Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: P+wtuzXn/GOUtmWUOQO2T5ODnOI8+zNJiBFxtym+r5c=
Subject key identifier: 56:9A:C5:06:45:92:C0:45:63:88:64:06:F7:98:DB:79:02:98:62:70
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019EC11283BD611DAFE2CBCE8F83F327FA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0C8B
Signing time: Sat 13 Jun 2026 13:01:16 +0000
Manifest this update: Sat 13 Jun 2026 13:01:16 +0000
Manifest next update: Sun 14 Jun 2026 13:01:16 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: 1MJetc0ilXgneoVWCjcgUHeY1CNu1c4j7AxW2BUhPyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:83:bd:61:1d:af:e2:cb:ce:8f:83:f3:27:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jun 13 13:01:16 2026 GMT
Not After : Jun 14 13:01:16 2026 GMT
Subject: CN=569ac5064592c04563886406f798db7902986270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:51:cd:cd:27:41:87:7a:6a:72:d7:3b:1b:
b1:8c:23:55:81:5e:4c:7b:b2:cb:6b:26:e4:73:63:
23:a5:b0:cc:6d:28:d7:64:85:34:81:45:34:3c:2e:
06:6b:fc:31:3f:fe:8a:f6:c3:92:4b:73:f8:a4:ba:
aa:0b:9f:dc:b8:f6:99:a8:97:bb:22:f7:09:32:b9:
f1:e1:ff:00:0e:00:4b:f4:9e:77:f2:a9:04:c6:b4:
e7:40:89:e0:ec:7a:b9:4f:20:dd:66:bd:d1:f2:a1:
e0:f8:e5:22:80:b4:8a:e0:30:9f:c7:a6:76:ad:96:
6d:ce:a0:fe:9c:4d:13:5d:be:da:fd:af:09:f7:7c:
73:23:ab:47:8d:a0:8a:7b:4e:ec:b6:e3:11:15:47:
ea:1c:9f:b9:ae:6c:a5:87:31:bc:d1:c0:71:27:94:
b3:de:29:50:67:11:b7:23:32:f2:d5:54:e4:7b:00:
99:05:9f:d8:5e:37:3d:e2:91:a7:46:c9:dd:a1:30:
2e:73:5d:6a:87:b6:00:b5:f9:24:b6:1e:22:f6:8d:
e3:62:df:83:96:69:16:33:c0:fd:7c:66:a8:7d:d3:
dd:d0:19:88:6c:cc:cc:03:dc:62:9b:e2:7d:bf:8c:
22:ae:56:29:eb:b0:89:77:67:51:96:af:9c:f3:94:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:C5:06:45:92:C0:45:63:88:64:06:F7:98:DB:79:02:98:62:70
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:73:80:65:d5:36:ff:3d:43:f0:f7:28:64:59:06:7d:f6:0a:
2c:8b:e1:88:85:2f:7d:a6:ac:77:de:e5:a7:99:80:4b:3a:ba:
15:69:7f:ec:e2:1d:ac:19:ad:e6:52:e4:47:c2:e4:ac:17:78:
4b:1b:3c:20:25:f6:f0:62:ec:ca:34:6e:98:23:e9:93:c6:7f:
c4:6c:ef:73:a5:77:f8:79:66:09:71:9c:6e:78:2a:80:b7:93:
ce:cf:94:93:c4:42:73:07:2a:d4:60:e5:d3:9a:e0:12:78:2f:
1f:6f:73:78:30:10:cd:71:47:90:c9:01:d1:a2:fa:ce:6b:07:
ed:1f:78:ff:73:e3:40:93:a4:4a:53:7f:7b:4c:91:e2:f8:5c:
0e:c7:ee:89:78:cf:cd:bf:d3:c8:b1:f4:bc:a8:7f:70:c7:33:
2a:74:4a:a7:98:9c:12:58:1e:9b:a9:ac:f9:03:d5:f9:c7:2c:
99:f5:f2:13:e4:68:5f:0f:98:08:9e:5a:06:c9:e3:f8:33:0a:
92:08:32:58:08:d7:ed:05:06:8c:fc:fe:3e:c5:66:60:6d:30:
51:a7:88:77:40:a3:84:fe:09:77:ca:6d:ef:85:41:f6:f3:85:
6f:e9:7e:f9:2a:55:dd:45:ba:90:4d:03:0d:b4:f8:87:61:9a:
76:42:96:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEoO9YR2v4svOj4PzJ/otMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjYwNjEzMTMwMTE2WhcNMjYwNjE0MTMwMTE2WjAzMTEwLwYDVQQD
Eyg1NjlhYzUwNjQ1OTJjMDQ1NjM4ODY0MDZmNzk4ZGI3OTAyOTg2MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCNRzc0nQYd6anLXOxuxjCNVgV5M
e7LLaybkc2MjpbDMbSjXZIU0gUU0PC4Ga/wxP/6K9sOSS3P4pLqqC5/cuPaZqJe7
IvcJMrnx4f8ADgBL9J538qkExrTnQIng7Hq5TyDdZr3R8qHg+OUigLSK4DCfx6Z2
rZZtzqD+nE0TXb7a/a8J93xzI6tHjaCKe07stuMRFUfqHJ+5rmylhzG80cBxJ5Sz
3ilQZxG3IzLy1VTkewCZBZ/YXjc94pGnRsndoTAuc11qh7YAtfkkth4i9o3jYt+D
lmkWM8D9fGaofdPd0BmIbMzMA9xim+J9v4wirlYp67CJd2dRlq+c85T6BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaaxQZFksBFY4hkBveY23kCmGJwMB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHOAZdU2
/z1D8PcoZFkGffYKLIvhiIUvfaasd97lp5mASzq6FWl/7OIdrBmt5lLkR8LkrBd4
Sxs8ICX28GLsyjRumCPpk8Z/xGzvc6V3+HlmCXGcbngqgLeTzs+Uk8RCcwcq1GDl
05rgEngvH29zeDAQzXFHkMkB0aL6zmsH7R94/3PjQJOkSlN/e0yR4vhcDsfuiXjP
zb/TyLH0vKh/cMczKnRKp5icElgem6ms+QPV+ccsmfXyE+RoXw+YCJ5aBsnj+DMK
kggyWAjX7QUGjPz+PsVmYG0wUaeId0CjhP4Jd8pt74VB9vOFb+l++SpV3UW6kE0D
DbT4h2GadkKWPA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:50 2026 by rpki-client