Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: qnvqSF/2G9IitRY5fqmstOAxEs3ZaChAD1qf4kR/Y0o=
Subject key identifier: 97:F1:39:8C:BC:D6:0A:08:1A:36:F3:16:B7:F2:78:C0:12:A3:DD:4F
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019E9BF25A5F6F8520892DF16924FFC3FDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0587
Signing time: Sat 06 Jun 2026 08:00:11 +0000
Manifest this update: Sat 06 Jun 2026 08:00:11 +0000
Manifest next update: Sun 07 Jun 2026 08:00:11 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: UwA8mGumT72rS98Qdds0Kc15sXrtenfmnlamlKhq2A0=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:5a:5f:6f:85:20:89:2d:f1:69:24:ff:c3:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jun 6 08:00:11 2026 GMT
Not After : Jun 7 08:00:11 2026 GMT
Subject: CN=97f1398cbcd60a081a36f316b7f278c012a3dd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:76:dd:3d:56:76:03:0d:46:de:ca:39:2a:
97:45:78:67:3b:21:f1:28:3f:6e:a9:26:67:99:da:
6d:86:69:39:72:49:bc:4c:27:af:4a:7e:d6:61:18:
c7:9f:34:64:64:20:e5:ff:57:7d:48:b3:d1:16:1c:
21:c6:e4:d1:20:2e:9f:56:23:93:35:e9:05:f6:af:
52:eb:a2:0d:2a:38:0c:30:c6:64:c5:01:f3:bb:a9:
5a:f8:3d:c7:0d:97:a0:16:04:56:fb:cd:c1:8b:79:
47:49:1d:24:43:9e:1c:ae:01:44:c9:fa:ff:29:4a:
76:57:63:16:86:c8:e6:d6:83:b1:6b:c1:27:c3:3c:
e8:34:6d:a3:7e:18:39:e5:54:5f:c8:03:4c:2a:42:
3e:85:85:61:88:b2:6d:8f:c7:92:cc:44:8a:f7:79:
07:f3:63:06:e2:02:43:99:7d:1d:2c:6d:e3:cb:29:
ea:97:77:86:a7:4a:1b:98:9b:bd:d7:4d:6b:d0:52:
c8:fc:07:32:c3:c9:e8:b3:9c:34:e7:00:a7:19:4b:
9c:8c:9c:ce:59:d7:c6:07:c1:44:3e:2a:c4:18:a2:
b6:ff:3f:e7:c9:6a:1d:2d:ac:09:e1:58:04:96:65:
45:01:57:a5:60:14:a7:66:87:f4:22:43:6d:c7:f5:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:39:8C:BC:D6:0A:08:1A:36:F3:16:B7:F2:78:C0:12:A3:DD:4F
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:41:d1:3a:10:44:e9:eb:05:55:cb:58:12:ef:28:5c:46:
a9:ef:09:ab:92:db:39:9b:c3:e6:95:b3:b0:df:75:c4:79:f6:
f1:62:8f:c4:31:0c:a3:66:b2:35:db:48:9b:e7:87:f7:75:ff:
a9:97:e5:ff:ce:78:e7:5e:90:34:5f:2a:b6:0a:4e:a1:55:3a:
42:f0:41:15:c2:37:99:81:ed:70:83:94:81:ea:3b:06:c7:c1:
eb:d6:c7:f4:a0:cb:3d:67:ea:28:0d:61:03:97:57:85:2b:3f:
5b:31:53:cd:f3:59:2e:c0:7e:0e:68:72:2d:ee:e5:b7:da:87:
0a:84:9b:3d:0f:c8:c5:4f:dc:c9:e5:35:6e:4c:cb:2e:ca:25:
ca:dc:cc:f3:74:a8:7a:ce:70:53:ab:cc:0c:00:b3:37:cf:c9:
20:1f:de:67:a8:6b:4e:71:a1:5a:cb:09:ba:50:02:31:b6:68:
61:d1:64:bb:0a:f2:16:4d:2f:be:ff:c0:05:6b:3f:07:04:0f:
0b:11:07:7b:a8:6f:4b:7d:e1:65:a1:eb:1c:55:7c:6e:09:67:
5f:c4:d9:35:e4:86:32:e8:a4:04:b1:ba:1b:32:e3:dc:37:6f:
43:98:c7:81:90:7f:40:fb:d0:73:e8:d4:db:bc:22:6f:b7:da:
dc:8f:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:21:54 2026 by rpki-client