Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: OobGRu8kB8rFueeoswgKNSJljY7HTTG0UDEYjXZKD8g=
Subject key identifier: AF:96:0A:FD:DE:27:FD:19:0F:74:E1:45:45:FF:16:21:20:61:1A:8B
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019CA9B38F15AF77166A6A9F179B5F2F7536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0485
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: ddjhNd7N05DU5oUroVL4+1yRJxwM8NPKpJ9tyHaPtHM=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8f:15:af:77:16:6a:6a:9f:17:9b:5f:2f:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=af960afdde27fd190f74e14545ff162120611a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:50:34:f2:5e:ef:fc:6e:3d:17:71:31:ea:16:
1a:c1:94:7d:01:d9:ae:d7:99:88:1a:3e:2d:16:9e:
22:de:65:9a:77:4f:94:95:37:e9:8b:49:e3:6b:0c:
b3:4b:1c:47:ef:cf:4a:da:cd:4d:6a:cb:ec:3c:6c:
37:be:53:54:45:86:dc:41:6a:dc:6e:ea:c9:de:ed:
29:7a:eb:8f:60:85:7b:72:61:51:87:61:71:c0:45:
1a:81:33:0c:ca:d8:d8:d2:97:0e:9d:50:01:3b:59:
47:05:52:19:f9:9b:e6:48:b3:d1:3f:28:a0:1b:79:
6b:7e:f8:ce:c1:ee:0b:a0:eb:ab:c2:87:4e:73:03:
a3:e3:72:f2:7f:68:3a:f1:79:b3:fb:2c:54:72:5c:
d9:d5:72:6a:ac:0b:93:81:cc:58:6b:08:90:d2:31:
cf:0b:e9:23:f8:af:d0:81:39:de:43:0e:0c:b5:e0:
5a:46:45:03:f8:0d:5b:dc:6d:6e:60:86:5f:a3:5a:
80:d3:26:f1:00:c9:04:2e:19:55:63:b0:bb:ac:ed:
a2:d5:ae:e1:ed:5e:ca:8b:2d:b1:ca:70:05:52:01:
c5:7e:f5:b6:99:c4:38:a9:d3:9f:9a:8b:7c:8a:10:
b8:ad:60:e8:b4:54:39:a2:25:cb:46:3a:e6:5e:38:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:0A:FD:DE:27:FD:19:0F:74:E1:45:45:FF:16:21:20:61:1A:8B
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e8:15:80:9c:7c:61:32:02:52:b4:a3:43:55:78:ac:fd:a0:
f4:7b:c4:ed:0e:37:25:4d:6d:5d:44:9e:73:8b:d4:bf:f1:3a:
13:88:e9:90:2f:1e:da:8f:c4:c1:81:b9:9c:67:8b:f5:bc:c8:
f8:7b:b1:58:05:36:eb:ea:96:20:18:6a:0f:af:a7:be:53:73:
5c:01:55:95:d0:8d:79:32:7e:79:72:7a:49:4e:4a:a2:a8:e6:
e7:1d:bf:4a:1a:7f:13:96:29:1f:f3:2c:1b:ee:3a:62:a8:58:
a0:58:e9:5e:66:12:a9:3f:da:f4:92:4a:32:f2:f8:7f:b2:91:
4e:cd:55:91:01:f7:ca:6c:e1:82:07:ea:4f:6c:f9:73:fe:15:
e3:59:ba:29:f3:3c:09:df:dc:4e:04:79:c0:82:d7:20:c9:81:
b1:fb:07:eb:d5:9e:3b:94:f1:aa:87:23:d0:da:3a:0d:cf:cd:
46:27:10:82:d4:b2:7b:ae:5a:b2:9e:b0:86:43:6d:78:61:c8:
e4:c4:fa:ba:df:29:a9:e6:bb:43:09:f3:5f:15:08:24:42:c5:
50:cb:22:46:cb:49:14:ae:3f:6b:92:73:9d:e5:eb:20:99:6b:
6a:67:93:7c:e5:06:cf:e2:62:7d:3e:57:d6:a2:e9:80:1c:17:
ff:26:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:06 2026 by rpki-client