Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: mNoBBTkmrEGAiAZZGg9sHAYH9K5OsZusKbSid41S67k=
Subject key identifier: F6:A7:F0:55:0E:B8:77:74:B2:7B:56:59:6A:34:F0:7B:F5:78:DC:3B
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019D992AFC709FD718359277CC614D41BED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0501
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: I5qqGEK0oTBEvQJKmgJVL78i6uxPHdvdRZ89JB7ksq0=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fc:70:9f:d7:18:35:92:77:cc:61:4d:41:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=f6a7f0550eb87774b27b56596a34f07bf578dc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:71:e9:17:fe:9e:ef:b7:2d:aa:c2:24:af:
b2:03:68:b7:bf:b1:00:54:b7:77:8c:c3:cc:69:e2:
44:d1:8e:ac:97:62:73:b6:cc:42:89:99:75:1b:eb:
39:44:bc:1e:85:1b:ac:5d:00:d8:72:15:c1:0c:1e:
5b:6e:9c:8c:68:fd:4e:e8:57:41:a4:b0:84:42:53:
ea:14:a8:75:6b:1f:c4:14:43:03:3d:8c:cd:52:4b:
d7:6c:48:ad:09:06:d1:fe:c8:60:cd:13:ce:9a:07:
44:84:09:a5:84:d6:a3:40:c4:cf:be:fa:59:62:98:
df:2d:31:0d:a9:d7:65:73:5d:72:01:b9:34:4a:9b:
4c:2a:9d:0d:a3:8e:f2:2d:2b:8c:63:41:7e:3c:4e:
4f:6e:a9:33:9d:87:34:35:54:87:87:78:92:2e:b1:
b8:6f:11:2f:21:b8:c6:0a:3f:c9:71:99:8b:d8:71:
cb:da:10:3c:64:f8:00:3e:e4:ea:22:60:f2:3f:d0:
c4:28:87:81:ec:43:1d:5b:53:ec:17:8f:55:9c:73:
96:03:7f:a1:a1:2f:b9:52:99:3a:00:8b:0f:87:a9:
ea:94:bf:07:13:5d:a7:86:e8:8d:86:7e:10:cc:41:
75:6b:0f:01:62:78:16:a2:dd:27:e9:eb:7a:56:20:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:F0:55:0E:B8:77:74:B2:7B:56:59:6A:34:F0:7B:F5:78:DC:3B
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:c6:b8:47:04:ed:07:c5:c9:0f:1d:40:0c:7b:5e:8f:ee:
f0:a1:1e:20:14:ab:77:b9:64:01:e5:e4:0c:93:d0:90:ee:67:
18:09:21:ea:9c:a2:c2:ac:14:de:37:c0:75:03:08:0f:93:36:
79:cc:9a:b0:d2:59:8c:50:53:c1:43:ef:b9:b3:b1:34:0f:c4:
84:6b:ad:96:ae:44:a2:79:df:43:fe:04:db:23:3b:46:60:14:
d4:ba:14:83:9b:2f:a1:84:66:5a:d4:ed:07:56:cd:cb:72:a3:
1d:27:f0:90:4a:71:2a:8a:69:80:86:12:9f:8a:f6:8d:ac:f7:
eb:73:7e:98:6d:9b:be:07:c9:9b:d6:56:be:1e:fd:48:75:7f:
33:63:66:90:3b:0b:be:2c:e1:d6:45:14:ab:3e:96:9b:ea:10:
7e:4f:a4:fb:90:d5:1c:7b:79:39:1b:e9:1e:56:9a:fa:1c:f5:
97:4b:f8:e2:5f:cf:c0:8d:e7:7e:13:e7:1f:f5:af:60:19:73:
3e:0a:ad:af:2f:a9:40:6b:e5:b8:ea:4b:17:b4:a3:4c:b3:24:
79:d2:d2:fe:10:18:f7:e1:c4:a6:5a:00:81:34:5e:6b:c2:28:
10:6c:81:34:53:e4:52:ba:95:39:df:ba:ae:17:e4:46:a5:cc:
be:2e:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:12 2026 by rpki-client