Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: rVVjlUF48KkdODEiSyhGmRwZhGcUw4wH7IH//g3zjdM=
Subject key identifier: 7D:1D:FF:5E:B6:98:83:38:73:C2:7E:88:A9:A8:7A:B1:5E:36:6D:FC
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019ED3BD02F295DAE26DEB0D68B85C5FA1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 02A4
Signing time: Wed 17 Jun 2026 04:00:39 +0000
Manifest this update: Wed 17 Jun 2026 04:00:39 +0000
Manifest next update: Thu 18 Jun 2026 04:00:39 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: DyAv++kLR8tY4o5WLKuSe20GoklXaj/bVQFsYC0s7ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:02:f2:95:da:e2:6d:eb:0d:68:b8:5c:5f:a1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Jun 17 04:00:39 2026 GMT
Not After : Jun 18 04:00:39 2026 GMT
Subject: CN=7d1dff5eb698833873c27e88a9a87ab15e366dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:4a:80:09:0b:06:ae:b2:ac:59:43:94:a3:
b3:18:74:bf:b8:cb:ee:76:ba:77:e5:7b:b5:de:a7:
d6:8a:d4:68:0c:ef:ec:b1:d3:68:3c:60:c5:5e:22:
a4:51:d4:f7:a2:98:93:c4:a2:1e:44:47:8f:6b:1d:
f8:01:08:0d:d7:b1:b7:77:79:6a:34:a1:e5:48:b6:
7b:0e:e3:e3:d8:e6:ed:a3:9d:55:bd:58:d1:cb:a6:
5d:b7:37:bd:b6:d7:c0:48:f1:8a:62:94:59:6d:c9:
e6:22:a3:b0:1f:47:41:ce:42:03:a3:32:4f:50:aa:
97:1c:f4:3e:99:2f:6b:b8:3a:fb:8f:13:38:a8:51:
7d:f1:f0:5a:16:f1:6f:c7:c4:41:56:6d:24:56:bb:
43:c9:75:42:2a:ec:03:fc:11:4a:8a:52:4a:7c:8c:
0a:07:60:e3:e3:d6:11:88:11:08:96:9f:8c:3f:dc:
9b:a7:6d:aa:68:14:30:70:8c:41:d4:be:4d:6f:40:
6c:29:f0:eb:55:c1:7c:14:06:23:b7:3c:d3:bf:ce:
b4:c7:39:cf:9e:e1:87:ee:8f:3a:68:53:95:80:ba:
5f:ff:45:3f:35:db:16:64:31:ca:2c:e3:6f:d8:25:
9e:4d:5e:8e:a3:e6:e3:16:25:93:be:ca:bc:0e:03:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:FF:5E:B6:98:83:38:73:C2:7E:88:A9:A8:7A:B1:5E:36:6D:FC
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e4:a1:32:7f:9b:97:67:f9:2a:db:09:17:35:f1:00:db:64:
60:1d:10:c3:62:3d:e9:4a:6a:3d:47:15:bf:dd:ef:d4:bf:d9:
a3:0d:bc:b1:eb:b2:af:d5:d7:6c:3d:57:43:5f:d6:af:97:65:
6b:a5:15:cb:97:ec:5c:cc:c8:fd:89:64:af:10:0d:13:a0:5f:
8e:f6:7a:59:f5:16:e7:e2:7e:50:ea:f2:45:cf:23:e8:62:9d:
f0:93:17:e3:8f:a6:52:68:28:84:a7:99:13:dd:6c:19:02:42:
9c:dd:de:03:24:62:50:4a:c0:75:66:d6:22:dc:e7:6d:ed:b7:
f3:ed:54:e9:92:67:b8:74:41:a7:05:27:3f:49:db:e7:2c:11:
fd:8a:9c:2a:b2:dd:eb:81:57:4f:c8:50:65:64:43:33:bb:ef:
bf:5f:b8:38:b9:fe:54:bc:40:d9:b6:8a:c2:f1:8c:c0:e5:74:
99:6d:86:5d:9e:f3:e6:4f:ad:07:66:b8:6f:8e:fb:d5:8b:78:
3c:27:6a:f0:26:10:85:9a:b0:01:56:c3:2e:a9:22:1d:dc:dc:
91:20:87:53:71:f2:01:e9:4a:f7:5f:52:db:e5:36:ad:a4:62:
33:34:d9:55:5f:79:54:92:50:ec:f5:20:0d:86:a7:69:f3:d1:
3f:c2:b4:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TvQLyldribesNaLhcX6HDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5
YmIxNDQwHhcNMjYwNjE3MDQwMDM5WhcNMjYwNjE4MDQwMDM5WjAzMTEwLwYDVQQD
Eyg3ZDFkZmY1ZWI2OTg4MzM4NzNjMjdlODhhOWE4N2FiMTVlMzY2ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh1KgAkLBq6yrFlDlKOzGHS/uMvu
drp35Xu13qfWitRoDO/ssdNoPGDFXiKkUdT3opiTxKIeREePax34AQgN17G3d3lq
NKHlSLZ7DuPj2Obto51VvVjRy6Zdtze9ttfASPGKYpRZbcnmIqOwH0dBzkIDozJP
UKqXHPQ+mS9ruDr7jxM4qFF98fBaFvFvx8RBVm0kVrtDyXVCKuwD/BFKilJKfIwK
B2Dj49YRiBEIlp+MP9ybp22qaBQwcIxB1L5Nb0BsKfDrVcF8FAYjtzzTv860xznP
nuGH7o86aFOVgLpf/0U/NdsWZDHKLONv2CWeTV6Oo+bjFiWTvsq8DgMbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0d/162mIM4c8J+iKmoerFeNm38MB8GA1UdIwQY
MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt
NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj
LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeShMn+b
l2f5KtsJFzXxANtkYB0Qw2I96UpqPUcVv93v1L/Zow28seuyr9XXbD1XQ1/Wr5dl
a6UVy5fsXMzI/YlkrxANE6BfjvZ6WfUW5+J+UOryRc8j6GKd8JMX44+mUmgohKeZ
E91sGQJCnN3eAyRiUErAdWbWItznbe238+1U6ZJnuHRBpwUnP0nb5ywR/YqcKrLd
64FXT8hQZWRDM7vvv1+4OLn+VLxA2baKwvGMwOV0mW2GXZ7z5k+tB2a4b4771Yt4
PCdq8CYQhZqwAVbDLqkiHdzckSCHU3HyAelK919S2+U2raRiMzTZVV95VJJQ7PUg
DYanafPRP8K0Fw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:27:29 2026 by rpki-client