
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: VNHG9U1e6vYa/NyPWca9xHfSZsNukGcc71VlD9vczSc=
Subject key identifier: B6:D5:1E:FB:C8:CA:CF:80:AB:C2:2A:40:39:B6:E1:19:3E:49:DD:A6
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019FACE4751C68AE3A249D39DD7335070BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0D20
Signing time: Wed 29 Jul 2026 08:01:20 +0000
Manifest this update: Wed 29 Jul 2026 08:01:20 +0000
Manifest next update: Thu 30 Jul 2026 08:01:20 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: DqmFlOKcoRxDfnnH2CCURO2dUl/Q8ZliKRlmwnpXXyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:75:1c:68:ae:3a:24:9d:39:dd:73:35:07:0b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Jul 29 08:01:20 2026 GMT
Not After : Jul 30 08:01:20 2026 GMT
Subject: CN=b6d51efbc8cacf80abc22a4039b6e1193e49dda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:93:e5:48:82:ad:b3:31:a8:37:bb:f3:2f:
2d:09:92:04:d0:9f:72:3e:df:f4:29:37:10:aa:2e:
ca:3b:7f:f7:87:db:61:1b:fe:48:e7:d8:b2:d0:dd:
f9:77:a0:5d:15:19:2a:e0:c2:dd:08:b4:b0:c5:34:
74:2b:57:0a:2a:ee:1a:16:04:6d:46:db:b2:9c:e2:
d3:26:46:8e:52:d9:1c:68:66:b4:a5:66:d2:1f:2a:
05:5e:2e:db:80:24:c1:26:f6:1c:c0:f0:ef:03:52:
b3:ea:a5:50:c7:18:e9:0e:fe:ce:ee:6d:85:b0:3f:
bf:fa:e8:6f:55:58:c2:b9:de:09:e7:3d:34:1a:5f:
9d:9d:53:97:bc:b2:e7:ec:49:67:53:88:03:7b:fd:
c9:ae:d7:e9:cd:3b:9c:32:70:dd:59:4b:ac:f2:96:
c2:dc:96:76:0c:f6:83:83:45:a4:8f:01:d9:ff:80:
a7:00:ce:4b:f2:cc:3d:6e:3b:00:bf:04:09:ac:a9:
2e:06:b8:79:46:f8:41:db:99:5f:e9:b9:b6:4b:32:
fb:e4:60:76:81:03:85:11:cd:49:86:17:0f:b1:9e:
7b:de:2b:92:fd:e8:6c:e4:89:3f:e6:28:ff:0b:d1:
b3:e7:e1:1b:04:35:f3:9b:4b:99:06:7b:04:9f:37:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:1E:FB:C8:CA:CF:80:AB:C2:2A:40:39:B6:E1:19:3E:49:DD:A6
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6e:f1:84:21:b6:8a:b5:08:14:ed:a8:5b:3d:e2:de:77:bb:
97:93:f1:d4:9f:b0:42:70:03:9f:5e:51:78:6f:a2:66:67:c3:
ae:97:ab:0f:40:ac:c0:f7:4f:8d:e2:af:23:c2:f9:58:79:05:
a1:1a:c5:bb:56:fe:0e:11:71:e5:97:62:6f:17:f3:3d:4b:57:
0f:43:3d:c5:2e:a5:88:6f:51:93:f0:a0:ea:8d:a9:36:11:bf:
75:8b:fb:55:29:53:14:7e:ed:35:6c:52:6c:e2:51:2d:c7:7c:
01:26:33:d0:f1:72:4c:55:85:03:2d:7b:41:5b:23:55:77:e6:
7a:ef:70:df:5d:44:d2:71:43:9f:81:30:2e:4a:ac:93:40:39:
f1:4b:9c:01:73:36:5a:0f:0f:fe:45:ea:53:7e:df:93:53:33:
13:ea:2f:5a:86:0a:56:be:35:60:13:0e:5f:1a:3c:23:3d:d3:
46:4b:bb:45:04:50:f6:0d:76:94:6b:6f:46:38:ca:7c:77:6d:
cd:5c:6e:ce:e1:af:49:8a:dc:b3:3e:8d:36:89:5f:ee:03:40:
08:45:32:1b:0d:09:73:d5:6a:f6:02:16:6a:8b:73:1b:03:f5:
d7:12:6b:a0:4e:ee:de:5a:36:9d:52:36:bb:15:d1:f7:ea:71:
de:45:17:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5HUcaK46JJ053XM1Bwv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj
Y2JlMmIwHhcNMjYwNzI5MDgwMTIwWhcNMjYwNzMwMDgwMTIwWjAzMTEwLwYDVQQD
EyhiNmQ1MWVmYmM4Y2FjZjgwYWJjMjJhNDAzOWI2ZTExOTNlNDlkZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNeT5UiCrbMxqDe78y8tCZIE0J9y
Pt/0KTcQqi7KO3/3h9thG/5I59iy0N35d6BdFRkq4MLdCLSwxTR0K1cKKu4aFgRt
RtuynOLTJkaOUtkcaGa0pWbSHyoFXi7bgCTBJvYcwPDvA1Kz6qVQxxjpDv7O7m2F
sD+/+uhvVVjCud4J5z00Gl+dnVOXvLLn7ElnU4gDe/3JrtfpzTucMnDdWUus8pbC
3JZ2DPaDg0WkjwHZ/4CnAM5L8sw9bjsAvwQJrKkuBrh5RvhB25lf6bm2SzL75GB2
gQOFEc1JhhcPsZ573iuS/ehs5Ik/5ij/C9Gz5+EbBDXzm0uZBnsEnze3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbVHvvIys+Aq8IqQDm24Rk+Sd2mMB8GA1UdIwQY
MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt
OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0
LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOm7xhCG2
irUIFO2oWz3i3ne7l5Px1J+wQnADn15ReG+iZmfDrperD0CswPdPjeKvI8L5WHkF
oRrFu1b+DhFx5ZdibxfzPUtXD0M9xS6liG9Rk/Cg6o2pNhG/dYv7VSlTFH7tNWxS
bOJRLcd8ASYz0PFyTFWFAy17QVsjVXfmeu9w311E0nFDn4EwLkqsk0A58UucAXM2
Wg8P/kXqU37fk1MzE+ovWoYKVr41YBMOXxo8Iz3TRku7RQRQ9g12lGtvRjjKfHdt
zVxuzuGvSYrcsz6NNolf7gNACEUyGw0Jc9Vq9gIWaotzGwP11xJroE7u3lo2nVI2
uxXR9+px3kUXbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:02:56 2026 by rpki-client