Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: I9eblOeL/BuXY0ZscczivHjTwSd3gdgxJOq/pLJ1mc4=
Subject key identifier: 70:D8:B0:62:A8:AE:E8:62:58:EC:2B:B7:42:F7:29:C6:AF:AF:00:D3
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019D389BB771A8A32FDC032880186D312F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 04CF
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: 8oS3gLok704DvnmjO1VJE1S/xlDtx5mOmMPt2gqsh/Y=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b7:71:a8:a3:2f:dc:03:28:80:18:6d:31:2f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=70d8b062a8aee86258ec2bb742f729c6afaf00d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:d3:b1:56:5e:fe:f1:b5:f8:7a:97:ef:98:
3b:e7:22:ca:ba:8d:1b:7e:ce:4f:bb:1f:22:10:97:
82:b7:3d:a1:62:a9:ae:e7:2f:49:47:7c:64:99:07:
ae:f9:43:26:6d:a9:50:8b:be:43:05:d7:d6:3c:9a:
d8:ff:09:be:29:02:43:c1:e7:9d:94:37:0f:d0:4d:
1e:f6:24:ef:92:17:ed:b1:2a:fd:c6:74:cc:2c:3b:
04:93:6b:57:19:ea:60:6b:01:47:48:e1:1a:68:d8:
44:bc:2b:fa:21:de:b0:34:fc:d4:da:4a:91:7e:3d:
72:f7:b7:94:4c:c4:68:bc:de:64:26:7a:ca:00:e4:
1e:26:ef:ce:e3:b5:f8:df:f6:34:8f:3b:70:1e:92:
68:ed:0a:d3:9f:ca:aa:45:61:ec:fd:20:90:41:93:
b2:db:dc:87:da:65:9d:10:cd:bd:59:05:97:25:b4:
74:61:ce:c2:50:d0:17:c3:71:0e:ec:73:88:90:25:
e7:35:ed:9d:e8:06:69:f1:89:28:14:fc:f7:b6:50:
85:c4:b0:88:06:47:85:20:18:ab:cd:04:0b:c8:c7:
22:e3:20:a4:79:75:19:f7:99:63:8c:96:7f:d5:79:
a0:ba:db:48:7c:da:0a:32:ac:b0:88:6e:2a:17:f6:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:B0:62:A8:AE:E8:62:58:EC:2B:B7:42:F7:29:C6:AF:AF:00:D3
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:9d:3b:fd:f5:8a:42:d3:58:4a:be:ad:58:a8:0e:b2:7e:
fc:14:2e:2b:38:a6:a6:a7:92:62:9d:2d:d3:a2:f9:a7:ef:b1:
f5:93:5c:d5:b2:18:5a:c4:93:05:5a:15:b6:3a:52:12:03:f4:
53:4d:d8:30:6a:06:34:a2:a0:29:13:fc:cc:78:a0:9e:7f:ea:
0f:c7:e8:b8:d2:af:df:6e:0d:dd:05:19:9e:36:f3:08:4b:07:
5f:aa:52:4b:8c:56:48:ae:27:29:f8:a9:73:6a:47:65:e5:95:
9b:eb:7f:4b:7f:82:a0:64:19:04:97:5a:60:12:c8:97:46:f9:
e3:98:8a:5b:fe:6d:e7:39:dd:8a:4d:ec:af:14:cf:51:76:d3:
f0:b3:c2:03:b7:5e:2d:af:c9:cf:70:38:02:41:f1:38:e3:42:
18:4f:7a:cb:fd:2a:47:7a:b8:2e:be:ec:25:04:84:e2:81:30:
32:80:b2:5d:d2:0b:2b:72:c1:0d:f3:11:34:fa:6c:91:d0:85:
77:53:35:f8:7a:b3:d3:cf:c6:0d:51:3e:6f:e0:2c:58:71:34:
ac:ee:b8:14:bd:58:72:0f:0e:c5:14:70:bf:c7:c3:a3:59:2c:
da:5d:ab:cb:95:4c:9d:60:b7:1d:83:d6:2b:14:36:06:4e:c9:
e5:b9:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:31 2026 by rpki-client