Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: iqVjneTdCuJfpz6OPbi4+rIf9m215HDRLpU97j5NxLc=
Subject key identifier: 71:09:B3:43:DB:D0:D0:FE:F8:8D:A6:E3:A2:43:DE:EF:66:0F:B5:F2
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019EBE7F362D2374CAF043D4A005A983D7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 01:01:08 +0000
Manifest this update: Sat 13 Jun 2026 01:01:08 +0000
Manifest next update: Sun 14 Jun 2026 01:01:08 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: UBW77Ss/WCU+uQvbFj2oWZu21/sMA6JLfYHYTSt2Rl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:36:2d:23:74:ca:f0:43:d4:a0:05:a9:83:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jun 13 01:01:08 2026 GMT
Not After : Jun 14 01:01:08 2026 GMT
Subject: CN=7109b343dbd0d0fef88da6e3a243deef660fb5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:3f:5e:4c:ff:35:67:64:bd:11:18:5e:e3:
97:85:0c:94:cf:78:34:c4:ae:91:b2:7d:5e:3a:e5:
03:be:6b:20:53:3e:3c:1a:87:82:f2:2a:c6:69:f8:
7d:44:82:77:17:78:c6:9e:4d:d8:69:47:c0:8a:e3:
44:1a:41:db:82:ed:06:81:4e:ec:50:3e:df:57:ae:
2f:17:76:78:ac:fd:01:d8:6d:4a:cf:1c:31:c9:e5:
6d:b2:f2:c6:1e:14:a0:c4:50:e1:5a:a9:9d:c6:12:
03:20:3d:dc:4b:52:52:1a:23:32:3a:4c:b6:ab:1c:
2d:40:c2:c5:d7:e0:3e:fb:00:8d:64:cc:b9:69:1a:
6c:14:c8:84:0a:4c:be:6e:32:14:db:67:42:a7:0f:
0c:37:13:a1:09:84:eb:0d:27:b7:37:57:c8:a2:2a:
f7:14:e0:56:a7:1c:47:43:01:ba:8c:7d:79:38:29:
ba:28:0f:c2:d0:51:b6:94:4c:27:89:6c:da:02:9d:
bd:7d:a7:35:ef:02:d0:78:48:2b:9a:bf:09:15:73:
b8:e8:a8:b9:5c:15:b9:7c:4a:79:12:9a:34:a8:72:
aa:ee:a2:b9:71:a3:aa:fb:74:06:94:3e:d3:0e:bc:
1a:ee:d2:99:df:e2:48:a0:08:9f:49:63:17:21:ce:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:B3:43:DB:D0:D0:FE:F8:8D:A6:E3:A2:43:DE:EF:66:0F:B5:F2
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:6c:ec:c8:be:0c:68:af:01:ab:d5:b1:bf:9a:e6:08:97:
06:d3:06:4d:03:a2:9d:cb:b1:b8:4d:17:14:c5:ae:6b:34:a9:
47:85:b2:7b:10:79:d1:bd:74:aa:b3:ac:75:f5:4e:8d:25:12:
48:99:a5:ad:d0:88:38:e1:55:3e:9f:15:05:7c:2f:dc:03:b6:
cb:8a:74:da:b6:3d:b9:33:77:d5:6e:58:0a:52:65:f7:2c:06:
ca:b2:ee:b1:ac:2e:7c:58:1d:7b:43:a2:4e:61:9c:a4:4c:f5:
04:38:c9:bb:da:61:45:19:75:f3:8b:0c:8a:d1:dd:d6:43:c3:
1f:1a:7f:61:75:c4:87:26:a0:55:2b:f7:56:7d:35:71:ea:3a:
5a:a1:00:56:bc:2c:40:39:d8:12:d8:83:42:74:e9:34:fc:88:
a1:08:8a:fe:8f:65:8c:7a:95:69:26:d7:e0:ab:5a:70:37:79:
6e:fc:3f:6b:57:24:7d:e0:3c:cf:77:fb:d8:ab:07:81:25:ed:
b2:bf:d6:52:a8:1e:2d:ca:f7:4a:15:51:67:93:45:c5:f3:17:
51:64:ac:64:91:63:53:d5:d0:1f:05:36:fb:d7:fc:2c:6d:a5:
33:45:d9:03:07:fa:d4:68:8b:95:61:74:a0:95:8e:fe:7b:7f:
21:3e:9c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+fzYtI3TK8EPUoAWpg9e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj
YThjNDcwHhcNMjYwNjEzMDEwMTA4WhcNMjYwNjE0MDEwMTA4WjAzMTEwLwYDVQQD
Eyg3MTA5YjM0M2RiZDBkMGZlZjg4ZGE2ZTNhMjQzZGVlZjY2MGZiNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSk/Xkz/NWdkvREYXuOXhQyUz3g0
xK6Rsn1eOuUDvmsgUz48GoeC8irGafh9RIJ3F3jGnk3YaUfAiuNEGkHbgu0GgU7s
UD7fV64vF3Z4rP0B2G1KzxwxyeVtsvLGHhSgxFDhWqmdxhIDID3cS1JSGiMyOky2
qxwtQMLF1+A++wCNZMy5aRpsFMiECky+bjIU22dCpw8MNxOhCYTrDSe3N1fIoir3
FOBWpxxHQwG6jH15OCm6KA/C0FG2lEwniWzaAp29fac17wLQeEgrmr8JFXO46Ki5
XBW5fEp5Epo0qHKq7qK5caOq+3QGlD7TDrwa7tKZ3+JIoAifSWMXIc6BDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEJs0Pb0ND++I2m46JD3u9mD7XyMB8GA1UdIwQY
MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt
NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy
LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVps7Mi+
DGivAavVsb+a5giXBtMGTQOincuxuE0XFMWuazSpR4WyexB50b10qrOsdfVOjSUS
SJmlrdCIOOFVPp8VBXwv3AO2y4p02rY9uTN31W5YClJl9ywGyrLusawufFgde0Oi
TmGcpEz1BDjJu9phRRl184sMitHd1kPDHxp/YXXEhyagVSv3Vn01ceo6WqEAVrws
QDnYEtiDQnTpNPyIoQiK/o9ljHqVaSbX4KtacDd5bvw/a1ckfeA8z3f72KsHgSXt
sr/WUqgeLcr3ShVRZ5NFxfMXUWSsZJFjU9XQHwU2+9f8LG2lM0XZAwf61GiLlWF0
oJWO/nt/IT6cdg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:57 2026 by rpki-client