Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: t9QHMzkddy+ijnfFiU2ll+/Sq4kvYqG+PlzbIg93KMw=
Subject key identifier: B7:BA:22:66:75:F7:DB:EE:B4:7A:CE:E4:29:6F:8C:60:2A:2E:7C:79
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019F9F9627521D87159FBBF71686C9A75E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 18:00:45 +0000
Manifest this update: Sun 26 Jul 2026 18:00:45 +0000
Manifest next update: Mon 27 Jul 2026 18:00:45 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: +qG6B3hR+r86vDAtH3/6Z4Ylcf4prmQPoaMNAqI55NY=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:27:52:1d:87:15:9f:bb:f7:16:86:c9:a7:5e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jul 26 18:00:45 2026 GMT
Not After : Jul 27 18:00:45 2026 GMT
Subject: CN=b7ba226675f7dbeeb47acee4296f8c602a2e7c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:1a:75:2d:70:29:f6:78:b6:96:5c:3f:70:
79:f8:48:5a:62:e7:dc:9f:9c:3d:2e:e4:c3:dd:27:
f7:41:f6:e6:65:69:cc:69:c4:a9:c3:be:d6:d1:43:
f4:b6:40:fb:86:ae:cb:82:a2:4d:a6:c4:ed:80:d0:
ab:5b:72:8e:5a:d8:ff:f1:53:5d:44:35:b6:be:b7:
4b:0a:41:32:e8:07:4f:4f:73:3f:82:d8:b1:30:ef:
3f:c9:01:f3:f6:f7:f1:f9:2b:ff:5e:1a:03:85:c0:
62:3b:cc:7d:af:8a:04:6e:9b:c2:6f:2f:90:52:08:
9b:ab:4c:cd:55:f8:78:2c:55:a1:98:75:98:a3:c1:
d6:08:0c:6f:6c:ab:ed:07:7d:5e:4a:c6:77:c4:3f:
a9:ce:86:96:f7:cf:46:6b:6c:20:ca:27:97:76:51:
5f:3d:1a:48:4c:6c:31:d2:80:dc:ab:99:c2:12:2f:
b4:8e:c9:37:5f:9d:9b:fa:a4:4f:d4:fd:6a:44:3e:
a5:66:0b:b0:3e:7b:d8:6c:23:14:06:eb:c1:dc:37:
69:dc:a6:16:88:ad:6c:25:c1:86:13:1b:83:0a:ed:
14:4f:81:64:ba:8b:1d:10:62:1b:48:44:f4:4f:89:
d1:f2:f6:17:3f:bf:d9:50:2c:c5:59:b0:fa:47:fb:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:22:66:75:F7:DB:EE:B4:7A:CE:E4:29:6F:8C:60:2A:2E:7C:79
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:4f:25:dd:3a:da:fe:75:34:ad:07:83:db:20:26:ba:bd:
5a:5a:1a:d8:98:91:9d:a8:aa:d2:fa:cd:94:df:d6:a7:62:65:
93:60:fe:4b:e9:3b:e0:22:04:d8:e0:30:9d:cc:07:8f:43:5d:
4b:f1:cc:0d:5e:d6:de:41:66:b9:20:70:6d:32:4c:6c:85:91:
74:f6:b8:4a:f8:be:bd:91:ea:fd:16:48:d4:c7:1c:0a:d8:0b:
66:63:d9:a4:6f:51:45:27:c2:70:76:2d:88:07:65:7d:4e:59:
0f:f9:be:c4:95:d5:7d:c2:76:61:07:d5:34:e7:22:72:32:d0:
69:36:5f:05:88:1b:a0:0f:b4:16:7a:c5:b3:2a:64:8b:ef:cb:
d9:35:80:2c:71:ba:08:7a:5f:d3:28:0f:b7:70:ae:4a:ce:52:
17:0d:cf:66:0f:13:9c:19:29:e1:6e:95:be:c0:8a:e7:8b:9a:
0a:9e:8a:1b:ba:55:59:f9:41:24:31:c3:67:58:08:29:16:ff:
b0:de:f4:17:63:ad:4f:10:84:81:eb:21:af:60:34:a4:51:91:
3b:d1:25:5c:40:36:30:7a:bb:93:11:06:dd:84:3b:13:5a:aa:
65:b9:a3:e2:c6:51:56:73:7e:cf:63:64:ba:e9:aa:fd:8f:0a:
f1:1c:0e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+flidSHYcVn7v3FobJp14KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjYwNzI2MTgwMDQ1WhcNMjYwNzI3MTgwMDQ1WjAzMTEwLwYDVQQD
EyhiN2JhMjI2Njc1ZjdkYmVlYjQ3YWNlZTQyOTZmOGM2MDJhMmU3Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9EadS1wKfZ4tpZcP3B5+EhaYufc
n5w9LuTD3Sf3QfbmZWnMacSpw77W0UP0tkD7hq7LgqJNpsTtgNCrW3KOWtj/8VNd
RDW2vrdLCkEy6AdPT3M/gtixMO8/yQHz9vfx+Sv/XhoDhcBiO8x9r4oEbpvCby+Q
Ugibq0zNVfh4LFWhmHWYo8HWCAxvbKvtB31eSsZ3xD+pzoaW989Ga2wgyieXdlFf
PRpITGwx0oDcq5nCEi+0jsk3X52b+qRP1P1qRD6lZguwPnvYbCMUBuvB3Ddp3KYW
iK1sJcGGExuDCu0UT4FkuosdEGIbSET0T4nR8vYXP7/ZUCzFWbD6R/sx7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe6ImZ199vutHrO5ClvjGAqLnx5MB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoBPJd06
2v51NK0Hg9sgJrq9Wloa2JiRnaiq0vrNlN/Wp2Jlk2D+S+k74CIE2OAwncwHj0Nd
S/HMDV7W3kFmuSBwbTJMbIWRdPa4Svi+vZHq/RZI1MccCtgLZmPZpG9RRSfCcHYt
iAdlfU5ZD/m+xJXVfcJ2YQfVNOcicjLQaTZfBYgboA+0FnrFsypki+/L2TWALHG6
CHpf0ygPt3CuSs5SFw3PZg8TnBkp4W6VvsCK54uaCp6KG7pVWflBJDHDZ1gIKRb/
sN70F2OtTxCEgeshr2A0pFGRO9ElXEA2MHq7kxEG3YQ7E1qqZbmj4sZRVnN+z2Nk
uumq/Y8K8RwO0w==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:14 2026 by rpki-client