Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
File: ncIAmtRoV1bPSFCSRpxi4JndoKI.mft (raw, json)
Hash identifier: mwXJ1UaltS19r7OIvc82F6V16s55H4Kvo3pEslIFcZI=
Subject key identifier: 6D:8E:33:D0:28:0A:FF:27:92:5E:B1:99:05:96:F7:D7:28:43:E6:98
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 019EC1EE4563CABF5C218363F2B0013A1471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
Manifest number: 0D
Signing time: Sat 13 Jun 2026 17:01:18 +0000
Manifest this update: Sat 13 Jun 2026 17:01:18 +0000
Manifest next update: Sun 14 Jun 2026 17:01:18 +0000
Files and hashes: 1: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (hash: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=)
2: ncIAmtRoV1bPSFCSRpxi4JndoKI.crl (hash: j/aDl2HExP0/nT1EFXEu6rqfMB3c6CVCgHr3rUlJ4cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:45:63:ca:bf:5c:21:83:63:f2:b0:01:3a:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Jun 13 17:01:18 2026 GMT
Not After : Jun 14 17:01:18 2026 GMT
Subject: CN=6d8e33d0280aff27925eb1990596f7d72843e698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:15:56:e8:78:f0:92:b3:d9:4d:94:82:74:
95:64:39:72:27:08:8c:d6:1e:51:9f:d5:59:44:55:
a4:f9:2a:9d:57:fa:a2:67:e5:9c:81:68:2c:ab:db:
61:06:27:79:84:0e:fc:ef:11:07:99:58:2a:39:44:
28:db:a1:67:d1:bc:3a:d5:3c:64:d4:e8:5c:91:5a:
97:3b:aa:d0:db:f6:64:be:c0:41:f7:51:04:8f:15:
a1:cf:4c:d4:a8:6d:25:15:14:e7:b5:3a:c9:bb:f6:
57:82:86:c8:4b:ad:c3:79:18:11:e2:c7:f9:3b:5f:
7c:98:97:0e:f3:a2:c2:32:f7:44:1a:9e:70:1c:3e:
d6:7f:05:77:12:d3:c6:0e:14:1d:b3:73:e2:2c:d1:
6f:6c:7c:75:6b:8f:04:55:50:96:ca:f1:54:5a:9e:
56:12:c0:78:54:6b:bd:ab:9f:11:43:f3:2e:ff:9d:
81:92:9f:0c:f8:e2:a6:26:b0:66:75:f7:d2:7a:b2:
0d:01:42:e0:4a:1b:ef:de:d6:22:cf:90:59:d5:7c:
2f:0a:90:4e:87:ee:aa:78:66:62:de:e2:10:f1:25:
4f:d1:b2:3e:1c:47:10:15:b0:a9:21:f3:97:94:54:
24:42:6d:0d:06:ce:4a:96:c2:55:51:11:85:8e:50:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8E:33:D0:28:0A:FF:27:92:5E:B1:99:05:96:F7:D7:28:43:E6:98
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7e:8c:b5:50:37:92:4f:25:40:0a:bb:3e:8e:08:e6:28:cc:
61:35:83:2c:3d:8e:2f:42:a4:11:4d:39:e3:32:b7:9e:69:f0:
c5:34:bc:ad:ba:40:2f:81:1a:60:2d:ea:ab:c4:91:5f:9b:ee:
6a:c8:cf:cb:34:d1:d7:c5:79:64:d7:15:10:7a:58:96:6b:e8:
18:1f:99:90:8a:e5:b3:9d:6f:75:77:30:ff:e7:62:5c:90:b6:
40:a0:35:0d:4a:36:09:00:62:c8:45:48:87:95:4e:2c:56:b3:
10:2b:87:d5:c9:df:8d:a5:bb:97:9c:6a:f9:c5:c8:0e:ab:41:
79:20:31:ca:c7:28:5f:6a:f6:17:df:d8:8c:7e:33:ab:1b:3c:
13:75:88:6f:3d:75:5b:15:e8:55:3d:55:32:57:d8:42:14:1f:
bb:10:c6:fb:8e:b5:91:cd:f3:27:14:2d:01:6f:11:18:aa:45:
c8:72:33:b7:1e:04:41:5d:d9:ef:6f:2c:e0:43:67:5d:08:11:
ca:17:68:48:cb:a2:3e:63:dc:fc:8f:6f:a7:80:6b:cb:13:38:
6c:65:22:1a:6a:5c:13:64:4c:83:04:80:85:b6:d6:2f:3c:67:
99:fe:37:80:31:37:0e:9c:e7:55:9b:d7:bb:d7:f3:ea:e3:25:
5b:35:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:28 2026 by rpki-client