Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: KjQkh67YCnfctnNayVO9ralBQQ5u5qWDE40Ap5hRWDo=
Subject key identifier: B1:08:15:40:36:F4:DF:9C:E7:5E:FA:60:46:3A:90:A9:5D:7D:6A:75
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019EC148B6C36C539533237E31A81EB5412C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 13FF
Signing time: Sat 13 Jun 2026 14:00:28 +0000
Manifest this update: Sat 13 Jun 2026 14:00:28 +0000
Manifest next update: Sun 14 Jun 2026 14:00:28 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: Jv40I9LXf4A3wJpXekD5JCCt5eLfWOdySv3AG4UMv/4=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:b6:c3:6c:53:95:33:23:7e:31:a8:1e:b5:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jun 13 14:00:28 2026 GMT
Not After : Jun 14 14:00:28 2026 GMT
Subject: CN=b108154036f4df9ce75efa60463a90a95d7d6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:38:39:d8:6e:bc:1b:d0:88:14:59:01:17:
57:87:e7:b0:7d:31:e8:84:f7:d6:0d:30:82:ae:4a:
ba:58:41:54:ad:bd:00:b9:52:94:77:e5:6e:08:d0:
ee:c7:9f:24:d4:ff:f8:74:ce:e0:58:4e:70:47:5a:
a3:a3:32:8c:43:5e:0a:64:90:50:77:b7:1a:b8:13:
48:d3:2b:fe:38:fe:0c:95:58:c8:38:08:d3:94:db:
4e:d6:ee:8f:31:21:68:b9:7c:58:38:07:89:d5:37:
8b:be:af:4d:30:8b:29:6b:e9:ae:f1:91:ef:29:92:
f5:1e:3a:92:7c:2a:8f:a0:5a:13:3c:e9:f0:93:72:
da:14:2a:93:44:8d:dc:ec:29:d5:95:2b:64:61:db:
91:ab:88:3e:55:57:ec:24:70:67:d9:4b:1a:46:19:
5d:9a:fb:c4:85:29:96:40:59:43:d3:f0:ac:9b:e1:
31:e8:c1:e5:73:b3:62:d2:70:dc:75:63:43:bf:2f:
4c:fd:0d:0e:16:1d:8c:08:dd:3d:2e:36:de:26:db:
17:66:9f:21:88:10:26:20:0f:7f:70:d0:bc:86:5f:
75:f7:d8:d0:2f:bd:54:be:b3:09:2e:7a:58:36:73:
51:7b:5a:a7:cb:c1:eb:33:e1:92:bd:e9:15:23:02:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:15:40:36:F4:DF:9C:E7:5E:FA:60:46:3A:90:A9:5D:7D:6A:75
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:b1:77:50:40:3b:4d:46:8b:79:d5:d3:fa:21:d6:83:1a:
ce:52:8a:17:f1:ee:b8:5f:6c:83:c4:b7:2b:87:20:f5:79:0f:
53:70:cd:7f:ec:d7:8a:7b:b4:61:4e:de:b9:17:96:ea:e4:e0:
bb:b9:a7:9b:aa:a9:8c:90:12:e6:11:ee:28:7d:a3:fd:16:39:
4c:32:b1:b5:ee:ac:7b:0b:04:4e:d3:3b:7e:d7:71:05:d7:f3:
3b:92:46:bd:82:9e:f3:af:fe:2c:a4:8f:6c:94:ce:de:52:17:
bf:11:a7:c7:45:2a:1e:7b:78:c1:33:de:61:f1:24:52:3f:75:
b8:61:54:e2:68:be:c8:f5:a3:e2:5e:c3:3b:94:cc:8e:93:b5:
fb:38:c4:bb:c9:3e:04:23:e4:c8:cc:ac:2f:6d:72:3e:92:bd:
c9:7a:a5:74:b6:82:92:98:e3:34:23:3d:85:54:ca:a4:03:07:
8c:d0:5b:95:81:91:41:b6:f0:0e:04:63:80:14:69:81:46:66:
11:11:a9:9f:90:6c:33:6b:71:d9:21:43:9e:e4:c3:85:4d:8f:
70:f5:d0:31:50:c0:8e:a3:d0:1f:ff:ee:28:37:74:59:bd:ea:
14:22:48:92:6a:09:d2:bf:43:37:0f:75:90:26:39:4b:71:1a:
41:1f:41:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSLbDbFOVMyN+MagetUEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy
YWQ0ODEwHhcNMjYwNjEzMTQwMDI4WhcNMjYwNjE0MTQwMDI4WjAzMTEwLwYDVQQD
EyhiMTA4MTU0MDM2ZjRkZjljZTc1ZWZhNjA0NjNhOTBhOTVkN2Q2YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQY4OdhuvBvQiBRZARdXh+ewfTHo
hPfWDTCCrkq6WEFUrb0AuVKUd+VuCNDux58k1P/4dM7gWE5wR1qjozKMQ14KZJBQ
d7cauBNI0yv+OP4MlVjIOAjTlNtO1u6PMSFouXxYOAeJ1TeLvq9NMIspa+mu8ZHv
KZL1HjqSfCqPoFoTPOnwk3LaFCqTRI3c7CnVlStkYduRq4g+VVfsJHBn2UsaRhld
mvvEhSmWQFlD0/Csm+Ex6MHlc7Ni0nDcdWNDvy9M/Q0OFh2MCN09LjbeJtsXZp8h
iBAmIA9/cNC8hl9199jQL71UvrMJLnpYNnNRe1qny8HrM+GSvekVIwJ1sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEIFUA29N+c5176YEY6kKldfWp1MB8GA1UdIwQY
MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt
NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1
LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKmxd1BA
O01Gi3nV0/oh1oMazlKKF/HuuF9sg8S3K4cg9XkPU3DNf+zXinu0YU7euReW6uTg
u7mnm6qpjJAS5hHuKH2j/RY5TDKxte6sewsETtM7ftdxBdfzO5JGvYKe86/+LKSP
bJTO3lIXvxGnx0UqHnt4wTPeYfEkUj91uGFU4mi+yPWj4l7DO5TMjpO1+zjEu8k+
BCPkyMysL21yPpK9yXqldLaCkpjjNCM9hVTKpAMHjNBblYGRQbbwDgRjgBRpgUZm
ERGpn5BsM2tx2SFDnuTDhU2PcPXQMVDAjqPQH//uKDd0Wb3qFCJIkmoJ0r9DNw91
kCY5S3EaQR9BNg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:03 2026 by rpki-client