Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: M2sBk+TjEIJABx/vjKvIyXxjOnl0V0tZD3QCJp1wbPw=
Subject key identifier: 14:FA:F4:29:4C:9D:25:56:BD:E5:34:67:21:9E:14:F1:C7:68:FA:9F
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019ED461EBB3B8C21891EA567BA2E16955C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1973
Signing time: Wed 17 Jun 2026 07:00:47 +0000
Manifest this update: Wed 17 Jun 2026 07:00:47 +0000
Manifest next update: Thu 18 Jun 2026 07:00:47 +0000
Files and hashes: 1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: D0UrzxgXvPxE+FfJdMYhIVCwbNsaVJo3cCrnFz5B/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:61:eb:b3:b8:c2:18:91:ea:56:7b:a2:e1:69:55:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jun 17 07:00:47 2026 GMT
Not After : Jun 18 07:00:47 2026 GMT
Subject: CN=14faf4294c9d2556bde53467219e14f1c768fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:47:c0:9c:5f:67:ae:3c:13:1c:ec:76:d4:
7a:63:4c:60:cd:47:68:4b:d5:48:26:ac:89:c8:ae:
60:7d:ba:af:d9:fd:9f:09:a4:15:da:25:2d:50:30:
4c:90:82:a6:03:33:fc:e3:ec:9c:15:d8:63:fd:9f:
97:a8:92:70:24:e3:55:62:c8:c3:0d:4b:a7:9d:55:
23:bf:6b:bd:17:27:ef:49:f4:ed:22:5e:12:e6:ed:
c5:3e:64:0f:f3:af:25:6b:81:6d:8b:74:1a:b9:27:
41:d4:64:1d:e4:f5:8b:42:b2:53:71:be:8a:1e:3c:
f4:1f:38:64:0c:31:2b:32:8b:0f:47:44:eb:f2:5e:
4f:42:85:27:82:b8:2e:56:55:69:6a:9b:0a:66:88:
d9:ad:c5:f1:a2:17:82:cf:1b:39:d7:28:da:c8:b6:
c0:c6:23:43:ff:10:b1:b2:5f:63:c0:93:2f:66:09:
c5:09:6c:27:7c:fb:a1:cb:43:69:d3:b8:05:93:52:
fe:51:fe:e0:b6:2a:6e:f0:35:82:d1:4d:a3:05:14:
b5:f8:ec:c9:bf:4e:56:5d:35:c7:ce:d7:cb:b9:d8:
a1:9f:99:37:71:0b:49:37:9f:bc:47:b9:dd:c4:ae:
6f:f7:b9:ae:07:e3:76:76:3c:a6:1f:a1:2b:ce:ac:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:F4:29:4C:9D:25:56:BD:E5:34:67:21:9E:14:F1:C7:68:FA:9F
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:4b:9e:9d:e7:7a:13:9d:01:e3:df:17:81:1e:32:6e:36:
78:78:c1:27:7f:9c:a6:60:dc:b7:b0:df:f2:09:62:d3:8d:8f:
aa:5d:61:fb:a5:49:8c:ab:1b:f7:4d:0c:9b:2d:f6:65:ed:97:
26:33:03:e3:91:c8:05:2b:53:52:b7:55:31:e1:94:ae:71:34:
dc:fc:51:49:a3:c8:2c:5a:f4:be:61:67:fd:c3:e5:67:a2:a8:
fc:83:37:57:c5:e6:b9:dc:b0:2f:4b:8c:73:c3:e2:f5:fd:78:
9b:10:fb:62:04:fa:72:da:7c:f3:ad:f8:33:7f:33:cb:c8:0e:
3c:2d:ce:cb:68:f8:87:b8:5a:69:da:f4:61:5a:fc:21:9c:79:
c9:98:c8:23:59:77:1b:f7:51:6b:47:68:ba:8a:4a:ec:0c:29:
9e:31:86:d4:5f:c2:f8:82:52:a0:5f:2d:8c:5c:49:fd:08:9f:
8a:9a:d3:68:6e:71:0c:7c:76:00:0b:0d:5e:bd:43:df:0c:15:
53:ce:aa:1a:21:fe:f3:36:9f:0f:d0:85:02:74:f6:ba:ee:74:
4c:8f:10:a4:6c:06:40:f9:e1:2d:19:31:97:8c:d4:f6:62:1d:
2d:87:33:2f:fc:83:d9:b0:49:b3:2d:f5:22:41:94:66:7e:6b:
cd:ad:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:18:18 2026 by rpki-client