
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: e2Owr9LAgn+2JVJkvz+rijiH1XdOO2fceCFXaemofSk=
Subject key identifier: C2:D6:AF:CA:C4:42:75:1A:1D:F9:5A:8B:7C:03:5E:4D:BE:6B:7B:59
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 019F83B108C2583E0D1B451166E45F81CF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 17CC
Signing time: Tue 21 Jul 2026 08:00:45 +0000
Manifest this update: Tue 21 Jul 2026 08:00:45 +0000
Manifest next update: Wed 22 Jul 2026 08:00:45 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: ko+HscTOKIp0ujxDa6djkYA6yApTlN+S1dQhQ34Y3ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b1:08:c2:58:3e:0d:1b:45:11:66:e4:5f:81:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Jul 21 08:00:45 2026 GMT
Not After : Jul 22 08:00:45 2026 GMT
Subject: CN=c2d6afcac442751a1df95a8b7c035e4dbe6b7b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:20:95:6a:b9:eb:d8:6b:23:fb:b5:48:6b:
33:c6:89:c7:94:92:ba:d8:b1:12:62:63:c1:1b:d6:
17:c1:7e:8a:84:1c:06:82:30:8f:60:ff:82:5c:c9:
ce:b4:a7:fd:73:98:c4:97:f2:eb:42:2a:a2:d6:f1:
7e:b4:36:6f:4c:0a:05:79:07:e0:d7:f5:04:a7:1b:
fa:a0:6c:ed:be:da:36:5c:85:e8:38:e8:55:de:3a:
0d:1b:6b:0f:0c:8d:4c:51:87:04:85:36:c4:87:e6:
45:e2:7d:6c:43:8a:d1:ea:e8:3e:14:05:93:57:3f:
62:c1:50:de:73:7a:89:04:e5:bf:97:26:e5:85:fb:
ac:12:c7:2e:d1:7f:f2:6b:89:3e:89:07:25:56:03:
83:77:28:f3:3d:af:8f:9a:5d:19:3f:1a:69:6c:ba:
a1:1b:38:83:f1:85:4d:39:b2:30:6d:c6:3f:1b:32:
03:5d:4d:75:b7:e1:3e:b5:57:01:40:ef:4c:47:ec:
a0:76:b0:b6:32:a2:e6:a0:37:38:12:3a:3b:34:b2:
2f:f2:0d:04:c8:26:71:28:c8:b6:0b:63:51:75:c4:
f1:c9:d7:65:c7:bf:b5:a8:8b:88:9a:bd:e3:dd:2b:
5a:2a:e7:52:2f:13:58:32:33:32:34:2c:9e:cc:9f:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:AF:CA:C4:42:75:1A:1D:F9:5A:8B:7C:03:5E:4D:BE:6B:7B:59
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:29:fe:55:ea:00:34:bf:d9:d5:59:52:70:fc:65:da:50:06:
35:2f:a7:39:c7:6c:45:a1:21:53:2e:ab:68:f7:b0:e7:42:cf:
13:38:f7:c9:3a:9e:14:44:28:cd:f3:a4:68:ee:9f:56:a1:ce:
ee:a6:24:21:30:9c:cc:bc:4a:0d:9c:2c:69:f9:0f:67:4c:34:
dd:71:2e:72:76:e3:45:d4:b7:92:db:ec:9c:7c:5f:c2:d9:96:
b6:a3:d5:bf:3e:c9:2d:3e:fd:92:d8:11:cd:c6:6d:6d:b9:0c:
54:41:3e:f6:87:36:a5:5f:b6:36:46:de:d5:13:a9:f8:45:36:
5e:ff:56:5c:e4:fb:5c:33:bf:1d:4f:27:2d:9c:74:e5:9c:94:
4d:34:25:c0:13:25:96:9a:c4:6b:60:28:3b:18:c7:5b:5d:51:
25:70:24:b4:0e:e7:fe:1d:c2:44:2f:18:cd:b5:f9:f4:72:12:
c3:86:b9:d8:b2:cf:d8:84:60:28:f8:d3:c2:76:12:b8:b0:1b:
a8:2f:71:f8:a8:33:cc:20:4d:d3:e7:72:4f:9f:94:2b:f9:9e:
cd:10:f1:47:44:2d:70:41:3c:40:bf:50:b1:aa:6e:e1:36:24:
80:6c:cb:9a:40:53:5c:af:d9:1c:9a:c1:91:79:43:a0:bb:62:
9d:57:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:10:47 2026 by rpki-client