Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: 2EXrCigH8EN4ZfvEUqbOBGy6APpu5w5R0Bv/CZR5GCM=
Subject key identifier: D5:2E:76:96:27:DC:5A:0B:8A:4D:37:B7:1B:55:99:BC:EE:19:3D:BE
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 019F9135D76C71B90130BB09602CED3D7198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 17D3
Signing time: Thu 23 Jul 2026 23:00:52 +0000
Manifest this update: Thu 23 Jul 2026 23:00:52 +0000
Manifest next update: Fri 24 Jul 2026 23:00:52 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: zBEzrOHWew171FKmlKDwTYWwQbmKGcV2H0RutC0U0Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d7:6c:71:b9:01:30:bb:09:60:2c:ed:3d:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Jul 23 23:00:52 2026 GMT
Not After : Jul 24 23:00:52 2026 GMT
Subject: CN=d52e769627dc5a0b8a4d37b71b5599bcee193dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:76:23:f3:b6:08:71:2e:0d:c7:bc:78:c7:
91:97:dc:49:07:97:53:47:d3:60:c3:34:79:cb:39:
3e:26:4b:98:80:29:79:41:5b:aa:dc:7f:29:9d:9c:
7a:3e:7a:58:84:bc:30:9f:28:9e:ac:0a:4e:f8:1e:
74:96:09:a9:98:a6:1e:3f:04:21:e5:ef:26:19:d0:
6f:c6:10:fe:ce:b8:c5:b3:16:49:05:81:73:45:b0:
93:97:da:6c:09:6b:8f:8a:dc:7a:f2:c5:67:24:df:
f2:c8:6c:89:80:db:ef:9f:80:69:fb:c8:bd:72:21:
5b:4c:50:e2:c9:1f:de:50:92:95:58:2f:ee:01:ac:
65:96:22:59:20:0e:08:16:4c:f5:f2:be:5d:79:55:
0a:70:74:92:e9:ec:f4:99:87:99:87:94:5d:b2:63:
42:53:a0:60:d5:4e:03:08:21:63:dd:51:81:65:ca:
5c:32:ec:88:93:34:d6:19:5a:6e:fd:2b:34:ef:29:
34:e6:7a:05:ac:6c:8e:40:c6:c0:89:96:78:b8:20:
9d:9b:76:76:9c:d6:90:b7:c3:6a:78:11:b0:89:c4:
0a:09:49:6a:9c:d1:2b:3b:f1:de:a8:6f:04:02:08:
f6:f2:98:bf:b0:af:a6:56:c7:30:89:cf:2b:8b:79:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:76:96:27:DC:5A:0B:8A:4D:37:B7:1B:55:99:BC:EE:19:3D:BE
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:5b:a5:b8:86:ce:40:b5:d3:67:9e:3b:7d:16:b9:d1:04:
93:97:29:9c:e2:15:49:6b:81:4e:4f:63:83:3c:b0:3e:af:b6:
0a:1e:2c:cd:41:d6:14:18:12:77:3e:3c:c6:54:b7:2b:58:6f:
57:c7:c1:14:bb:23:07:8e:3b:58:d9:42:04:86:a3:d0:fa:d7:
9f:c8:8c:2b:15:f7:2f:1b:30:b1:21:3f:9a:82:7f:a1:10:a9:
37:4c:a9:be:ad:9f:7b:a8:c4:8e:dd:23:7b:4b:44:68:48:a3:
ab:dd:9d:f9:c6:7f:14:aa:65:03:83:b8:1f:cf:5f:cc:94:3f:
d8:c7:d6:12:b0:ab:cc:a4:0b:d8:bc:7f:c3:06:69:cc:06:4c:
53:c7:45:b9:55:6f:0b:69:b0:ec:ba:6f:db:87:00:ab:36:e6:
7e:82:9f:62:5d:80:0b:3c:2f:7d:38:07:8f:60:c7:7a:6b:57:
61:a6:46:71:dc:63:eb:50:e0:d8:0d:3d:c7:4f:18:c7:e8:1c:
00:bd:fd:ab:cc:05:bb:fc:36:4f:6d:39:c1:2f:d2:34:50:8a:
c1:00:ee:6b:b9:ec:4d:e2:00:c3:52:88:ca:03:34:2b:69:cb:
54:e6:21:41:c1:d2:f6:ad:d6:6d:f5:7f:be:92:f0:ca:3a:d9:
df:49:dd:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNddscbkBMLsJYCztPXGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw
ODk3NWEwHhcNMjYwNzIzMjMwMDUyWhcNMjYwNzI0MjMwMDUyWjAzMTEwLwYDVQQD
EyhkNTJlNzY5NjI3ZGM1YTBiOGE0ZDM3YjcxYjU1OTliY2VlMTkzZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1R2I/O2CHEuDce8eMeRl9xJB5dT
R9NgwzR5yzk+JkuYgCl5QVuq3H8pnZx6PnpYhLwwnyierApO+B50lgmpmKYePwQh
5e8mGdBvxhD+zrjFsxZJBYFzRbCTl9psCWuPitx68sVnJN/yyGyJgNvvn4Bp+8i9
ciFbTFDiyR/eUJKVWC/uAaxlliJZIA4IFkz18r5deVUKcHSS6ez0mYeZh5RdsmNC
U6Bg1U4DCCFj3VGBZcpcMuyIkzTWGVpu/Ss07yk05noFrGyOQMbAiZZ4uCCdm3Z2
nNaQt8NqeBGwicQKCUlqnNErO/HeqG8EAgj28pi/sK+mVscwic8ri3l+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUudpYn3FoLik03txtVmbzuGT2+MB8GA1UdIwQY
MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt
NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx
LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInxbpbiG
zkC102eeO30WudEEk5cpnOIVSWuBTk9jgzywPq+2Ch4szUHWFBgSdz48xlS3K1hv
V8fBFLsjB447WNlCBIaj0PrXn8iMKxX3LxswsSE/moJ/oRCpN0ypvq2fe6jEjt0j
e0tEaEijq92d+cZ/FKplA4O4H89fzJQ/2MfWErCrzKQL2Lx/wwZpzAZMU8dFuVVv
C2mw7Lpv24cAqzbmfoKfYl2ACzwvfTgHj2DHemtXYaZGcdxj61Dg2A09x08Yx+gc
AL39q8wFu/w2T205wS/SNFCKwQDua7nsTeIAw1KIygM0K2nLVOYhQcHS9q3WbfV/
vpLwyjrZ30ndBw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:02 2026 by rpki-client