Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier: pzkptCL6xp46R0/WcZGw6CHlTkxVA+EIKcl1lSuVf5U=
Subject key identifier: 9F:49:5B:98:00:20:5C:30:54:6E:74:CC:95:60:D0:84:91:36:86:43
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 019ED3185CD5A441EFA622DA2D2F2CFDE710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number: AD
Signing time: Wed 17 Jun 2026 01:00:49 +0000
Manifest this update: Wed 17 Jun 2026 01:00:49 +0000
Manifest next update: Thu 18 Jun 2026 01:00:49 +0000
Files and hashes: 1: 54-l6_WE4mpSzibcgvfylxURMs8.roa (hash: sePGTr5+yfqTzWvL3Wjt87hvin99jlrgLvtLsAD9+VQ=)
2: 6Bd_dmaoEZ1Gs0FRJb3NyILTT9A.roa (hash: Mk+M/Fjc68fkukvC6/Uq0uxs0FLSquR7Kh7pIPdntc0=)
3: NNK9R7yF6XrFwMG8nuM3r4JWCV4.roa (hash: 9ZUvYzRXn0Klpg5dQm6gHdmQvA0GHc1xDFASadUC4cY=)
4: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: MqrqrD0RZ0IgOqgFjuuvEXxQ/t1mrkKS4GXKz44DV64=)
5: ykoL6Yw1_hgazdwSxBD8-ctDSFk.roa (hash: YqQ9BDswI1/tllb0ynCRch8xMH2OE551/Vqt20k8iIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:5c:d5:a4:41:ef:a6:22:da:2d:2f:2c:fd:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Jun 17 01:00:49 2026 GMT
Not After : Jun 18 01:00:49 2026 GMT
Subject: CN=9f495b9800205c30546e74cc9560d08491368643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:a9:bd:2b:49:c2:32:f2:5a:61:df:c7:1e:
ea:1d:e4:c1:80:6f:cd:8b:29:b6:3c:d8:84:c0:47:
8d:27:bb:82:00:f6:cf:23:a2:1a:f5:5b:d5:a3:9e:
36:cb:29:5e:8e:56:03:91:20:29:73:62:e0:c2:3e:
2e:17:9b:e3:af:9a:dc:a0:c4:97:80:35:67:34:66:
85:78:14:db:88:a4:01:3a:ba:2a:8b:09:c0:35:11:
dc:41:29:e5:74:70:a6:66:f3:3d:11:ff:14:08:a9:
11:97:aa:65:4b:47:14:d2:55:a8:60:76:46:3d:57:
48:49:e7:73:12:71:d3:01:19:fb:56:d9:d2:6f:4f:
78:be:9e:ed:54:1a:26:cb:0c:3f:87:1d:95:36:f3:
63:d8:72:1a:a2:e1:a4:bb:19:06:ea:7a:41:e9:40:
8c:ba:90:6a:f2:56:fa:36:fc:01:06:e4:81:0a:04:
45:55:6c:08:64:fc:25:71:27:01:23:0f:93:54:bb:
0e:a7:2b:f4:e6:4b:e9:8d:fb:e6:1b:fc:85:41:a7:
ff:fa:aa:0d:35:b5:fa:a1:f8:a7:c8:7d:3b:94:d7:
5b:c0:2a:cd:5f:58:91:6d:55:0f:74:9c:b6:26:58:
6b:8c:ee:e5:4f:b8:71:f0:74:65:ab:69:ff:13:3b:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:5B:98:00:20:5C:30:54:6E:74:CC:95:60:D0:84:91:36:86:43
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:8d:12:19:b1:a0:43:a6:e2:86:2d:f6:8a:5f:20:c2:27:
a1:0d:15:c2:90:a1:b7:63:7f:a5:bd:8b:97:b7:12:23:bc:c8:
b2:f1:62:38:a5:b1:b9:0f:8e:09:43:e1:5e:cc:60:dd:d8:af:
07:18:a5:e8:ad:22:ae:0d:c5:b1:d6:f7:e7:2a:89:ba:fd:8f:
e9:04:6b:b8:b4:a3:81:d4:d3:26:37:69:b9:3e:82:92:6f:b6:
38:7e:b7:f0:34:75:b0:92:95:18:6b:d0:06:b1:6b:d8:32:92:
7e:98:44:76:0f:31:ca:00:7e:db:e0:8b:9a:62:3d:c7:03:d4:
ff:5b:6f:bb:e7:c2:1b:d0:ec:b6:64:6f:d7:e0:64:6e:35:e1:
20:b6:10:e6:fb:05:84:c4:56:27:2b:18:43:f1:b0:42:08:61:
f3:47:07:b8:6f:cc:66:05:40:70:d9:9b:e9:bd:50:8f:2d:05:
52:6a:bb:0f:fb:fe:82:df:c9:f8:0a:3b:29:09:0a:df:20:54:
08:db:1e:59:36:15:f1:32:65:01:f0:47:ca:b2:00:a0:b0:d0:
a1:31:91:b7:6e:31:dc:c1:30:78:66:8c:cc:c3:09:68:7f:f5:
85:63:99:76:66:14:ce:5f:77:49:06:76:d5:2c:d7:a2:fd:42:
63:01:ec:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGFzVpEHvpiLaLS8s/ecQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDYwNDQ5NjZjNTc0MzlhYWY1MjAzMTA4ODVmODFkNDUy
NzViMmEwHhcNMjYwNjE3MDEwMDQ5WhcNMjYwNjE4MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZjQ5NWI5ODAwMjA1YzMwNTQ2ZTc0Y2M5NTYwZDA4NDkxMzY4NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1GpvStJwjLyWmHfxx7qHeTBgG/N
iym2PNiEwEeNJ7uCAPbPI6Ia9VvVo542yylejlYDkSApc2Lgwj4uF5vjr5rcoMSX
gDVnNGaFeBTbiKQBOroqiwnANRHcQSnldHCmZvM9Ef8UCKkRl6plS0cU0lWoYHZG
PVdISedzEnHTARn7VtnSb094vp7tVBomyww/hx2VNvNj2HIaouGkuxkG6npB6UCM
upBq8lb6NvwBBuSBCgRFVWwIZPwlcScBIw+TVLsOpyv05kvpjfvmG/yFQaf/+qoN
NbX6ofinyH07lNdbwCrNX1iRbVUPdJy2JlhrjO7lT7hx8HRlq2n/EzvgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9JW5gAIFwwVG50zJVg0ISRNoZDMB8GA1UdIwQY
MBaAFDbWBElmxXQ5qvUgMQiF+B1FJ1sqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUt
YTFkNjA1NDM1MGQyLzEvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUtYTFkNjA1NDM1MGQy
LzEvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFW6NEhmx
oEOm4oYt9opfIMInoQ0VwpCht2N/pb2Ll7cSI7zIsvFiOKWxuQ+OCUPhXsxg3div
Bxil6K0irg3Fsdb35yqJuv2P6QRruLSjgdTTJjdpuT6Ckm+2OH638DR1sJKVGGvQ
BrFr2DKSfphEdg8xygB+2+CLmmI9xwPU/1tvu+fCG9DstmRv1+BkbjXhILYQ5vsF
hMRWJysYQ/GwQghh80cHuG/MZgVAcNmb6b1Qjy0FUmq7D/v+gt/J+Ao7KQkK3yBU
CNseWTYV8TJlAfBHyrIAoLDQoTGRt24x3MEweGaMzMMJaH/1hWOZdmYUzl93SQZ2
1SzXov1CYwHsOQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:18:46 2026 by rpki-client