Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: ciKkcVVeePzakrNPVRNQRYL0DzYXwynmkWKAcWop5dc=
Subject key identifier: D2:39:2B:9A:09:6B:B6:39:7E:C2:AC:49:B7:88:37:01:CB:60:AF:33
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019F859F5EBBF6FCDCE99467C2C5C8BB7BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0600
Signing time: Tue 21 Jul 2026 17:00:41 +0000
Manifest this update: Tue 21 Jul 2026 17:00:41 +0000
Manifest next update: Wed 22 Jul 2026 17:00:41 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: fP7qAEEQJaz/lF+DwkBScwjX0ToeePTtpDhaXjZksvM=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:5e:bb:f6:fc:dc:e9:94:67:c2:c5:c8:bb:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jul 21 17:00:41 2026 GMT
Not After : Jul 22 17:00:41 2026 GMT
Subject: CN=d2392b9a096bb6397ec2ac49b7883701cb60af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:d3:bc:c9:30:9a:75:1e:ec:b1:48:0c:ed:
22:41:b7:77:aa:11:06:a2:dc:02:76:be:e5:2d:3f:
cb:69:0d:cf:42:8d:9a:9c:09:89:45:4e:cb:1e:46:
ac:bb:eb:cb:05:48:59:09:60:7d:e3:07:57:74:0a:
04:77:65:82:fc:25:67:df:6a:52:97:f3:8f:3f:c4:
78:39:c1:4b:9f:b3:d5:36:ff:9c:72:eb:a4:05:40:
17:9f:32:29:e0:f7:b4:be:05:aa:42:ba:cd:23:1a:
2b:8a:01:b0:83:03:f0:d6:01:9f:91:79:69:d1:bf:
bb:8d:cc:9b:7f:d1:4b:b7:50:b6:7b:56:24:df:f1:
ce:31:5f:3a:9a:ce:c0:60:c1:a7:7f:53:dd:e9:4c:
c6:10:fd:ef:ca:6c:e6:9b:fc:14:bd:e7:7a:42:f6:
7b:46:4e:8a:95:49:28:94:c4:47:39:bd:9f:70:12:
b4:ba:b2:01:11:5e:f1:cf:fb:44:c6:9c:a3:70:09:
ba:30:4b:a3:98:71:a9:dc:4f:37:0f:99:a2:ab:f2:
0d:2a:97:6c:51:b5:19:45:8f:cf:01:86:c1:04:9c:
47:6d:6d:b6:b0:bd:bb:b2:3a:d0:3b:72:11:41:2e:
48:c4:a9:34:b8:17:76:86:83:b2:e9:32:0a:81:a7:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:2B:9A:09:6B:B6:39:7E:C2:AC:49:B7:88:37:01:CB:60:AF:33
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:72:4f:e3:a7:50:d3:d3:05:04:22:11:3d:f5:4a:c5:c8:62:
5e:f6:31:c9:27:88:3e:24:0c:77:a1:4d:1d:bc:f5:21:7f:3b:
c1:1a:1d:ef:45:5f:2a:64:11:93:a0:97:cb:98:c2:31:d7:e9:
e3:fd:41:d4:4b:c8:ad:15:f5:6c:0b:c8:4e:f2:2d:65:b9:ec:
ef:a8:e4:bb:53:4d:f0:f7:80:96:55:1b:07:c6:56:4f:c0:f3:
5e:c5:5f:c3:2d:31:c1:78:42:21:30:a0:f6:87:5c:da:ec:68:
b4:26:ee:1f:01:5b:d2:db:44:f2:89:76:6d:19:16:d3:2d:c9:
e9:07:16:ce:d8:60:c1:31:93:21:53:e0:f6:e8:28:a6:a2:dd:
b5:79:65:bc:20:56:02:58:84:06:bd:ce:dd:16:3e:0a:21:53:
15:83:aa:27:0c:5c:d3:16:8c:2f:20:cd:65:52:6f:3b:e1:61:
c9:32:89:d8:b0:47:d3:d5:3e:f0:dc:8e:ea:39:30:73:3d:f5:
ad:3f:66:24:64:78:0c:62:16:0a:88:ad:92:9b:c3:e0:96:6a:
50:d7:7b:48:9a:5e:b4:f0:2e:57:38:e0:32:fb:53:34:04:d5:
60:5f:63:fe:75:8b:c6:06:12:67:27:ba:79:7b:21:51:5b:47:
b6:db:87:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn1679vzc6ZRnwsXIu3uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk
NWJhOTYwHhcNMjYwNzIxMTcwMDQxWhcNMjYwNzIyMTcwMDQxWjAzMTEwLwYDVQQD
EyhkMjM5MmI5YTA5NmJiNjM5N2VjMmFjNDliNzg4MzcwMWNiNjBhZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEbTvMkwmnUe7LFIDO0iQbd3qhEG
otwCdr7lLT/LaQ3PQo2anAmJRU7LHkasu+vLBUhZCWB94wdXdAoEd2WC/CVn32pS
l/OPP8R4OcFLn7PVNv+ccuukBUAXnzIp4Pe0vgWqQrrNIxorigGwgwPw1gGfkXlp
0b+7jcybf9FLt1C2e1Yk3/HOMV86ms7AYMGnf1Pd6UzGEP3vymzmm/wUved6QvZ7
Rk6KlUkolMRHOb2fcBK0urIBEV7xz/tExpyjcAm6MEujmHGp3E83D5miq/INKpds
UbUZRY/PAYbBBJxHbW22sL27sjrQO3IRQS5IxKk0uBd2hoOy6TIKgadDfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI5K5oJa7Y5fsKsSbeINwHLYK8zMB8GA1UdIwQY
MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt
NjFhNmQ3MmFjNDljLzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj
LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3JP46dQ
09MFBCIRPfVKxchiXvYxySeIPiQMd6FNHbz1IX87wRod70VfKmQRk6CXy5jCMdfp
4/1B1EvIrRX1bAvITvItZbns76jku1NN8PeAllUbB8ZWT8DzXsVfwy0xwXhCITCg
9odc2uxotCbuHwFb0ttE8ol2bRkW0y3J6QcWzthgwTGTIVPg9ugopqLdtXllvCBW
AliEBr3O3RY+CiFTFYOqJwxc0xaMLyDNZVJvO+FhyTKJ2LBH09U+8NyO6jkwcz31
rT9mJGR4DGIWCoitkpvD4JZqUNd7SJpetPAuVzjgMvtTNATVYF9j/nWLxgYSZye6
eXshUVtHttuHcA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:56 2026 by rpki-client