Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: x6Hyvp9lKL6bMizuyacbDKwXI5JnpBxTgYD/B++P8Go=
Subject key identifier: 86:EA:AC:3E:4D:17:E7:D0:80:90:88:99:2C:E8:38:98:CE:72:31:DB
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019FAAF532B5550A70BA04E66867C61C9D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1991
Signing time: Tue 28 Jul 2026 23:00:23 +0000
Manifest this update: Tue 28 Jul 2026 23:00:23 +0000
Manifest next update: Wed 29 Jul 2026 23:00:23 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: tGfBKQTxLNGk7Aqt3AreFmp0RFqZePuAhg9dIY6isg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:32:b5:55:0a:70:ba:04:e6:68:67:c6:1c:9d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jul 28 23:00:23 2026 GMT
Not After : Jul 29 23:00:23 2026 GMT
Subject: CN=86eaac3e4d17e7d0809088992ce83898ce7231db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:5b:1a:ee:c1:9a:69:f2:52:5a:20:30:a9:
40:ad:53:b0:03:4c:0c:95:ab:c5:c6:80:26:4d:09:
9a:03:3f:7c:c2:42:b2:e2:09:9a:51:6e:12:b2:40:
e1:72:d7:e5:76:27:ab:81:2c:0a:a5:70:e3:f2:69:
2c:75:35:1b:df:6b:35:c7:f2:a9:20:a6:82:22:09:
32:7a:75:02:2c:b0:2a:f3:4c:15:d8:5e:62:50:49:
2a:75:64:09:ba:dd:6e:4f:39:d7:fe:1a:e7:38:31:
4f:d5:d2:e8:01:55:73:0e:5c:a6:39:7f:31:d9:32:
4c:b9:bb:ce:30:fa:33:ed:3b:67:c4:46:0e:26:7f:
3a:dd:f9:c0:90:2d:83:61:03:14:75:0e:eb:da:db:
58:74:79:e3:2e:03:a3:6e:23:b2:c0:4d:db:c3:06:
75:6d:99:65:75:0b:9f:41:69:7a:ef:42:c6:85:2a:
55:d5:1c:22:d0:b6:ee:b3:39:57:f6:63:20:31:a4:
44:0d:ce:af:ad:55:69:83:62:bb:65:76:d4:db:b5:
28:8c:c5:6f:b9:a5:81:e4:48:b9:c1:fe:64:7c:6c:
7f:11:22:d4:b4:fe:f1:8c:38:d7:74:ed:8c:6d:bf:
3f:be:1f:7b:0f:ac:cb:7a:d9:60:c4:03:e7:41:c8:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:AC:3E:4D:17:E7:D0:80:90:88:99:2C:E8:38:98:CE:72:31:DB
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:57:43:80:f9:b3:de:ce:c9:23:ec:66:b7:c6:97:fd:f4:ec:
19:26:01:6e:8e:9a:f8:36:36:09:bc:10:7c:a7:81:eb:d3:b3:
8f:3f:52:27:4b:8e:dc:67:6c:7f:3b:c1:d1:d1:65:ad:3e:f5:
25:12:3b:95:f5:ba:97:ff:92:dd:ba:19:c6:1e:71:79:1f:2f:
a2:b0:93:66:99:b7:61:1c:c3:1d:99:bc:2a:af:c2:4f:5a:db:
61:6f:af:af:ff:5e:8b:8f:3f:c3:7a:3e:64:ee:b7:d8:4d:1d:
97:96:db:a3:d7:ad:10:ca:09:59:2f:95:21:76:a4:53:fb:c8:
26:77:05:62:de:2f:75:54:f4:03:eb:a9:a4:52:47:b3:01:23:
06:f5:4d:3b:35:eb:d5:d1:9f:7d:cc:5c:f7:1c:3a:c1:2a:ac:
e5:cd:78:f6:ce:7c:48:f7:01:f7:06:ff:df:4e:7f:3b:7b:af:
55:f4:5b:32:b4:21:94:0d:a4:54:e9:cc:2e:29:7f:33:ad:4d:
28:5b:e0:b9:f0:98:ad:42:aa:69:7f:5a:d1:2a:7b:34:b2:fd:
0b:f1:92:76:24:6e:eb:36:16:51:c1:d4:73:5d:75:df:b3:a9:
01:04:b5:e0:a7:b1:da:bb:ff:e9:3b:60:98:2c:41:0b:41:0b:
55:fc:91:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9TK1VQpwugTmaGfGHJ2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjYwNzI4MjMwMDIzWhcNMjYwNzI5MjMwMDIzWjAzMTEwLwYDVQQD
Eyg4NmVhYWMzZTRkMTdlN2QwODA5MDg4OTkyY2U4Mzg5OGNlNzIzMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BZbGu7BmmnyUlogMKlArVOwA0wM
lavFxoAmTQmaAz98wkKy4gmaUW4SskDhctfldiergSwKpXDj8mksdTUb32s1x/Kp
IKaCIgkyenUCLLAq80wV2F5iUEkqdWQJut1uTznX/hrnODFP1dLoAVVzDlymOX8x
2TJMubvOMPoz7TtnxEYOJn863fnAkC2DYQMUdQ7r2ttYdHnjLgOjbiOywE3bwwZ1
bZlldQufQWl670LGhSpV1Rwi0LbuszlX9mMgMaREDc6vrVVpg2K7ZXbU27UojMVv
uaWB5Ei5wf5kfGx/ESLUtP7xjDjXdO2Mbb8/vh97D6zLetlgxAPnQciCnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbqrD5NF+fQgJCImSzoOJjOcjHbMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFdDgPmz
3s7JI+xmt8aX/fTsGSYBbo6a+DY2CbwQfKeB69Ozjz9SJ0uO3GdsfzvB0dFlrT71
JRI7lfW6l/+S3boZxh5xeR8vorCTZpm3YRzDHZm8Kq/CT1rbYW+vr/9ei48/w3o+
ZO632E0dl5bbo9etEMoJWS+VIXakU/vIJncFYt4vdVT0A+uppFJHswEjBvVNOzXr
1dGffcxc9xw6wSqs5c149s58SPcB9wb/305/O3uvVfRbMrQhlA2kVOnMLil/M61N
KFvgufCYrUKqaX9a0Sp7NLL9C/GSdiRu6zYWUcHUc11137OpAQS14Kex2rv/6Ttg
mCxBC0ELVfyRsQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:49 2026 by rpki-client