Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: Q16vhsPyUtQH5yrS63AiKxceYiQQUfdD8DutHHXRRl0=
Subject key identifier: 4A:42:35:72:BA:10:5B:06:74:8F:0F:9A:56:61:FC:23:7C:27:25:51
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019EC2243C17FF28C1262129BBE9419A7834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 01F0
Signing time: Sat 13 Jun 2026 18:00:14 +0000
Manifest this update: Sat 13 Jun 2026 18:00:14 +0000
Manifest next update: Sun 14 Jun 2026 18:00:14 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: 6E3qYIIA5TGDdzEkBVFyiNyNqTrP1X7WPa7YZg1cBEg=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:3c:17:ff:28:c1:26:21:29:bb:e9:41:9a:78:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Jun 13 18:00:14 2026 GMT
Not After : Jun 14 18:00:14 2026 GMT
Subject: CN=4a423572ba105b06748f0f9a5661fc237c272551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:79:85:9d:f1:39:08:52:a2:e9:be:97:18:
cf:69:29:ba:db:19:48:b8:e2:64:f1:af:ff:59:88:
0e:d0:53:e1:58:97:db:03:41:af:6d:d8:23:dd:1d:
6e:e9:f1:ee:e3:21:34:44:ae:aa:9a:7d:8c:f8:93:
ee:2c:9e:64:77:66:9f:41:37:c2:a9:7c:ba:2c:05:
86:59:5f:92:c1:53:1b:89:fa:70:49:a2:a3:ae:1e:
88:46:2e:41:aa:cb:fb:bd:a4:33:bf:fa:f1:1d:cf:
c8:fa:18:8d:54:0e:91:02:5d:da:ed:be:13:54:41:
7f:07:2c:25:ab:b1:a4:86:84:32:a0:49:30:01:87:
2d:32:78:21:26:12:93:73:bd:99:9a:df:77:74:48:
8a:70:c3:db:66:37:ca:31:59:16:54:91:79:cf:14:
9a:35:4e:33:38:90:13:62:80:15:17:a7:18:ad:c2:
7f:b8:a8:19:74:ad:a9:ce:c1:32:3e:a1:8a:3c:08:
62:25:27:3f:bb:b4:16:ac:d8:d3:98:0d:29:6c:df:
a5:ba:fa:5c:db:82:43:eb:d3:6e:49:25:7e:35:9f:
df:6f:b4:f6:99:3a:a8:d4:c5:d6:ab:89:fb:9e:f9:
f7:65:dd:d7:5d:fe:fb:44:81:65:3e:e9:2a:34:72:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:35:72:BA:10:5B:06:74:8F:0F:9A:56:61:FC:23:7C:27:25:51
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:55:c5:47:b8:b0:f1:30:74:93:01:6f:ae:14:0d:f5:b1:
2d:ac:00:6e:41:c2:0a:19:ec:4b:96:be:38:ed:13:e8:9a:d8:
3d:bb:23:5d:f8:c1:db:b1:c3:c5:7e:ba:19:df:27:f6:9c:b7:
62:fe:15:37:5b:ed:51:a9:15:74:cc:33:eb:a1:bb:79:c8:ba:
ea:86:8b:ad:e0:0c:59:9e:27:d2:e1:01:7e:2a:f8:0c:a0:07:
79:9d:54:eb:b5:2d:12:1d:27:b4:da:fd:ad:cd:62:76:f8:86:
84:48:5d:79:ef:70:e2:85:93:f4:8d:44:dc:67:69:28:05:cd:
de:5e:1b:a2:87:23:56:7f:37:6f:de:1d:04:6b:3b:12:3e:63:
d4:1c:93:c3:70:4f:db:fe:78:dc:1c:17:52:bb:c8:e8:54:13:
56:e9:2d:a9:ba:b5:fb:f6:3d:8d:4c:b0:04:60:75:08:f6:b0:
7a:80:08:d2:96:fd:fc:96:06:a1:ee:30:23:e8:db:2c:a7:f6:
3c:cc:27:77:6d:7a:d8:10:d1:a4:90:ec:a5:c9:5d:b8:82:12:
85:d2:bf:62:e3:63:71:9f:5a:0a:f1:19:84:43:ec:86:c2:60:
0f:9e:8a:55:7a:3d:d7:9f:2b:36:ad:b8:a1:88:24:1b:30:4a:
20:dd:77:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJDwX/yjBJiEpu+lBmng0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2
YmRkY2EwHhcNMjYwNjEzMTgwMDE0WhcNMjYwNjE0MTgwMDE0WjAzMTEwLwYDVQQD
Eyg0YTQyMzU3MmJhMTA1YjA2NzQ4ZjBmOWE1NjYxZmMyMzdjMjcyNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NJ5hZ3xOQhSoum+lxjPaSm62xlI
uOJk8a//WYgO0FPhWJfbA0Gvbdgj3R1u6fHu4yE0RK6qmn2M+JPuLJ5kd2afQTfC
qXy6LAWGWV+SwVMbifpwSaKjrh6IRi5Bqsv7vaQzv/rxHc/I+hiNVA6RAl3a7b4T
VEF/Bywlq7GkhoQyoEkwAYctMnghJhKTc72Zmt93dEiKcMPbZjfKMVkWVJF5zxSa
NU4zOJATYoAVF6cYrcJ/uKgZdK2pzsEyPqGKPAhiJSc/u7QWrNjTmA0pbN+luvpc
24JD69NuSSV+NZ/fb7T2mTqo1MXWq4n7nvn3Zd3XXf77RIFlPukqNHI3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpCNXK6EFsGdI8PmlZh/CN8JyVRMB8GA1UdIwQY
MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt
NWVmMzYyMjZhNzY3LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3
LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7BVxUe4
sPEwdJMBb64UDfWxLawAbkHCChnsS5a+OO0T6JrYPbsjXfjB27HDxX66Gd8n9py3
Yv4VN1vtUakVdMwz66G7eci66oaLreAMWZ4n0uEBfir4DKAHeZ1U67UtEh0ntNr9
rc1idviGhEhdee9w4oWT9I1E3GdpKAXN3l4boocjVn83b94dBGs7Ej5j1ByTw3BP
2/543BwXUrvI6FQTVuktqbq1+/Y9jUywBGB1CPaweoAI0pb9/JYGoe4wI+jbLKf2
PMwnd2162BDRpJDspclduIIShdK/YuNjcZ9aCvEZhEPshsJgD56KVXo9158rNq24
oYgkGzBKIN13Qw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:04 2026 by rpki-client