Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: WIBrgmdtIdy0vWzmwBbBs9Ie69CeS6AoRvKhcA/BdAA=
Subject key identifier: FE:6D:14:57:98:0B:75:37:C9:2C:08:BE:DF:AA:D9:57:87:F2:08:CD
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019EC06D4672EB167D4970BA5E6ECEBAB7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 10:00:47 +0000
Manifest this update: Sat 13 Jun 2026 10:00:47 +0000
Manifest next update: Sun 14 Jun 2026 10:00:47 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: DWyl5D6DrSr3WcyFMt0RGJXjdg0r0YlMNMUwZULqU84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:46:72:eb:16:7d:49:70:ba:5e:6e:ce:ba:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jun 13 10:00:47 2026 GMT
Not After : Jun 14 10:00:47 2026 GMT
Subject: CN=fe6d1457980b7537c92c08bedfaad95787f208cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:b9:05:c2:58:60:f8:8c:03:ea:23:2f:c4:
99:d5:84:48:5f:84:92:68:8c:d8:26:e2:d2:70:2b:
1d:07:6c:77:33:41:5b:8d:b7:7a:e4:d4:b1:29:7d:
d3:f6:33:bf:f6:a0:42:a1:b7:86:ee:02:a1:df:6a:
09:51:ea:ef:45:b7:58:7d:47:b9:e5:bd:be:c3:4c:
90:c3:2c:23:5a:16:54:0a:fb:9a:01:87:09:32:82:
4a:47:25:d1:24:3f:7d:f5:d0:6f:87:71:d5:10:a1:
b7:07:e1:0a:38:e5:30:c4:c6:70:b6:ff:c3:c6:aa:
d2:40:63:36:eb:56:8d:c3:72:44:f9:46:20:bf:54:
2e:16:18:ed:70:d2:c3:32:24:10:1f:0d:6d:cd:17:
cb:d0:37:c8:e5:66:b6:f7:4c:f2:f0:28:f2:37:c6:
fd:f4:5e:6a:67:04:bb:08:5e:76:8a:3a:ee:e9:dd:
57:40:52:42:c9:7e:0f:c1:73:56:07:48:a4:b0:30:
17:3c:54:c9:1d:ea:c2:0b:3d:84:62:52:23:32:a6:
5f:e8:49:b6:ec:99:f4:22:8d:12:0f:5e:de:2a:f2:
21:b5:9f:11:35:3b:ac:46:8b:20:02:d9:b8:10:76:
43:66:5f:97:ae:c4:ee:c3:94:58:71:0e:7d:fb:ee:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:14:57:98:0B:75:37:C9:2C:08:BE:DF:AA:D9:57:87:F2:08:CD
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:5b:d8:25:7b:39:96:d2:97:3e:96:b4:e5:7c:08:3b:cf:
19:fe:c2:85:9b:71:ff:38:69:86:ac:e0:22:1b:15:ff:88:c6:
84:0f:6d:14:be:1e:a7:3a:3a:ca:59:a1:d5:62:ca:2e:3b:74:
17:b5:e8:c0:4a:db:bd:64:49:8a:88:02:b4:6a:fb:26:58:a1:
3e:6e:7e:b2:0c:c6:4d:ab:f1:6b:2f:6b:90:11:fd:05:c5:72:
93:c9:7d:9d:3a:92:ab:47:2c:8c:f2:a2:c8:3b:40:bf:83:33:
c6:42:7c:a5:33:c2:20:a1:5b:d7:f8:86:4a:bf:48:f4:c1:79:
0a:25:6b:d5:69:a3:8b:c9:46:85:de:00:20:c9:a2:bf:36:4b:
61:a9:d9:3d:63:c4:ed:e0:0b:69:e8:a0:99:8b:05:ac:2d:17:
96:a0:23:5f:55:65:e0:12:41:0a:32:ab:8e:c3:9a:fb:dd:6f:
60:00:00:68:fd:80:a4:e4:b5:20:43:35:a8:53:47:9c:30:6d:
0c:e6:7e:c5:f3:8a:b5:51:25:55:1f:86:ec:42:11:1e:23:e8:
d2:95:88:dc:ca:48:3f:5f:44:96:18:ee:5b:d0:33:c2:20:4c:
2c:c9:69:8e:72:09:65:f7:ab:e0:d1:80:dc:c5:d0:a5:c1:55:
54:bc:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:56 2026 by rpki-client