Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: qQaobyzvoGkWJvBGlCrPRtWu6Z1Zg1iJnJL8RPumhOM=
Subject key identifier: CB:33:99:35:7E:36:33:EB:FA:33:05:C4:CE:07:AE:1B:67:A2:60:E2
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019EBF23244A73AF903AEF2AA0BC726600B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 01A9
Signing time: Sat 13 Jun 2026 04:00:11 +0000
Manifest this update: Sat 13 Jun 2026 04:00:11 +0000
Manifest next update: Sun 14 Jun 2026 04:00:11 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: FF8OujDzhpBWVp2BTlYQXXssW7WAMA82Sq5ZvkJO9JE=)
2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:24:4a:73:af:90:3a:ef:2a:a0:bc:72:66:00:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jun 13 04:00:11 2026 GMT
Not After : Jun 14 04:00:11 2026 GMT
Subject: CN=cb3399357e3633ebfa3305c4ce07ae1b67a260e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:98:ed:75:d9:44:bf:7c:3a:4a:6d:93:3d:
9d:38:5c:f9:7e:e0:53:fa:ba:97:e6:10:2b:c2:19:
ec:3d:a4:62:a5:cc:ec:86:40:eb:b5:7b:95:25:98:
4b:ef:92:d5:73:a2:3b:91:89:4b:e8:3f:b6:b8:50:
db:ca:d4:17:72:39:a0:d3:f8:da:31:7d:57:c9:c9:
7c:e1:9e:d9:1a:05:42:f8:c1:76:3a:2b:11:23:77:
61:a3:d2:cf:b3:fd:63:36:cf:1d:f0:f4:de:dd:7e:
61:f1:af:80:d9:a8:4b:ea:dd:af:41:b3:ee:95:05:
96:db:04:16:b5:17:95:b9:c6:d4:58:25:60:27:fa:
8c:f8:a0:35:12:d6:f0:31:26:1e:f3:2f:68:85:b0:
7d:0b:9d:ba:06:d0:e0:a4:82:81:37:32:8d:0b:2b:
88:66:7a:4a:c7:c1:58:8a:0f:6d:2c:74:67:ef:2c:
fd:b3:e5:21:9f:b4:c7:4d:1f:3b:4a:72:95:f2:36:
b6:b5:d8:45:85:96:1a:93:17:d1:29:0d:ae:9e:f4:
f4:05:9c:26:34:c1:dc:ea:31:2a:82:3a:80:83:20:
8d:b4:41:00:72:a1:2b:dc:95:12:f1:48:d7:3c:21:
56:f3:e8:6b:61:9b:f8:e6:e3:68:52:b3:ee:14:91:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:99:35:7E:36:33:EB:FA:33:05:C4:CE:07:AE:1B:67:A2:60:E2
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:38:df:8b:87:ab:7b:33:7c:0d:57:17:98:28:0a:50:25:
f5:77:06:f2:68:8e:d7:3b:de:a9:ed:c7:57:da:f0:57:56:25:
fd:ab:0b:f9:e1:d8:f0:51:ba:a1:ed:a4:63:f2:16:14:4b:6e:
54:84:1d:5a:c6:4b:7b:33:1b:2f:dd:75:75:50:17:6b:93:88:
0e:35:0b:3c:74:a1:fd:27:a8:15:13:b4:b5:45:e1:20:36:97:
4d:ee:ea:1b:77:e3:f2:d5:d5:3e:1b:cf:6c:b4:71:53:62:96:
5e:96:79:25:e2:fd:94:9e:23:5a:bc:3a:59:eb:c9:d1:63:fc:
16:ac:2e:0a:45:db:7c:b6:8f:7c:47:a8:c9:02:73:9b:be:20:
82:4e:e7:1a:7f:42:2d:7f:fd:2c:8f:28:37:0a:86:ae:97:35:
24:ab:e2:df:c9:f0:d8:45:bd:34:1e:21:6d:78:0a:8b:b2:5f:
a5:6a:11:69:b8:3d:56:e9:75:11:29:f6:e6:95:95:b3:2f:f3:
71:e6:69:21:ac:7c:2e:16:0a:21:a5:0c:77:cc:06:e4:fd:4d:
87:ad:aa:7d:7b:5d:ad:bb:d3:50:d1:76:64:e7:73:c9:65:1c:
c8:d8:8e:b6:62:88:71:f7:53:d8:36:b4:4f:1f:22:e8:8a:ae:
89:36:8e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IyRKc6+QOu8qoLxyZgC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTM1ZjEzYWJmMDJmYTNmY2E1MDVkNTY4ODE2YWZjNTkz
MzQ5MTYwHhcNMjYwNjEzMDQwMDExWhcNMjYwNjE0MDQwMDExWjAzMTEwLwYDVQQD
EyhjYjMzOTkzNTdlMzYzM2ViZmEzMzA1YzRjZTA3YWUxYjY3YTI2MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aOY7XXZRL98Okptkz2dOFz5fuBT
+rqX5hArwhnsPaRipczshkDrtXuVJZhL75LVc6I7kYlL6D+2uFDbytQXcjmg0/ja
MX1Xycl84Z7ZGgVC+MF2OisRI3dho9LPs/1jNs8d8PTe3X5h8a+A2ahL6t2vQbPu
lQWW2wQWtReVucbUWCVgJ/qM+KA1EtbwMSYe8y9ohbB9C526BtDgpIKBNzKNCyuI
ZnpKx8FYig9tLHRn7yz9s+Uhn7THTR87SnKV8ja2tdhFhZYakxfRKQ2unvT0BZwm
NMHc6jEqgjqAgyCNtEEAcqEr3JUS8UjXPCFW8+hrYZv45uNoUrPuFJGpdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMszmTV+NjPr+jMFxM4HrhtnomDiMB8GA1UdIwQY
MBaAFDYTXxOr8C+j/KUF1WiBavxZM0kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQt
OWRmZDc5NWE1YWRhLzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQtOWRmZDc5NWE1YWRh
LzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGs434uH
q3szfA1XF5goClAl9XcG8miO1zveqe3HV9rwV1Yl/asL+eHY8FG6oe2kY/IWFEtu
VIQdWsZLezMbL911dVAXa5OIDjULPHSh/SeoFRO0tUXhIDaXTe7qG3fj8tXVPhvP
bLRxU2KWXpZ5JeL9lJ4jWrw6WevJ0WP8FqwuCkXbfLaPfEeoyQJzm74ggk7nGn9C
LX/9LI8oNwqGrpc1JKvi38nw2EW9NB4hbXgKi7JfpWoRabg9Vul1ESn25pWVsy/z
ceZpIax8LhYKIaUMd8wG5P1Nh62qfXtdrbvTUNF2ZOdzyWUcyNiOtmKIcfdT2Da0
Tx8i6IquiTaOOw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:40 2026 by rpki-client