Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: UzTgS7GkIgkHQJyvB2ka7ulp/LkdopnSRKokN+PqqMw=
Subject key identifier: 73:4F:EE:FE:94:DB:28:41:77:95:95:7F:9F:30:29:14:6C:BA:89:19
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019ED4628355212D2C6AF5E5394D7E8544AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 09B9
Signing time: Wed 17 Jun 2026 07:01:26 +0000
Manifest this update: Wed 17 Jun 2026 07:01:26 +0000
Manifest next update: Thu 18 Jun 2026 07:01:26 +0000
Files and hashes: 1: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: rIBAAb77YAN8YoZzlAzpRPz3uREVrGfAEmexBrSPdDw=)
2: rZZQYoQ-ii1ULymg1gCODzd0s4o.roa (hash: sgyKwwfW2KwaDdlaRSgHtW+s4rE3CgoGYd/sjsljqxY=)
3: vJI0zjSupe8L2btdgObTHN_0uMI.roa (hash: t1tDTpvOlNLAVNfscJvGfDoocyToS/t9xpe8zMWNV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:62:83:55:21:2d:2c:6a:f5:e5:39:4d:7e:85:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jun 17 07:01:26 2026 GMT
Not After : Jun 18 07:01:26 2026 GMT
Subject: CN=734feefe94db28417795957f9f3029146cba8919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:51:c9:98:52:4e:81:e0:43:61:99:5d:95:
8d:eb:0d:31:54:71:08:6d:9a:60:a1:ef:4b:c4:59:
fe:cb:4a:2f:50:22:d8:c3:22:81:09:3f:ea:9a:fa:
6f:35:eb:e8:b8:1f:87:3a:71:99:cf:d6:d0:37:f9:
ae:4f:6a:43:84:83:51:62:e8:e7:ff:be:e4:10:37:
1c:96:94:b8:b2:34:1d:62:6f:5f:3f:45:ef:cd:f6:
e5:86:20:56:a6:b8:25:08:7d:31:c9:5f:74:67:9d:
ef:1b:d0:2f:c8:8b:ed:47:c1:3f:c8:5c:d9:b6:5a:
5f:8c:40:cc:70:14:c9:9a:92:d4:5f:2a:bc:a5:cf:
8a:6d:b5:3d:93:37:9a:d0:7f:22:90:c7:c7:70:50:
8d:d1:27:70:f8:b0:8d:f0:d8:a2:ea:90:cd:73:bc:
c9:f3:4c:e6:c7:b6:98:87:b6:09:3a:d0:08:c6:2d:
1c:ab:46:7a:4b:6e:00:fb:17:12:5f:90:91:83:62:
75:c3:58:e6:ea:70:94:30:66:37:e7:ff:72:e2:81:
c9:39:59:1a:58:d1:1f:34:96:6f:78:a6:62:98:dc:
28:da:c6:cd:39:90:34:24:ee:e6:26:79:30:dc:12:
83:f2:02:2d:2f:a0:3a:ea:b8:39:aa:b5:82:a4:4f:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4F:EE:FE:94:DB:28:41:77:95:95:7F:9F:30:29:14:6C:BA:89:19
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b5:83:3b:73:5b:50:34:fc:48:7b:6b:67:5d:74:35:96:30:
86:cf:b2:07:9e:ea:33:ac:bb:7f:2b:e4:1c:df:41:42:93:21:
8e:fe:5e:ce:48:a8:be:6c:55:10:dc:e9:e2:ba:98:2e:1c:6d:
c5:cf:6c:df:6e:e4:97:bf:26:b0:8d:42:a0:2d:e9:07:f6:40:
c9:8a:39:7b:89:10:8f:20:3e:41:eb:d1:93:38:e5:a7:0f:16:
25:28:c4:04:1a:f8:a7:f3:36:4c:7f:4e:5d:5b:90:33:41:54:
a9:a0:07:17:b6:cd:72:60:d7:60:33:00:77:db:ee:fb:86:e5:
11:5d:b7:89:50:ea:56:95:ce:79:de:ea:bc:bd:b0:e7:b3:fc:
7f:45:f8:8a:93:e4:a5:6e:c6:71:a1:b1:23:6b:92:97:9c:fd:
92:30:c2:5b:f2:b4:28:41:aa:6a:c9:a9:8b:8e:af:38:5a:f7:
52:35:73:d1:26:69:d6:59:ed:e6:8b:98:d8:bf:28:05:1b:74:
90:6d:fd:e0:37:9b:3d:06:12:bf:ca:75:9f:40:07:5f:f4:af:
b3:75:2c:97:56:ac:8d:0d:25:c2:4c:47:d7:df:ce:97:dd:fc:
d7:a9:f7:bc:cb:43:8e:8d:ab:dd:30:7c:2f:12:ef:12:86:68:
19:4f:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:22:21 2026 by rpki-client