Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: hSIqO0xmMob1jz4aihBZv3xj3tH6F/N21F4LAWtILDU=
Subject key identifier: EF:F5:70:94:D3:A5:31:28:F8:0E:77:93:98:A0:08:5F:D6:BB:9C:69
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019EBFC908A30F79DD255A084C4F85397BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 121A
Signing time: Sat 13 Jun 2026 07:01:23 +0000
Manifest this update: Sat 13 Jun 2026 07:01:23 +0000
Manifest next update: Sun 14 Jun 2026 07:01:23 +0000
Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 95fskHHX7IN6Z/AJc7lF/Xa3SJeu8TJ7GuIK5FfT6AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:08:a3:0f:79:dd:25:5a:08:4c:4f:85:39:7b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jun 13 07:01:23 2026 GMT
Not After : Jun 14 07:01:23 2026 GMT
Subject: CN=eff57094d3a53128f80e779398a0085fd6bb9c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:6f:9e:bb:39:ea:42:13:8c:9a:2c:b5:8e:
01:d2:e0:9e:e6:28:37:55:c6:05:fa:36:a0:2f:3f:
84:6b:e6:32:11:9d:c0:a2:21:35:57:b4:17:a8:47:
87:4d:67:29:7c:50:d0:11:85:a1:32:40:91:45:d7:
29:99:07:96:3a:d7:1f:55:b2:29:6e:33:d9:bf:0d:
43:3c:44:6d:da:12:79:e8:c6:4f:4e:6b:ed:bb:ba:
1a:38:1d:f8:d6:33:9c:a4:85:71:61:8e:5e:6b:be:
af:a6:1e:44:18:24:20:2a:e9:c7:82:47:0e:76:e5:
17:6f:02:ad:ba:79:2a:28:82:7f:c0:96:7e:39:9c:
a2:fd:89:03:88:d2:0c:b2:8c:2e:3c:64:2d:58:86:
f0:8b:8d:a3:e1:e4:e2:6f:e1:97:a9:f6:91:17:7a:
2d:8f:45:69:69:1c:e1:b5:f5:9c:6d:21:c4:4c:4e:
1c:92:4d:22:1e:c0:fe:05:14:da:32:dd:79:e3:a7:
3c:49:07:2d:6b:da:e8:3c:8b:5d:40:4f:09:67:de:
bc:b1:39:a3:13:ce:43:08:0d:29:79:69:21:e8:35:
0e:a1:56:59:39:3d:5d:13:53:41:c1:fe:88:f0:4d:
08:45:b9:4c:1b:7a:14:9b:65:80:ef:fb:74:be:54:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:70:94:D3:A5:31:28:F8:0E:77:93:98:A0:08:5F:D6:BB:9C:69
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2f:a6:d4:38:b8:a4:ed:52:cf:2a:29:1d:e7:69:fe:81:d7:
2e:62:b0:12:b7:1c:cc:4d:86:fd:d1:86:ac:25:1c:90:e4:33:
ac:d9:7c:20:78:d2:25:14:38:b3:8f:3d:4c:59:b4:f3:07:72:
4a:5c:b7:53:bf:3a:a7:00:d5:a3:93:88:42:cf:a5:96:0b:1e:
d1:8d:d7:3e:0d:29:51:49:55:7e:a7:96:54:4e:61:6e:9a:44:
f5:31:46:1d:43:04:57:0f:de:a9:50:a2:1e:e8:d2:bc:c7:fc:
00:73:67:1f:c8:05:de:40:a6:09:4d:19:3d:4c:17:ca:19:f1:
ef:19:20:fc:85:4d:96:f1:a1:f6:16:ab:cc:5f:29:be:33:3a:
6e:95:d0:8c:37:9a:e3:77:9f:f3:08:bd:b8:13:23:60:7c:73:
d9:de:e8:63:45:e6:46:fb:17:22:0d:40:fe:99:31:5c:4a:47:
61:82:b8:87:66:03:6f:0e:0a:9b:79:dd:47:53:52:bf:b3:18:
d3:d2:7e:ee:6c:8d:a4:a9:38:c8:c4:e3:04:ea:58:fe:42:86:
73:cd:11:3a:80:b2:e2:90:cb:d2:4d:be:e6:ac:4c:bf:ab:94:
7b:ed:25:b5:9f:4f:3e:07:77:fa:1b:75:56:97:f6:0d:62:f8:
11:9f:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:31 2026 by rpki-client