Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
File: ncIAmtRoV1bPSFCSRpxi4JndoKI.mft (raw, json)
Hash identifier: CVmbTLPbJTuIgwU3po8f22SMFcVHKyY7+Lyv0++B6ys=
Subject key identifier: 75:89:B1:87:D9:77:95:EC:46:E1:72:C2:C7:FA:E8:28:09:4A:9D:52
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 019FAB9AC8BBC1DA6A37F9DBDF2FA9571861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
Manifest number: 86
Signing time: Wed 29 Jul 2026 02:01:15 +0000
Manifest this update: Wed 29 Jul 2026 02:01:15 +0000
Manifest next update: Thu 30 Jul 2026 02:01:15 +0000
Files and hashes: 1: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (hash: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=)
2: ncIAmtRoV1bPSFCSRpxi4JndoKI.crl (hash: N34FDPMLUL0ng1t/Fj+Cphdx1n6M61MrLaZ2m8cRvjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:c8:bb:c1:da:6a:37:f9:db:df:2f:a9:57:18:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Jul 29 02:01:15 2026 GMT
Not After : Jul 30 02:01:15 2026 GMT
Subject: CN=7589b187d97795ec46e172c2c7fae828094a9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:37:f1:8b:1d:df:fa:f7:e9:30:79:42:25:
4b:d4:95:75:6f:93:2e:09:99:25:9c:05:5f:28:8e:
56:e7:61:d2:76:bc:36:d1:b2:fd:2a:42:74:f3:a4:
cf:46:b2:55:f7:1b:60:20:29:78:d1:46:17:cf:bb:
dc:c6:59:de:bd:da:97:6f:03:ef:7d:e8:4f:0b:76:
47:16:06:bc:d2:2b:e8:07:a1:92:75:67:03:28:02:
9a:bd:a9:ef:cf:ae:cc:5b:6f:1d:56:0f:fc:c9:64:
00:54:d4:83:35:e1:03:88:07:0e:0c:e9:78:c9:58:
ba:78:1b:7a:b5:7b:97:31:16:80:2e:76:15:40:40:
49:7b:9a:03:20:f9:3a:7c:cc:2e:cf:00:66:6f:90:
e1:7c:75:d6:db:60:e6:68:2f:2d:29:65:7c:f3:f2:
f0:96:ba:1e:9e:f2:cc:4c:c0:23:4c:c8:ea:a2:6f:
a3:73:41:5d:64:91:64:0d:01:70:a2:70:8e:af:1b:
f4:ce:29:ea:aa:bc:c3:3e:db:fd:c5:9e:3c:d9:2f:
b1:71:d0:3c:9a:ef:b0:cb:66:91:2d:49:5f:81:27:
77:28:52:e1:c6:0a:9a:29:6e:d2:41:a5:6b:30:87:
cf:84:1c:57:80:2c:05:78:0f:94:a7:d2:eb:25:a3:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:B1:87:D9:77:95:EC:46:E1:72:C2:C7:FA:E8:28:09:4A:9D:52
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d8:04:52:c3:48:c0:37:4d:48:3a:4e:2a:6e:55:09:a1:44:
46:71:d6:65:e6:17:a8:56:10:e7:7b:1b:82:f4:82:90:25:fe:
ad:00:19:c0:26:0c:f9:23:76:75:57:08:a3:2d:91:69:41:9a:
c8:26:19:1c:1e:74:f5:ec:a4:d4:0b:b3:b8:54:5b:85:6b:38:
8f:d6:db:93:86:b9:1c:7e:78:83:d0:43:b5:b1:2b:9f:d3:ba:
ed:db:b3:3d:9e:c2:8a:a1:f5:38:fb:01:11:96:ae:4a:d2:94:
97:58:ff:f4:8f:a6:a5:6c:01:b9:4a:20:e7:4c:82:51:fa:a0:
e4:f2:b7:50:14:5f:34:ee:b6:af:ac:18:0e:74:f1:11:74:94:
7a:df:ea:40:54:3d:c6:5b:14:00:fb:1a:7a:61:b8:e7:84:e5:
69:79:89:36:13:93:4a:5a:ce:ed:99:31:9d:a7:db:d9:1c:96:
11:b9:52:17:b6:bb:93:fd:7e:70:e6:25:4c:ba:2a:32:47:37:
b5:39:30:32:d8:e9:33:4e:8a:62:58:b1:d7:cf:c0:7c:c1:35:
56:ad:86:84:87:c0:ea:9a:65:0c:56:1f:3c:02:f3:46:53:1b:
db:b1:b4:b1:dd:b7:33:e2:ea:94:0a:97:72:1e:f4:45:3d:5c:
05:b8:de:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmsi7wdpqN/nb3y+pVxhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzIwMDlhZDQ2ODU3NTZjZjQ4NTA5MjQ2OWM2MmUwOTlk
ZGEwYTIwHhcNMjYwNzI5MDIwMTE1WhcNMjYwNzMwMDIwMTE1WjAzMTEwLwYDVQQD
Eyg3NTg5YjE4N2Q5Nzc5NWVjNDZlMTcyYzJjN2ZhZTgyODA5NGE5ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOU38Ysd3/r36TB5QiVL1JV1b5Mu
CZklnAVfKI5W52HSdrw20bL9KkJ086TPRrJV9xtgICl40UYXz7vcxlnevdqXbwPv
fehPC3ZHFga80ivoB6GSdWcDKAKavanvz67MW28dVg/8yWQAVNSDNeEDiAcODOl4
yVi6eBt6tXuXMRaALnYVQEBJe5oDIPk6fMwuzwBmb5DhfHXW22DmaC8tKWV88/Lw
lroenvLMTMAjTMjqom+jc0FdZJFkDQFwonCOrxv0zinqqrzDPtv9xZ482S+xcdA8
mu+wy2aRLUlfgSd3KFLhxgqaKW7SQaVrMIfPhBxXgCwFeA+Up9LrJaOn2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWJsYfZd5XsRuFywsf66CgJSp1SMB8GA1UdIwQY
MBaAFJ3CAJrUaFdWz0hQkkacYuCZ3aCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNJQW10Um9WMWJQU0ZDU1JweGk0Sm5kb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZGQzMzUtNDlhYy00MWY5LWI1YzMt
ZjhlYzhiZjE1YmFhLzEvbmNJQW10Um9WMWJQU0ZDU1JweGk0Sm5kb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZGQzMzUtNDlhYy00MWY5LWI1YzMtZjhlYzhiZjE1YmFh
LzEvbmNJQW10Um9WMWJQU0ZDU1JweGk0Sm5kb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtgEUsNI
wDdNSDpOKm5VCaFERnHWZeYXqFYQ53sbgvSCkCX+rQAZwCYM+SN2dVcIoy2RaUGa
yCYZHB509eyk1AuzuFRbhWs4j9bbk4a5HH54g9BDtbErn9O67duzPZ7CiqH1OPsB
EZauStKUl1j/9I+mpWwBuUog50yCUfqg5PK3UBRfNO62r6wYDnTxEXSUet/qQFQ9
xlsUAPsaemG454TlaXmJNhOTSlrO7Zkxnafb2RyWEblSF7a7k/1+cOYlTLoqMkc3
tTkwMtjpM06KYlix18/AfME1Vq2GhIfA6pplDFYfPALzRlMb27G0sd23M+LqlAqX
ch70RT1cBbjewg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:30:25 2026 by rpki-client