Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: inGJoEJN20HDh+6zSHz2Ul9N/qgapv/uUJeCV3TzJck=
Subject key identifier: B8:D1:B1:7D:F1:01:59:9A:72:A4:0B:E2:23:60:3A:90:BF:2F:66:E6
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019F9248490CF515D6B8A0846895E4E25DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 0532
Signing time: Fri 24 Jul 2026 04:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:00:38 +0000
Manifest next update: Sat 25 Jul 2026 04:00:38 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: 0ViyAoMRoWmu9G3M6R3xWCR5E+nY1r6t+1FwpL78yJs=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:49:0c:f5:15:d6:b8:a0:84:68:95:e4:e2:5d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Jul 24 04:00:38 2026 GMT
Not After : Jul 25 04:00:38 2026 GMT
Subject: CN=b8d1b17df101599a72a40be223603a90bf2f66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:03:fe:57:b4:2b:80:db:48:0f:93:11:52:
35:da:4c:a7:9c:21:39:a3:6c:2a:5d:fc:6f:18:c0:
8c:f9:9a:21:0e:37:96:9d:e9:0d:5e:97:f2:6a:3d:
c0:2f:7c:a9:29:b2:fd:23:f3:1d:21:e8:2e:8d:29:
43:aa:1c:f4:fe:40:a2:e8:54:20:6c:b5:70:63:4f:
43:c9:97:f7:59:97:73:ac:eb:ff:3c:b0:0b:bb:16:
91:e4:ca:07:ca:ae:6f:5e:be:78:42:29:7f:a8:8b:
2e:92:5a:e3:97:d1:78:31:91:29:9d:71:81:70:0e:
e2:cb:d1:33:90:00:89:68:bb:6a:6a:15:a9:81:f6:
af:44:01:79:69:2f:01:6f:a0:13:05:c3:1c:a3:2e:
3f:89:40:07:d9:e2:f2:b0:76:e5:56:d2:ec:c0:ee:
39:75:c4:2b:4a:9b:98:3b:6f:62:77:74:2c:26:9a:
18:14:85:38:35:27:51:f1:94:87:a4:74:ab:1f:5c:
7a:36:35:83:ce:4f:73:73:4a:cb:2e:67:44:15:6c:
47:a6:9e:42:ea:85:22:c9:83:34:87:6d:47:aa:7e:
c6:84:16:18:3e:ef:07:9f:53:1a:66:0e:30:90:b3:
03:fc:a1:1e:2a:31:70:05:56:4a:55:72:f2:96:85:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D1:B1:7D:F1:01:59:9A:72:A4:0B:E2:23:60:3A:90:BF:2F:66:E6
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:52:7c:e3:f7:a0:c4:63:4a:c3:2e:a7:2f:ed:9b:8a:17:ad:
41:8d:55:84:a7:55:f1:9f:3d:c8:67:ea:ef:5a:f0:da:cb:72:
34:c1:85:2a:ec:cd:e4:4d:79:eb:58:d9:bf:5c:67:e7:18:ff:
c4:c3:f7:de:74:1d:12:b7:ba:21:50:15:c3:b4:fd:39:79:a8:
e8:a4:fa:7b:09:41:3f:50:aa:3c:d8:6d:68:de:38:9d:42:72:
64:4b:31:87:69:26:1e:24:74:55:54:6a:65:55:f1:f5:b4:b2:
67:86:aa:98:3a:a4:c6:a1:2a:2e:d8:57:39:71:20:92:b9:dc:
ca:b9:e0:ed:4a:7d:dc:c5:3b:e2:1c:4b:2c:ba:0e:53:31:78:
ae:1d:cc:3a:2e:03:c9:59:e0:f8:5e:4f:1f:20:ec:5f:8c:e5:
1e:fd:f2:cc:4e:a5:dd:fd:c0:bf:b4:ff:87:64:2d:78:76:20:
ae:ea:94:35:10:26:de:78:b2:2b:27:0b:5a:ea:43:97:e9:d8:
d5:90:47:c4:f4:33:e3:ae:cc:54:32:b2:7d:0c:72:95:d0:c9:
39:29:ce:85:87:d4:76:67:e7:57:21:cb:cb:1b:e9:45:7b:36:
1a:ef:25:66:bf:4c:5c:b4:db:e5:89:70:64:1b:cd:8a:f4:21:
3f:25:22:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSEkM9RXWuKCEaJXk4l3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky
NGY2NDMwHhcNMjYwNzI0MDQwMDM4WhcNMjYwNzI1MDQwMDM4WjAzMTEwLwYDVQQD
EyhiOGQxYjE3ZGYxMDE1OTlhNzJhNDBiZTIyMzYwM2E5MGJmMmY2NmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxekD/le0K4DbSA+TEVI12kynnCE5
o2wqXfxvGMCM+ZohDjeWnekNXpfyaj3AL3ypKbL9I/MdIegujSlDqhz0/kCi6FQg
bLVwY09DyZf3WZdzrOv/PLALuxaR5MoHyq5vXr54Qil/qIsuklrjl9F4MZEpnXGB
cA7iy9EzkACJaLtqahWpgfavRAF5aS8Bb6ATBcMcoy4/iUAH2eLysHblVtLswO45
dcQrSpuYO29id3QsJpoYFIU4NSdR8ZSHpHSrH1x6NjWDzk9zc0rLLmdEFWxHpp5C
6oUiyYM0h21Hqn7GhBYYPu8Hn1MaZg4wkLMD/KEeKjFwBVZKVXLyloWNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjRsX3xAVmacqQL4iNgOpC/L2bmMB8GA1UdIwQY
MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt
ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0
LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFJ84/eg
xGNKwy6nL+2bihetQY1VhKdV8Z89yGfq71rw2styNMGFKuzN5E1561jZv1xn5xj/
xMP33nQdEre6IVAVw7T9OXmo6KT6ewlBP1CqPNhtaN44nUJyZEsxh2kmHiR0VVRq
ZVXx9bSyZ4aqmDqkxqEqLthXOXEgkrncyrng7Up93MU74hxLLLoOUzF4rh3MOi4D
yVng+F5PHyDsX4zlHv3yzE6l3f3Av7T/h2QteHYgruqUNRAm3niyKycLWupDl+nY
1ZBHxPQz467MVDKyfQxyldDJOSnOhYfUdmfnVyHLyxvpRXs2Gu8lZr9MXLTb5Ylw
ZBvNivQhPyUipQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:51:51 2026 by rpki-client