Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: dmGXxfLjA9wrvckWMgwmJV88OJdTELuTjt76wT9wM/c=
Subject key identifier: 9C:66:B3:C1:FE:D7:A0:37:FB:90:57:F4:0D:4C:17:FA:5C:69:C9:CD
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019EC292CC553E09F798FA693F0D7C480D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 11BC
Signing time: Sat 13 Jun 2026 20:01:00 +0000
Manifest this update: Sat 13 Jun 2026 20:01:00 +0000
Manifest next update: Sun 14 Jun 2026 20:01:00 +0000
Files and hashes: 1: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (hash: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: W7MYRigfx7Jg4NJU5RlNCXaldGDqCSuVUmRSv/gZyAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:cc:55:3e:09:f7:98:fa:69:3f:0d:7c:48:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jun 13 20:01:00 2026 GMT
Not After : Jun 14 20:01:00 2026 GMT
Subject: CN=9c66b3c1fed7a037fb9057f40d4c17fa5c69c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:b5:81:cd:0c:4b:ae:91:aa:98:a4:6b:c0:
6c:78:42:f7:a0:31:38:79:ca:6c:4b:3d:2c:b8:ce:
5f:ee:f6:1e:5d:51:ab:80:3e:4b:3d:92:8c:a9:c5:
25:a5:a0:18:60:75:df:d1:09:df:fe:55:c3:d5:c3:
59:a8:c6:ed:c3:ea:c3:57:59:fd:21:7d:b7:4f:8e:
a8:27:85:37:cd:44:de:2b:a0:73:5d:c9:b6:44:03:
49:c2:d7:e8:68:d0:b9:d1:ad:f0:f0:10:fe:e7:98:
c1:34:46:e9:0e:3f:4a:6c:2f:c7:14:93:70:ae:71:
ae:f6:f4:09:82:59:0f:7c:cf:ce:97:57:32:3d:f6:
26:75:3c:f6:ec:40:8f:bf:8f:77:69:fb:02:d2:0b:
41:5b:85:aa:94:3d:87:04:fc:d4:7f:9f:94:bd:6b:
3e:30:c1:0c:16:d2:b8:ce:b5:b3:c4:4b:a1:0e:30:
51:26:71:69:05:23:eb:d2:8c:5f:4a:cb:bf:c1:f1:
81:a2:b7:84:cd:53:d5:4e:e0:7c:a7:9a:b0:48:36:
f5:78:26:a9:2e:03:37:8f:95:97:99:b6:4b:71:17:
06:8e:91:e1:8f:6f:ff:cf:61:ad:7d:49:d2:ce:17:
a6:59:7f:40:3b:54:38:76:77:9a:ef:cd:2b:5d:5d:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:B3:C1:FE:D7:A0:37:FB:90:57:F4:0D:4C:17:FA:5C:69:C9:CD
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:17:24:5d:8f:da:ff:25:fb:36:c0:76:74:fc:9c:78:e5:
13:91:33:97:15:31:72:82:fd:7a:c6:dd:9d:67:ba:dd:87:a2:
0c:12:0b:cd:53:04:45:07:83:8a:bf:d0:98:5a:e3:06:de:2b:
07:0f:31:78:60:9d:5a:a2:95:32:66:4e:24:24:8e:51:f4:2e:
d9:51:a3:c0:90:05:01:1f:be:6c:01:22:19:e2:7d:6d:ef:15:
7f:7c:4b:3d:22:c7:d2:e1:f0:e0:7f:42:7f:29:fa:cd:37:05:
63:0d:94:84:9b:41:0c:6a:a6:67:8a:e3:82:91:5d:4e:0b:cd:
58:49:32:a2:27:1d:10:65:11:be:f8:86:0a:69:45:d7:84:75:
6f:51:8d:15:bd:9d:ca:60:99:9b:0e:c3:12:67:f8:bb:97:06:
da:99:f6:f0:7a:67:74:38:59:95:fb:b0:a3:01:15:75:59:8f:
94:74:6b:56:a4:a6:3c:ec:1c:d6:25:c2:f7:75:87:59:7c:6a:
47:20:33:78:a6:36:41:6a:cb:c5:38:d3:c1:86:c5:ec:ba:a4:
63:cb:eb:4a:26:76:1f:bc:8a:39:41:1f:0d:27:30:c4:78:0e:
04:94:f8:be:55:02:6c:c2:64:b2:09:c5:30:79:20:28:cf:0d:
f9:f6:29:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CksxVPgn3mPppPw18SA0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTM0MzIzNTU4MWNmNDEwNDE5MGRhN2EwY2ExNzRiOWMw
ZDBiZDUwHhcNMjYwNjEzMjAwMTAwWhcNMjYwNjE0MjAwMTAwWjAzMTEwLwYDVQQD
Eyg5YzY2YjNjMWZlZDdhMDM3ZmI5MDU3ZjQwZDRjMTdmYTVjNjljOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBG1gc0MS66Rqpika8BseEL3oDE4
ecpsSz0suM5f7vYeXVGrgD5LPZKMqcUlpaAYYHXf0Qnf/lXD1cNZqMbtw+rDV1n9
IX23T46oJ4U3zUTeK6BzXcm2RANJwtfoaNC50a3w8BD+55jBNEbpDj9KbC/HFJNw
rnGu9vQJglkPfM/Ol1cyPfYmdTz27ECPv493afsC0gtBW4WqlD2HBPzUf5+UvWs+
MMEMFtK4zrWzxEuhDjBRJnFpBSPr0oxfSsu/wfGBoreEzVPVTuB8p5qwSDb1eCap
LgM3j5WXmbZLcRcGjpHhj2//z2GtfUnSzhemWX9AO1Q4dnea780rXV34gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxms8H+16A3+5BX9A1MF/pcacnNMB8GA1UdIwQY
MBaAFFKTQyNVgc9BBBkNp6DKF0ucDQvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2Qt
ZmNjMjIwNjQ0NTU4LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2QtZmNjMjIwNjQ0NTU4
LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH0XJF2P
2v8l+zbAdnT8nHjlE5EzlxUxcoL9esbdnWe63YeiDBILzVMERQeDir/QmFrjBt4r
Bw8xeGCdWqKVMmZOJCSOUfQu2VGjwJAFAR++bAEiGeJ9be8Vf3xLPSLH0uHw4H9C
fyn6zTcFYw2UhJtBDGqmZ4rjgpFdTgvNWEkyoicdEGURvviGCmlF14R1b1GNFb2d
ymCZmw7DEmf4u5cG2pn28HpndDhZlfuwowEVdVmPlHRrVqSmPOwc1iXC93WHWXxq
RyAzeKY2QWrLxTjTwYbF7LqkY8vrSiZ2H7yKOUEfDScwxHgOBJT4vlUCbMJksgnF
MHkgKM8N+fYp2A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:29 2026 by rpki-client