Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: JxYiI+SvonuRdQ8d8xfrK1Cz62oZeGETHo+nPhGjvhs=
Subject key identifier: 6B:65:A1:FD:B1:83:0E:35:37:2D:4F:F8:41:AD:D1:48:2D:72:42:C5
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019E1C7D7DE47F5FED84BB2007B2CF637698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0545
Signing time: Tue 12 May 2026 14:00:46 +0000
Manifest this update: Tue 12 May 2026 14:00:46 +0000
Manifest next update: Wed 13 May 2026 14:00:46 +0000
Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: jvjxoXtKre3CUis6sPneWhh++0ifPOEZhWjEAsisnhI=)
4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:7d:e4:7f:5f:ed:84:bb:20:07:b2:cf:63:76:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: May 12 14:00:46 2026 GMT
Not After : May 13 14:00:46 2026 GMT
Subject: CN=6b65a1fdb1830e35372d4ff841add1482d7242c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:6f:df:89:36:b2:6f:c8:97:39:25:15:8f:
2c:23:3d:c7:ed:fa:4e:05:16:74:15:75:ad:58:09:
ee:46:af:96:2d:45:28:fd:c9:bb:bd:c6:f3:f6:fc:
13:68:bd:f7:c9:2c:37:49:97:50:b6:05:c9:d8:62:
66:46:59:f8:6c:d4:e8:38:b2:e1:18:ef:d2:20:d9:
52:c9:3a:8a:3f:71:8d:31:eb:b4:74:a2:9b:ff:5f:
ea:3f:8c:2c:fc:9a:91:1f:25:42:dd:98:86:58:18:
aa:b8:64:5c:f7:82:75:d8:06:45:a0:c6:39:22:36:
d7:06:c5:31:b0:5a:ab:bc:ab:59:04:ca:38:5b:8d:
9b:d0:35:c1:03:ab:b3:d0:43:1c:01:da:6a:02:ea:
61:22:c4:87:a9:07:ab:29:4e:d3:73:e6:c5:81:6f:
4a:da:dc:60:e4:16:71:8c:f6:35:a0:f6:d5:cb:82:
a3:dd:45:3a:76:59:32:19:95:b7:e2:f8:fe:73:4c:
0b:bb:4c:71:45:26:eb:03:60:a4:5b:f3:3e:a6:97:
bd:55:5a:ff:64:06:5f:b4:f6:c4:92:ab:10:d7:f1:
6d:14:43:01:8c:28:8f:1c:19:7b:6c:3b:c1:c9:42:
93:ab:4e:66:a0:20:dc:f1:c1:9f:a0:df:2c:06:84:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:A1:FD:B1:83:0E:35:37:2D:4F:F8:41:AD:D1:48:2D:72:42:C5
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:95:e6:12:47:29:4b:f0:97:0d:4a:90:07:5f:b6:44:e7:cb:
93:eb:58:d5:dd:78:df:76:c9:8f:73:82:8a:c2:62:1c:9a:90:
91:f2:32:ab:de:8e:95:95:a2:b0:4f:cb:3b:5f:b5:7e:b3:d8:
7c:49:d0:f3:4b:0f:5c:00:c6:1e:8e:0a:a1:01:63:34:c9:d5:
13:45:19:aa:5e:4a:5b:9c:5a:6a:8e:72:9f:e2:b1:d9:cd:23:
03:8d:4a:f6:d5:61:c9:db:5a:9a:3c:0d:6e:92:30:fe:7c:91:
d7:a8:1f:6f:02:82:2f:ea:80:d0:65:0f:b0:7c:ed:f9:78:4c:
36:64:ad:7f:da:79:f4:73:b2:38:12:cf:17:66:25:4d:5c:23:
fd:cf:87:2d:eb:e0:63:98:6f:61:33:a5:2d:dd:4d:1f:8c:04:
7d:99:e8:b2:1b:3a:3c:2b:96:da:b5:9f:4f:d4:52:6b:94:36:
b2:7e:7c:cd:c4:d3:4e:17:a9:f4:dc:35:17:f9:ac:28:79:8d:
2a:d5:1a:d7:6e:88:b4:7c:ac:b4:07:72:f5:b5:ef:9f:ff:ac:
8f:8e:46:b3:37:f0:7c:44:4b:6a:0f:68:76:b5:4e:67:26:91:
8f:1c:b9:99:ab:3b:66:e9:01:a7:2a:0c:d3:92:95:52:2a:a4:
0b:c9:7c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfX3kf1/thLsgB7LPY3aYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk
NWJhOTYwHhcNMjYwNTEyMTQwMDQ2WhcNMjYwNTEzMTQwMDQ2WjAzMTEwLwYDVQQD
Eyg2YjY1YTFmZGIxODMwZTM1MzcyZDRmZjg0MWFkZDE0ODJkNzI0MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPtv34k2sm/IlzklFY8sIz3H7fpO
BRZ0FXWtWAnuRq+WLUUo/cm7vcbz9vwTaL33ySw3SZdQtgXJ2GJmRln4bNToOLLh
GO/SINlSyTqKP3GNMeu0dKKb/1/qP4ws/JqRHyVC3ZiGWBiquGRc94J12AZFoMY5
IjbXBsUxsFqrvKtZBMo4W42b0DXBA6uz0EMcAdpqAuphIsSHqQerKU7Tc+bFgW9K
2txg5BZxjPY1oPbVy4Kj3UU6dlkyGZW34vj+c0wLu0xxRSbrA2CkW/M+ppe9VVr/
ZAZftPbEkqsQ1/FtFEMBjCiPHBl7bDvByUKTq05moCDc8cGfoN8sBoSX+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtlof2xgw41Ny1P+EGt0UgtckLFMB8GA1UdIwQY
MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt
NjFhNmQ3MmFjNDljLzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj
LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZXmEkcp
S/CXDUqQB1+2ROfLk+tY1d1433bJj3OCisJiHJqQkfIyq96OlZWisE/LO1+1frPY
fEnQ80sPXADGHo4KoQFjNMnVE0UZql5KW5xaao5yn+Kx2c0jA41K9tVhydtamjwN
bpIw/nyR16gfbwKCL+qA0GUPsHzt+XhMNmStf9p59HOyOBLPF2YlTVwj/c+HLevg
Y5hvYTOlLd1NH4wEfZnoshs6PCuW2rWfT9RSa5Q2sn58zcTTThep9Nw1F/msKHmN
KtUa126ItHystAdy9bXvn/+sj45GszfwfERLag9odrVOZyaRjxy5mas7ZukBpyoM
05KVUiqkC8l8xA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:54:18 2026 by rpki-client