
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: 8L6+7K0Pc+4j7d7lZKyqjrlP2OTtf4AHucb1UrNxCKY=
Subject key identifier: FE:41:43:04:D0:B8:5D:01:74:19:FA:B8:92:6E:52:47:72:45:CE:21
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019FA861E8572BC5828CFA8C41341D02EC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0612
Signing time: Tue 28 Jul 2026 11:00:16 +0000
Manifest this update: Tue 28 Jul 2026 11:00:16 +0000
Manifest next update: Wed 29 Jul 2026 11:00:16 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: E6CRYebCMZnNGLIINW2841qg3ox6JKAOB8iDoVO6/ww=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:e8:57:2b:c5:82:8c:fa:8c:41:34:1d:02:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jul 28 11:00:16 2026 GMT
Not After : Jul 29 11:00:16 2026 GMT
Subject: CN=fe414304d0b85d017419fab8926e52477245ce21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:a2:85:d7:b1:f3:b8:27:6f:f2:2c:0f:81:
2f:31:bd:66:0d:e2:44:d9:d0:3a:0d:73:ca:0d:bd:
d6:65:73:8c:98:51:1a:9c:9d:14:07:47:45:e9:c8:
7f:1d:a5:a7:0a:9e:33:de:47:f3:f1:15:5c:ef:34:
35:f7:87:59:2b:25:48:48:24:2f:d8:40:97:fb:88:
b1:e4:72:b2:98:1b:87:07:c5:25:01:69:7d:50:43:
5c:96:5d:f8:a4:40:0e:77:56:d3:9d:d6:fd:6d:b7:
8a:d9:4e:e0:0a:3d:ab:9c:3e:e8:98:25:75:ce:a8:
02:0b:80:8e:17:5a:e8:ee:62:fc:23:92:f6:13:11:
f5:4f:6c:4b:9d:14:3b:06:1d:89:10:3c:4e:ec:3a:
6b:4a:12:16:10:06:7a:3c:5c:c3:5b:fc:5b:30:fb:
8b:17:a6:95:53:4c:e8:9b:4a:a4:d2:8c:aa:e0:28:
e4:a8:6d:78:88:e3:96:c9:f5:64:4d:a4:3f:ba:d7:
09:66:c1:49:a4:90:13:90:04:8a:7c:27:8e:e4:bc:
02:e6:c5:e5:f8:1e:7d:b5:e9:98:75:91:6e:4d:29:
1c:f4:24:50:e3:3c:4c:fc:46:09:d5:a0:0b:ed:ab:
b8:ca:e5:c6:14:cc:25:8a:ca:42:43:00:4c:3a:a9:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:43:04:D0:B8:5D:01:74:19:FA:B8:92:6E:52:47:72:45:CE:21
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:46:79:97:c8:b3:37:e5:73:41:1d:42:b6:f0:1d:ad:2c:f0:
dc:ee:13:da:8e:2a:36:01:d4:0b:62:1e:0c:16:33:4e:82:29:
24:ae:87:a6:f1:4a:2f:84:61:d9:70:ec:46:36:8a:f7:3f:c7:
e7:01:0a:bb:d8:44:2f:40:36:df:03:33:87:8a:d4:5b:64:aa:
95:3f:5f:74:18:38:c5:7c:66:82:e6:c8:00:f8:35:e7:bb:92:
6f:9d:3d:59:82:61:4c:bb:54:78:8d:76:ef:34:2f:0a:3d:4d:
b5:bc:e9:c9:32:27:fc:e4:55:ca:cb:ca:5c:4b:5b:76:e2:72:
9f:a9:fd:4c:95:b4:c7:41:47:fc:98:5e:5c:ad:d3:1f:34:23:
57:6a:c1:8e:82:e5:50:5e:08:09:d9:b4:2e:48:37:0a:c5:bf:
d8:cc:97:f8:5b:99:b2:24:28:5e:5c:55:22:37:28:6a:4d:dd:
67:3b:62:32:af:01:8e:c9:b3:d9:bb:08:a2:da:62:91:e3:69:
ed:c3:66:80:6b:69:18:76:46:c2:53:be:63:73:e4:f1:45:2e:
14:4f:17:ab:9a:e6:b0:83:7d:95:c7:3a:fd:e1:6c:8c:40:ed:
84:59:12:94:9b:f4:c7:f6:b3:a5:05:4e:d9:76:fa:ce:37:96:
89:47:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:52:31 2026 by rpki-client