Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: QEqH8/YhfMW2DDa6KYuCcy0Oa8hrb3h74iKjIoQ7rkg=
Subject key identifier: BC:D8:55:2E:34:E1:80:7F:51:B4:E9:44:C3:30:52:3B:3A:B7:0C:C4
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 019EC149667E0E674E6081961A68ED48AC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0ACD
Signing time: Sat 13 Jun 2026 14:01:13 +0000
Manifest this update: Sat 13 Jun 2026 14:01:13 +0000
Manifest next update: Sun 14 Jun 2026 14:01:13 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: nWU0YwL3Bpw/5xCpWELaHRpJpwQgsGzwMLUglfpN6Oc=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:66:7e:0e:67:4e:60:81:96:1a:68:ed:48:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Jun 13 14:01:13 2026 GMT
Not After : Jun 14 14:01:13 2026 GMT
Subject: CN=bcd8552e34e1807f51b4e944c330523b3ab70cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:9b:59:fb:c1:8b:8f:ae:88:ab:b0:34:0c:
ce:59:6f:98:44:9c:89:21:8e:d0:df:03:5d:97:52:
67:4c:f2:ef:ac:60:fe:95:5f:05:62:93:4c:ba:47:
30:54:96:2c:39:b3:9d:2b:ad:55:4b:eb:55:3d:99:
9b:ad:4c:dc:7c:53:45:a3:ea:f6:62:ec:20:2e:b8:
22:31:fb:99:35:f8:a6:a9:86:fd:4e:1c:e1:04:8e:
ce:57:18:3c:6d:69:7b:49:e6:0b:74:9e:18:15:b3:
49:53:47:b5:6f:75:79:70:58:69:fc:56:e6:66:0c:
b1:8b:79:09:6e:29:93:6e:b0:4c:c3:63:fb:09:6f:
b7:7d:3b:5c:8b:eb:b3:41:39:61:a4:0a:10:ee:37:
7d:27:59:30:12:e6:e2:cb:5f:a0:8f:1a:c4:48:33:
f5:d7:8e:64:fc:c0:33:c8:4c:de:1e:d9:44:09:90:
31:41:b9:2c:2a:b7:68:a9:c5:8a:56:67:42:51:6d:
77:60:66:cd:5a:0d:93:37:a8:9a:61:ee:36:c7:88:
be:1b:1b:21:bd:84:c3:08:6c:6e:b4:d2:cc:5a:35:
fa:97:e4:aa:be:92:0d:1d:7c:15:a8:82:ac:76:ec:
17:8f:89:de:4f:19:5a:df:da:d1:58:26:69:c3:f3:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:55:2E:34:E1:80:7F:51:B4:E9:44:C3:30:52:3B:3A:B7:0C:C4
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:95:e0:b6:64:a1:6c:67:21:1e:38:d8:8b:73:07:c2:b6:21:
63:86:66:a7:8f:8f:b2:ae:f3:d5:b9:6b:c7:7e:7e:40:15:7e:
76:9b:f0:ae:f4:f6:65:85:98:2f:8a:d6:c8:ee:13:e9:83:6e:
5f:85:b8:f7:f9:c9:21:17:6e:d6:d8:d7:9b:29:97:ce:09:b9:
1a:59:e7:af:ea:3a:83:cb:17:64:2b:e2:17:22:d6:f6:c2:14:
1e:b3:5a:ac:51:02:ad:dd:03:19:2f:da:3b:8d:ea:6a:e5:ba:
57:78:cd:32:dd:71:2d:e3:3d:0a:2c:94:11:d5:c5:3a:4c:b4:
18:55:b4:b8:60:2d:74:1a:ed:7c:cb:4e:c1:0f:57:b6:42:d8:
26:22:c0:7d:75:4c:03:f5:38:17:dd:02:e8:1f:15:48:2b:34:
c2:62:0f:8c:0a:6b:43:a5:87:8a:18:6e:4f:b3:eb:f8:25:ee:
d2:90:28:1e:ee:41:7e:b3:a0:f2:76:64:8c:5e:05:7a:63:f2:
7e:f3:ea:21:ff:32:77:e2:46:1e:de:67:24:56:23:a2:27:44:
8b:47:09:50:c9:4c:07:d6:24:78:b8:9f:8e:aa:b2:25:9e:f5:
74:aa:3c:45:de:25:15:6e:a5:d9:40:1f:11:97:1c:7d:d0:07:
b7:c0:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:56 2026 by rpki-client