Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: lZ19wbzDURgP0kbMdyleYHtNSTGiKLPkdlXEqHZUAZI=
Subject key identifier: D7:53:19:FA:F7:C3:73:2F:C0:3B:B6:EB:F4:26:E4:2E:B9:B4:BF:04
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 019FA974D93DA74DA177F78CDE9FF55C27A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: C7
Signing time: Tue 28 Jul 2026 16:00:35 +0000
Manifest this update: Tue 28 Jul 2026 16:00:35 +0000
Manifest next update: Wed 29 Jul 2026 16:00:35 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: RDJeqHaRWy6ZIPd1r/+ExGLqHMCh+etheMdDXxNxkHI=)
2: akA3WKQrE51tHMkpOgAd-_y1_Ag.asa (hash: dxaxmm2hxgq3tryq+IYhfaO+SAsXr7C1xH72mLMcZF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:d9:3d:a7:4d:a1:77:f7:8c:de:9f:f5:5c:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Jul 28 16:00:35 2026 GMT
Not After : Jul 29 16:00:35 2026 GMT
Subject: CN=d75319faf7c3732fc03bb6ebf426e42eb9b4bf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:a4:12:22:a7:a3:40:80:d0:0a:42:f6:98:
41:80:80:bb:22:24:00:ee:42:61:e5:ae:96:20:a2:
2d:29:7e:6d:d4:27:2f:a5:de:d4:72:a0:dc:5e:36:
b4:63:97:17:ab:71:1d:89:6c:dd:31:f5:d8:ca:f2:
90:df:11:e3:13:32:52:af:e4:1b:8f:45:a3:51:cd:
0d:ed:a9:bd:e4:7a:bc:d8:05:9b:9c:48:22:0d:e3:
67:a8:ee:f3:4b:84:41:2e:a5:e6:3b:d3:46:be:22:
3d:f7:f6:37:37:bf:f7:03:87:61:b5:f4:5e:a4:d4:
d8:f2:98:04:1f:ac:64:df:6a:3f:a5:ea:51:f5:00:
dd:7c:cb:69:cc:79:56:8c:d6:89:67:5f:fc:28:b0:
77:6a:17:e6:68:92:e2:e7:c6:71:2a:a4:8d:7a:1c:
24:9a:11:bc:98:07:88:e7:c8:49:01:e8:18:8e:43:
a5:aa:24:09:bf:b3:51:17:c2:f1:e9:e6:f2:5b:c0:
89:fb:a8:9a:c6:d5:96:d9:2a:07:b2:d5:2c:2a:3e:
f6:04:66:e0:10:36:5f:9e:f3:ce:2b:c2:0a:bc:ca:
f7:4e:4d:c8:96:6f:01:bd:7e:cd:20:2a:e0:b5:f5:
e3:7d:3d:63:5d:8e:df:7e:1b:a9:fc:7b:de:fc:63:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:19:FA:F7:C3:73:2F:C0:3B:B6:EB:F4:26:E4:2E:B9:B4:BF:04
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:aa:78:c6:ec:c4:f2:8a:2e:97:52:16:25:a2:c4:ab:f8:3b:
89:73:74:ff:63:a3:4f:9a:c7:15:ae:99:30:8c:b9:04:d0:96:
fe:10:32:31:d2:2f:33:f5:41:47:66:db:a2:1a:e4:2d:04:4c:
07:b0:6e:84:07:a9:49:c6:34:f1:b4:11:e1:80:8a:0c:2a:2e:
2e:a7:5f:30:94:83:af:2e:98:16:a4:e1:b3:36:f4:69:83:5c:
86:50:dc:8c:ac:06:f5:2a:10:9c:48:c2:e3:5a:49:0d:d8:64:
0d:6c:47:3c:4f:7e:d3:5e:01:02:c0:60:05:12:77:f7:60:92:
70:10:5b:30:a6:05:25:b6:4c:85:b6:e8:dd:dd:bb:a4:c1:de:
6c:fd:3f:1f:80:48:e7:b2:32:8a:7a:eb:91:fa:b0:43:b3:d1:
47:fa:23:da:92:dc:30:0c:94:96:da:0d:3d:61:d5:02:1c:26:
44:9d:b8:2b:fb:ec:7f:eb:2c:06:e3:5b:81:16:3d:63:be:99:
a9:3e:50:c3:e7:bd:e2:c2:bd:ea:87:4f:e0:96:0d:45:0f:c2:
07:0c:e4:92:b4:7d:fe:77:15:73:59:e1:b9:fb:b6:98:8c:c4:
a2:97:7c:53:1d:ac:f0:36:72:b7:75:cc:66:99:02:de:74:d7:
06:0b:14:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdNk9p02hd/eM3p/1XCejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTA2ZDE0YTg0ZjU5YjdmZGY0MmM4ODEwMmU0ZWRlNjZj
Y2IxZTEwHhcNMjYwNzI4MTYwMDM1WhcNMjYwNzI5MTYwMDM1WjAzMTEwLwYDVQQD
EyhkNzUzMTlmYWY3YzM3MzJmYzAzYmI2ZWJmNDI2ZTQyZWI5YjRiZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DykEiKno0CA0ApC9phBgIC7IiQA
7kJh5a6WIKItKX5t1Ccvpd7UcqDcXja0Y5cXq3EdiWzdMfXYyvKQ3xHjEzJSr+Qb
j0WjUc0N7am95Hq82AWbnEgiDeNnqO7zS4RBLqXmO9NGviI99/Y3N7/3A4dhtfRe
pNTY8pgEH6xk32o/pepR9QDdfMtpzHlWjNaJZ1/8KLB3ahfmaJLi58ZxKqSNehwk
mhG8mAeI58hJAegYjkOlqiQJv7NRF8Lx6ebyW8CJ+6iaxtWW2SoHstUsKj72BGbg
EDZfnvPOK8IKvMr3Tk3Ilm8BvX7NICrgtfXjfT1jXY7ffhup/Hve/GM6FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdTGfr3w3MvwDu26/Qm5C65tL8EMB8GA1UdIwQY
MBaAFDTgbRSoT1m3/fQsiBAuTt5mzLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9CdEZLaFBXYmY5OUN5SUVDNU8zbWJNc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84OWZhZTctNGE1Zi00Y2VhLTk4YWUt
OWYzOTY5NzRkODFhLzEvTk9CdEZLaFBXYmY5OUN5SUVDNU8zbWJNc2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84OWZhZTctNGE1Zi00Y2VhLTk4YWUtOWYzOTY5NzRkODFh
LzEvTk9CdEZLaFBXYmY5OUN5SUVDNU8zbWJNc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqp4xuzE
8ooul1IWJaLEq/g7iXN0/2OjT5rHFa6ZMIy5BNCW/hAyMdIvM/VBR2bbohrkLQRM
B7BuhAepScY08bQR4YCKDCouLqdfMJSDry6YFqThszb0aYNchlDcjKwG9SoQnEjC
41pJDdhkDWxHPE9+014BAsBgBRJ392CScBBbMKYFJbZMhbbo3d27pMHebP0/H4BI
57IyinrrkfqwQ7PRR/oj2pLcMAyUltoNPWHVAhwmRJ24K/vsf+ssBuNbgRY9Y76Z
qT5Qw+e94sK96odP4JYNRQ/CBwzkkrR9/ncVc1nhufu2mIzEopd8Ux2s8DZyt3XM
ZpkC3nTXBgsUSg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:13 2026 by rpki-client