Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: T23ljRPxMn70scZgNazgFwucTln1009AYzy0/FjUQ6Q=
Subject key identifier: 1B:BF:53:29:0E:C4:F1:E2:B9:FD:7E:08:41:0D:4D:78:31:A0:AD:EB
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019F9400127D5719FFE10783F2A0F211E815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 12:01:00 +0000
Manifest this update: Fri 24 Jul 2026 12:01:00 +0000
Manifest next update: Sat 25 Jul 2026 12:01:00 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: PYH/Q22drNVI9bvmTClRP5ghWzCWlDYkch550+A8q/U=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:12:7d:57:19:ff:e1:07:83:f2:a0:f2:11:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jul 24 12:01:00 2026 GMT
Not After : Jul 25 12:01:00 2026 GMT
Subject: CN=1bbf53290ec4f1e2b9fd7e08410d4d7831a0adeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:d7:e1:4c:8e:3e:b7:60:e9:95:95:8b:7f:
e8:02:ed:79:61:8c:e8:53:1a:25:ac:cf:63:3f:7b:
1d:ad:a5:cc:d0:3f:b7:0c:81:c5:d2:fc:de:5f:7b:
33:11:7a:01:46:e3:e1:7c:b0:79:e4:fd:3a:c2:94:
e4:53:f9:76:4a:d3:28:33:d4:fc:36:9d:79:60:6a:
1b:f4:38:d2:82:97:d3:0b:fd:af:59:d4:83:aa:9c:
27:6f:55:64:e8:68:90:87:e2:94:c1:4b:b8:55:c3:
7f:c1:50:9f:1d:32:42:a8:fc:b5:2b:39:01:f3:39:
a3:3c:be:eb:7a:30:63:60:13:f6:b1:86:1e:09:1b:
ae:6c:e9:77:36:1c:38:c6:cb:91:18:8a:ab:1e:42:
6d:50:e2:1a:c7:5b:83:de:b2:30:e4:ea:bd:16:b8:
73:d4:ff:63:51:d7:dd:2e:57:e6:9a:79:ac:92:dc:
e4:09:b7:2c:60:28:a2:7d:e7:e8:76:07:2e:20:84:
d6:3d:29:51:0c:1b:38:96:83:86:6f:24:fd:03:df:
1b:4a:e5:fc:55:0f:35:41:79:6e:d3:03:f4:94:ee:
f2:39:bb:73:54:66:1e:37:11:fc:43:58:5f:52:5f:
62:b5:c8:f4:63:37:25:8b:ef:be:26:e5:1a:23:8c:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BF:53:29:0E:C4:F1:E2:B9:FD:7E:08:41:0D:4D:78:31:A0:AD:EB
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:0a:21:09:ee:1a:b4:79:2e:52:b9:9d:cf:71:5a:da:a7:
24:e6:41:60:11:02:7e:c7:c9:f3:36:fa:c1:0b:a9:73:c5:22:
49:0d:c3:87:39:77:41:a1:57:df:7e:8b:15:70:09:6c:ae:67:
67:91:2a:44:c8:cc:a5:59:68:ed:d4:85:7a:ac:64:d5:04:e9:
13:b7:25:14:65:cb:f7:17:b3:bf:c3:6c:47:9e:c0:81:2c:8e:
56:d9:d1:05:5f:e8:ba:74:8d:b4:17:91:58:79:f9:fd:e1:aa:
5c:46:0c:26:5a:23:f7:76:89:d1:3a:86:71:2d:ae:1b:3b:ee:
02:d2:47:48:62:24:96:0f:11:24:d0:62:24:51:af:c0:ef:9b:
04:1b:88:4c:ad:dd:a1:60:d9:36:f8:87:24:bd:c5:91:d4:db:
f9:76:ec:d1:f6:4c:34:4e:28:6a:d0:dd:91:b4:1c:8a:7f:b9:
a9:46:82:0d:92:9c:15:9d:34:b2:05:ba:d5:0d:34:a4:09:aa:
f2:cd:b4:33:3b:7c:51:7a:1f:82:43:e2:dc:82:5a:5f:61:7f:
58:f6:a2:10:e4:4a:90:4b:59:61:2e:05:01:a4:81:13:59:e6:
61:5f:8f:76:11:29:36:c7:f7:ca:77:1d:4d:b3:7e:b9:7f:40:
c2:72:6d:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UABJ9Vxn/4QeD8qDyEegVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjYwNzI0MTIwMTAwWhcNMjYwNzI1MTIwMTAwWjAzMTEwLwYDVQQD
EygxYmJmNTMyOTBlYzRmMWUyYjlmZDdlMDg0MTBkNGQ3ODMxYTBhZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZbX4UyOPrdg6ZWVi3/oAu15YYzo
UxolrM9jP3sdraXM0D+3DIHF0vzeX3szEXoBRuPhfLB55P06wpTkU/l2StMoM9T8
Np15YGob9DjSgpfTC/2vWdSDqpwnb1Vk6GiQh+KUwUu4VcN/wVCfHTJCqPy1KzkB
8zmjPL7rejBjYBP2sYYeCRuubOl3Nhw4xsuRGIqrHkJtUOIax1uD3rIw5Oq9Frhz
1P9jUdfdLlfmmnmsktzkCbcsYCiifefodgcuIITWPSlRDBs4loOGbyT9A98bSuX8
VQ81QXlu0wP0lO7yObtzVGYeNxH8Q1hfUl9itcj0Yzcli+++JuUaI4x7yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu/UykOxPHiuf1+CEENTXgxoK3rMB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWUKIQnu
GrR5LlK5nc9xWtqnJOZBYBECfsfJ8zb6wQupc8UiSQ3Dhzl3QaFX336LFXAJbK5n
Z5EqRMjMpVlo7dSFeqxk1QTpE7clFGXL9xezv8NsR57AgSyOVtnRBV/ounSNtBeR
WHn5/eGqXEYMJloj93aJ0TqGcS2uGzvuAtJHSGIklg8RJNBiJFGvwO+bBBuITK3d
oWDZNviHJL3FkdTb+Xbs0fZMNE4oatDdkbQcin+5qUaCDZKcFZ00sgW61Q00pAmq
8s20Mzt8UXofgkPi3IJaX2F/WPaiEORKkEtZYS4FAaSBE1nmYV+PdhEpNsf3yncd
TbN+uX9AwnJtKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:22 2026 by rpki-client