Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: L2TcRIVXlhx17EUetV520N22HJCt0pHi8SYNlE2jCWM=
Subject key identifier: 35:05:27:24:09:78:BF:1E:E0:CF:40:A3:6D:E2:DB:00:0E:EB:38:E3
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019F94375A54BEA47C81DE4D2F9A1162A799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 113F
Signing time: Fri 24 Jul 2026 13:01:23 +0000
Manifest this update: Fri 24 Jul 2026 13:01:23 +0000
Manifest next update: Sat 25 Jul 2026 13:01:23 +0000
Files and hashes: 1: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: bb1ZM+XactKYGFQc4FC9JmLt9+a/scJIWh+wvKicoNM=)
2: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (hash: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:5a:54:be:a4:7c:81:de:4d:2f:9a:11:62:a7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Jul 24 13:01:23 2026 GMT
Not After : Jul 25 13:01:23 2026 GMT
Subject: CN=350527240978bf1ee0cf40a36de2db000eeb38e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:00:d3:31:60:50:1c:aa:b1:0a:b0:e7:36:
97:17:0b:c8:73:de:6b:27:70:ca:14:9e:47:3b:5e:
41:fb:02:0b:16:2d:02:52:2e:a0:37:17:70:d0:e8:
c6:7c:be:37:8a:9d:b6:0a:1f:62:e1:2f:74:c8:65:
11:c6:3b:94:f6:70:6f:12:38:f0:96:39:f4:08:4f:
03:9d:8a:1e:b2:a0:fb:3c:9e:32:78:dc:09:64:a9:
66:fb:63:66:a3:7e:8c:c2:74:6d:f8:ef:d8:88:86:
e2:df:a0:74:fa:ba:0d:1b:3a:8d:d5:5c:3f:80:c0:
46:43:62:7f:ad:5a:7f:7e:0a:d1:12:e9:96:88:27:
af:d4:81:a8:29:c2:04:2d:be:b4:c3:e7:8f:e7:44:
9f:f8:55:58:b0:b8:3e:ec:00:76:47:35:5b:9c:b4:
dd:05:30:2c:67:7f:e1:8d:f6:46:16:cf:21:0b:3e:
af:4d:0d:ee:3c:60:82:a3:68:bc:89:fa:ae:97:b6:
3f:45:f7:42:8c:38:bd:fe:b1:21:e3:d3:cb:ea:27:
18:49:86:7f:0b:64:8f:cd:01:05:7d:b0:35:78:55:
66:be:42:40:eb:da:6d:d0:04:6a:50:62:fa:f6:8d:
da:4a:f6:8f:5b:8e:7a:60:8e:a0:01:31:07:f7:9e:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:27:24:09:78:BF:1E:E0:CF:40:A3:6D:E2:DB:00:0E:EB:38:E3
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:ad:17:27:9a:ea:9b:85:48:92:b3:06:e8:3d:0b:88:0e:
96:16:f4:94:31:19:39:43:7b:d4:d9:79:ad:82:55:50:94:a7:
92:5e:e9:0f:85:18:66:b5:81:4d:55:22:0d:51:fc:24:ba:8c:
b6:3b:b0:cf:16:e0:bd:d0:85:72:47:49:8b:8f:97:84:d2:86:
ac:cf:3d:f1:dc:ec:05:4d:78:ba:ea:ca:de:45:35:37:13:13:
f9:69:33:9f:b9:10:e8:7e:1c:84:97:26:b1:5d:6a:9b:c3:96:
fa:8c:5c:68:8d:ac:0d:78:c6:0f:34:35:f7:ef:00:a8:00:29:
ff:cb:4c:b8:ca:f8:ad:67:8f:a4:50:c8:d0:ff:86:64:7d:d0:
31:71:58:69:5d:6e:49:ae:2b:14:3f:07:1b:52:a0:18:f9:24:
49:a0:3f:e5:23:be:c1:9a:7d:9b:a3:ce:1b:b0:f2:3d:93:ae:
3a:60:08:3e:a3:c2:cf:92:66:81:79:2f:e7:a4:a8:79:95:2a:
26:14:12:0a:8d:0a:9b:9f:d0:bf:39:b0:04:f3:95:61:cd:0f:
be:6b:12:f8:87:e2:8e:39:96:bf:b4:09:cd:e8:65:ee:6a:74:
6b:81:3c:05:3c:21:3d:97:d2:14:3a:d1:7f:74:30:37:0e:9e:
84:6a:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:50 2026 by rpki-client