Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: tey+PjpjkbEiaKSFR/GIafWIkRdYWaTWwxlH5KN7ZB8=
Subject key identifier: 3C:DD:AF:1C:8E:CF:93:39:AD:4A:09:FD:52:56:72:13:4B:CF:E4:1C
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019EBF5AD18C7256CF870AB15A1CB0060490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0C8D
Signing time: Sat 13 Jun 2026 05:01:00 +0000
Manifest this update: Sat 13 Jun 2026 05:01:00 +0000
Manifest next update: Sun 14 Jun 2026 05:01:00 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: 5tdvPVIVYEkfClXswQ/KooDR1fcI9eNZbx2cY1qE3H4=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:d1:8c:72:56:cf:87:0a:b1:5a:1c:b0:06:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jun 13 05:01:00 2026 GMT
Not After : Jun 14 05:01:00 2026 GMT
Subject: CN=3cddaf1c8ecf9339ad4a09fd525672134bcfe41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:9e:e8:0b:4d:d5:ad:d7:3d:1a:0a:39:35:
24:e8:05:53:ca:9a:90:96:44:e0:76:cc:37:39:0e:
f4:1e:e8:45:14:e8:07:51:38:ab:17:ef:95:87:7e:
ec:3e:04:38:1c:e7:ea:8f:68:85:b4:9b:b5:10:49:
ac:0f:d1:e0:62:c5:1d:7e:1c:4b:e8:f4:5e:c0:08:
e0:ec:68:59:17:ca:bc:c5:7b:bb:b7:2b:2f:f9:a8:
d3:f0:e0:06:37:02:aa:86:81:d8:e7:d0:95:7b:36:
45:1a:1f:e2:f5:3d:f2:b8:eb:89:18:73:18:89:a6:
fe:9f:86:08:ce:06:12:ce:89:60:e6:78:3a:08:04:
2b:01:df:8b:6a:49:13:94:f0:0f:cc:6d:dc:7c:57:
ac:10:c8:68:0f:13:c7:35:e1:9c:2a:77:3e:5f:10:
47:a8:20:2c:3a:15:52:cf:eb:85:77:31:d6:bb:40:
e2:b7:2d:f7:54:a6:fa:6b:98:06:d4:0a:2e:10:e6:
d7:94:58:92:52:89:fe:c5:26:18:67:90:71:d0:7a:
70:97:af:61:de:88:82:7d:85:5f:12:54:9b:d0:60:
72:78:00:41:ca:aa:e5:c4:e7:64:48:24:a7:5d:98:
0a:8e:73:1b:71:cf:42:6d:d4:c0:74:ce:2f:c4:eb:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:AF:1C:8E:CF:93:39:AD:4A:09:FD:52:56:72:13:4B:CF:E4:1C
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:f5:8b:59:1c:1d:5f:ab:63:7e:e9:3d:72:a5:c9:d9:28:
2f:46:48:8d:79:59:95:5f:f9:ca:99:af:a0:67:e4:a8:f3:09:
b0:c9:f7:ef:49:fd:4f:33:6f:c7:82:9a:5c:71:d2:99:94:fc:
ad:6e:50:b1:a4:04:23:fd:22:b7:87:34:33:37:56:e1:f6:48:
c5:fe:3c:de:2c:18:b0:05:e3:40:33:ca:67:b5:16:e5:b2:7a:
72:23:67:a1:5a:14:c0:f6:a9:a3:9b:ef:0c:56:f8:bb:aa:de:
4b:f5:d5:f0:6a:5e:e4:2a:5e:93:36:a2:70:60:ca:39:3b:3c:
7c:7d:f6:a6:da:ba:e7:75:29:66:08:03:c4:b6:d6:67:96:74:
f6:b5:3f:fc:c0:a8:b7:6f:bd:5f:76:7c:06:be:22:92:f3:51:
40:b5:17:9c:e3:2d:34:42:0d:dd:2d:33:3d:58:34:80:ae:1b:
07:bc:c0:ba:33:b5:c5:e9:72:7d:b7:64:63:38:24:69:8b:e2:
fb:03:59:7d:2d:ba:98:52:64:31:a2:10:04:13:5d:d7:7d:35:
82:1c:43:b3:2b:4a:23:a1:35:2b:f9:f7:8f:bc:94:8a:23:48:
0a:7f:8b:df:51:0f:cb:f3:4e:fd:ea:e2:72:f7:59:4a:da:c7:
df:76:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:19 2026 by rpki-client