Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: m9eNUEvvPveiMDTSkGwaaAEi0X9WPTEPaHwn4mK+5oA=
Subject key identifier: 59:A6:92:34:AA:FA:92:E3:56:37:FF:44:11:15:D4:A7:49:61:9B:2D
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019EC0A3DC101DA3E3F6399919EB66557E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 059A
Signing time: Sat 13 Jun 2026 11:00:24 +0000
Manifest this update: Sat 13 Jun 2026 11:00:24 +0000
Manifest next update: Sun 14 Jun 2026 11:00:24 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: Q2fr3jQgK8OdZEaI0uur51E88Nn36gWa7LbR851N74I=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:dc:10:1d:a3:e3:f6:39:99:19:eb:66:55:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jun 13 11:00:24 2026 GMT
Not After : Jun 14 11:00:24 2026 GMT
Subject: CN=59a69234aafa92e35637ff441115d4a749619b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:28:a1:60:d4:69:6f:ac:07:02:d0:1a:1d:
28:0f:f5:76:c1:bc:f8:26:a9:d6:4b:08:f3:f9:7d:
d8:fc:32:ac:3f:04:93:dc:bf:5f:23:da:43:ca:c3:
e7:52:6a:df:a4:2a:1b:ed:7a:b9:22:37:2e:fb:d4:
ca:d2:63:1a:ca:e9:92:3c:51:87:7d:45:3e:97:ea:
37:1b:ac:2c:57:45:18:0d:03:17:7d:f7:fa:01:71:
4e:47:e4:b3:8d:15:d0:f4:7b:37:45:34:91:60:00:
7a:33:c8:56:46:54:07:f1:f9:61:f7:bc:34:d6:dd:
6a:57:32:78:62:58:77:9c:3b:92:3d:b8:aa:89:9e:
94:9e:de:22:cd:39:c4:44:3b:34:f9:1a:36:ac:8a:
e2:5d:37:df:72:0a:bb:90:7f:4a:64:f7:8c:52:66:
ed:08:5d:b0:54:fc:7f:af:ac:c5:19:6a:91:d3:c4:
af:68:62:a4:f5:69:f3:93:c5:ed:2f:4a:04:90:04:
24:20:bc:fd:79:73:ff:40:af:15:04:e6:27:fe:27:
fe:b4:e5:05:95:4c:18:25:b4:8d:b8:ed:51:72:f8:
54:11:4c:6b:ea:8b:02:39:71:b5:f8:07:2f:2d:09:
76:81:22:9b:cc:d8:b3:cc:25:78:fb:65:19:3a:2c:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:92:34:AA:FA:92:E3:56:37:FF:44:11:15:D4:A7:49:61:9B:2D
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fd:e4:60:12:48:dc:9f:83:af:68:0d:06:d4:2e:28:fd:5d:
e0:ba:a8:c8:18:ea:ce:2c:59:54:91:36:0a:38:9c:97:23:48:
82:92:39:7e:63:76:39:0d:b0:84:27:0d:65:5d:be:9b:1a:66:
7e:60:2e:ea:e0:24:57:97:12:76:e9:03:8e:96:e7:87:13:21:
af:2e:18:4e:b6:aa:d0:c9:22:77:45:16:12:cd:88:9f:87:4b:
47:dc:4d:d9:8a:44:31:29:93:f2:d1:ec:6c:64:36:fc:8a:7a:
5a:a8:59:36:1c:70:26:25:8b:8b:c5:f8:71:c4:8a:29:3f:66:
56:34:3b:29:e0:90:f2:05:22:8a:93:0b:10:5c:d4:c6:3f:e9:
c2:c9:c9:df:49:52:40:9c:7e:cb:a4:b1:70:ac:b7:5b:ab:4e:
54:3d:4d:8a:41:b4:af:02:a2:a9:c9:76:6c:72:87:36:3d:72:
01:82:ff:8e:e5:53:c2:04:e7:e4:39:f3:bb:8a:1a:d7:bd:85:
53:3c:9f:73:f8:a4:40:f3:6b:94:35:6b:fe:60:46:94:f1:a7:
de:99:b5:84:7f:3f:db:61:f7:d1:bd:84:4c:41:8d:d4:23:be:
d9:a6:9e:0b:94:76:20:92:1e:e7:ea:d7:3e:73:91:90:55:8d:
cf:e8:3d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao9wQHaPj9jmZGetmVX6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk
NWJhOTYwHhcNMjYwNjEzMTEwMDI0WhcNMjYwNjE0MTEwMDI0WjAzMTEwLwYDVQQD
Eyg1OWE2OTIzNGFhZmE5MmUzNTYzN2ZmNDQxMTE1ZDRhNzQ5NjE5YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYEooWDUaW+sBwLQGh0oD/V2wbz4
JqnWSwjz+X3Y/DKsPwST3L9fI9pDysPnUmrfpCob7Xq5Ijcu+9TK0mMayumSPFGH
fUU+l+o3G6wsV0UYDQMXfff6AXFOR+SzjRXQ9Hs3RTSRYAB6M8hWRlQH8flh97w0
1t1qVzJ4Ylh3nDuSPbiqiZ6Unt4izTnERDs0+Ro2rIriXTffcgq7kH9KZPeMUmbt
CF2wVPx/r6zFGWqR08SvaGKk9Wnzk8XtL0oEkAQkILz9eXP/QK8VBOYn/if+tOUF
lUwYJbSNuO1RcvhUEUxr6osCOXG1+AcvLQl2gSKbzNizzCV4+2UZOiyP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmmkjSq+pLjVjf/RBEV1KdJYZstMB8GA1UdIwQY
MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt
NjFhNmQ3MmFjNDljLzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj
LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf3kYBJI
3J+Dr2gNBtQuKP1d4LqoyBjqzixZVJE2CjiclyNIgpI5fmN2OQ2whCcNZV2+mxpm
fmAu6uAkV5cSdukDjpbnhxMhry4YTraq0Mkid0UWEs2In4dLR9xN2YpEMSmT8tHs
bGQ2/Ip6WqhZNhxwJiWLi8X4ccSKKT9mVjQ7KeCQ8gUiipMLEFzUxj/pwsnJ30lS
QJx+y6SxcKy3W6tOVD1NikG0rwKiqcl2bHKHNj1yAYL/juVTwgTn5Dnzu4oa172F
Uzyfc/ikQPNrlDVr/mBGlPGn3pm1hH8/22H30b2ETEGN1CO+2aaeC5R2IJIe5+rX
PnORkFWNz+g9nw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:57 2026 by rpki-client