Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: j4pjZc6O9w+q8N7B/3RHCGxuY3JJvIjtgC0O/bnJg48=
Subject key identifier: 6B:90:91:10:CE:91:8E:4B:BF:08:8A:31:20:CD:EF:C8:56:74:74:95
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 019F848CB174B6BA0A20CCEFA8FD0F276337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 06CD
Signing time: Tue 21 Jul 2026 12:00:40 +0000
Manifest this update: Tue 21 Jul 2026 12:00:40 +0000
Manifest next update: Wed 22 Jul 2026 12:00:40 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: Q1A2bCSDRl/x1PlNhqxnJ7fpz/B+wEaE6KKKsVBxxjM=)
2: OpL-pa8NL900kH8xzWl5YjvThJY.roa (hash: vlDt2SoHGnTYLb5raTfW4h1Lk0nI8+h/wkbguuhzWkQ=)
3: sIlCaCD_4BDRNR5RbqWtiio-eF0.roa (hash: PQBWwOKM2zk4TrqswCsq5mNswJnxO+Lcbmzd/J2ySfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:b1:74:b6:ba:0a:20:cc:ef:a8:fd:0f:27:63:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Jul 21 12:00:40 2026 GMT
Not After : Jul 22 12:00:40 2026 GMT
Subject: CN=6b909110ce918e4bbf088a3120cdefc856747495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:50:0b:65:d2:d4:16:5f:99:e4:0f:39:14:
b3:a0:82:59:b1:89:2d:9e:c9:d9:ec:71:42:e2:da:
4c:7e:44:38:7e:2f:10:62:26:74:60:5c:1e:4c:e0:
dc:1f:8a:de:b0:ea:7e:56:71:73:36:af:69:b7:96:
e7:00:d9:d1:85:f4:37:5f:70:aa:4f:af:5a:41:23:
43:09:6b:a6:df:95:e8:6e:5a:7d:b3:bd:12:35:37:
97:2b:f1:74:93:bc:0c:57:67:de:29:59:24:8c:ba:
0d:74:8c:13:89:c8:29:e7:a1:b9:89:ae:c2:48:0e:
08:8d:ab:a5:ed:8a:e6:0e:1f:bb:60:9a:4b:6c:26:
38:1d:01:40:f2:ea:52:c8:f4:22:9e:ec:f3:b6:10:
7c:34:dd:05:26:59:c8:2c:c2:4d:c2:ad:22:56:fa:
73:02:f3:32:84:e8:15:da:07:bb:ef:48:cb:35:f7:
26:e4:56:79:5d:dc:a6:44:8b:e6:11:99:86:ed:fb:
1f:ae:16:c9:46:af:65:5d:da:43:0c:25:78:5b:cb:
02:00:d4:ef:72:22:ed:3f:29:02:f8:0b:4a:47:d5:
57:d1:5d:d4:17:f4:f9:4d:93:1a:dc:6b:f8:ff:30:
de:a2:5e:c9:e5:74:0d:9a:84:6f:b9:44:c9:eb:c3:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:91:10:CE:91:8E:4B:BF:08:8A:31:20:CD:EF:C8:56:74:74:95
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:df:c5:7e:b3:44:47:73:f8:69:58:8f:eb:fd:ef:23:0c:
0c:a8:80:85:ac:b0:45:ff:2a:88:30:01:1d:8f:4d:6f:8b:b3:
74:18:c0:e2:fb:bc:ca:f7:65:8c:3e:bf:08:04:fa:d4:58:4c:
5a:a3:59:51:80:2a:bb:2d:35:14:12:9a:b0:2c:3d:91:95:f2:
cb:ea:b2:de:10:0e:a9:a2:df:4a:f0:d7:b5:6f:a5:91:10:6d:
ea:83:20:12:49:c9:18:64:f3:93:c2:36:23:4d:90:b9:6c:70:
a5:12:16:44:f9:f7:53:a8:c0:e2:a8:46:60:ae:6c:49:79:d4:
75:fb:4d:26:6c:e3:04:5b:46:21:2d:b3:53:1c:2b:fe:ed:2c:
43:ee:f1:ad:43:da:1f:fd:e4:a6:68:e3:23:50:16:c9:11:62:
ab:43:3d:1c:5b:08:fd:49:98:57:6b:14:c0:45:15:f1:7a:bf:
4a:9e:0a:7a:b9:78:5d:2f:c6:6b:07:fb:45:d1:72:4a:91:0b:
6e:eb:75:e4:60:51:9f:5b:29:13:7d:fa:7d:2d:67:33:93:14:
71:53:77:e4:3e:88:28:41:c4:fc:ca:c9:10:ee:a8:1f:14:98:
d9:a9:58:a1:78:d9:10:d2:dd:da:f9:ea:6f:9c:d5:6e:ef:3e:
12:17:05:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EjLF0troKIMzvqP0PJ2M3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmUwMTAxMTgxYWNhNDI1MWU5ZjI0YThmNjM3MzVlMmY1
ZWJkY2QwHhcNMjYwNzIxMTIwMDQwWhcNMjYwNzIyMTIwMDQwWjAzMTEwLwYDVQQD
Eyg2YjkwOTExMGNlOTE4ZTRiYmYwODhhMzEyMGNkZWZjODU2NzQ3NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWhQC2XS1BZfmeQPORSzoIJZsYkt
nsnZ7HFC4tpMfkQ4fi8QYiZ0YFweTODcH4resOp+VnFzNq9pt5bnANnRhfQ3X3Cq
T69aQSNDCWum35Xoblp9s70SNTeXK/F0k7wMV2feKVkkjLoNdIwTicgp56G5ia7C
SA4Ijaul7YrmDh+7YJpLbCY4HQFA8upSyPQinuzzthB8NN0FJlnILMJNwq0iVvpz
AvMyhOgV2ge770jLNfcm5FZ5XdymRIvmEZmG7fsfrhbJRq9lXdpDDCV4W8sCANTv
ciLtPykC+AtKR9VX0V3UF/T5TZMa3Gv4/zDeol7J5XQNmoRvuUTJ68M3KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuQkRDOkY5LvwiKMSDN78hWdHSVMB8GA1UdIwQY
MBaAFDVuAQEYGspCUenySo9jc14vXr3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMt
OWQ1ZTM0YjAyZTViLzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMtOWQ1ZTM0YjAyZTVi
LzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfffxX6z
REdz+GlYj+v97yMMDKiAhaywRf8qiDABHY9Nb4uzdBjA4vu8yvdljD6/CAT61FhM
WqNZUYAquy01FBKasCw9kZXyy+qy3hAOqaLfSvDXtW+lkRBt6oMgEknJGGTzk8I2
I02QuWxwpRIWRPn3U6jA4qhGYK5sSXnUdftNJmzjBFtGIS2zUxwr/u0sQ+7xrUPa
H/3kpmjjI1AWyRFiq0M9HFsI/UmYV2sUwEUV8Xq/Sp4Kerl4XS/Gawf7RdFySpEL
but15GBRn1spE336fS1nM5MUcVN35D6IKEHE/MrJEO6oHxSY2alYoXjZENLd2vnq
b5zVbu8+EhcFzw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:17 2026 by rpki-client