:10:c9:7f:e3:11:96:8b:24:7c:6a:e4:
12:d1:aa:8e:15:b4:57:9b:24:8d:54:af:b3:03:00:44:54:9f:
3e:7c:89:3d:7b:5d:92:80:0d:04:79:20:9c:9f:01:a5:06:51:
7d:9a:27:7d:f2:52:91:9e:24:71:cc:29:a6:d1:bb:bd:fe:f3:
25:e5:bf:34:9c:1f:bd:7a:52:98:42:2e:86:46:8d:70:53:86:
ba:95:e6:b5:1c:8f:09:8a:3e:d5:09:fc:19:79:bc:65:25:07:
b1:b0:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:47 2026 by rpki-client