Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: v/hdU6qm9Y4ZtHB8kVzUb6oaTLtiWwF/rDhCRPMav74=
Subject key identifier: 63:2A:0A:A2:A9:8A:55:EA:09:32:38:43:9D:5B:1B:30:BA:53:33:0E
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019EC3DC8B9A7563BBD2B54CB2D38852F148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1458
Signing time: Sun 14 Jun 2026 02:01:11 +0000
Manifest this update: Sun 14 Jun 2026 02:01:11 +0000
Manifest next update: Mon 15 Jun 2026 02:01:11 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: 82MxCcuG+gbIVAgihBBnDuAvMgjb1urkqJ8vH9eM3yU=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:8b:9a:75:63:bb:d2:b5:4c:b2:d3:88:52:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jun 14 02:01:11 2026 GMT
Not After : Jun 15 02:01:11 2026 GMT
Subject: CN=632a0aa2a98a55ea093238439d5b1b30ba53330e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:73:50:56:25:08:9b:73:74:b5:dd:2a:f2:
70:21:5e:67:ff:ca:4d:af:4e:02:b7:e5:ea:1c:81:
b3:a2:75:68:da:ff:30:10:03:8a:b5:81:24:6f:11:
db:78:b8:8b:b9:0c:5b:50:6e:c6:5b:c9:4d:8a:fa:
4a:e7:c8:e4:9d:09:ad:dd:d4:c4:d8:59:91:21:d2:
59:29:32:bb:52:e3:5c:3a:95:77:eb:f0:2f:cc:20:
1c:cc:3b:0d:08:49:0d:09:fa:95:b0:45:6c:d6:2f:
39:da:a0:8c:96:b0:da:20:6d:16:c7:ab:f1:ae:16:
22:1b:ec:f4:4b:3f:b4:29:2f:da:53:3a:d6:06:b3:
29:3e:15:8b:58:ec:6b:2a:5c:bd:cc:3f:39:14:79:
cc:70:b9:71:ae:cc:dd:ab:04:0b:98:74:ba:c3:fb:
d0:7f:84:30:9e:82:ac:76:01:82:0a:b6:7a:72:a4:
f4:ba:fa:b2:b4:c0:50:78:f8:ff:37:f0:bd:6e:f4:
fb:a8:91:52:e6:b8:1b:33:2b:e6:6e:c2:a5:99:8b:
70:16:a4:c2:2e:1e:53:5b:90:d1:92:5e:3a:67:3a:
2c:43:94:0a:27:d8:61:05:17:85:7c:bc:12:a9:49:
37:32:5a:c6:76:1e:33:a7:de:0b:d3:b7:be:a9:06:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:0A:A2:A9:8A:55:EA:09:32:38:43:9D:5B:1B:30:BA:53:33:0E
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:77:dd:38:c1:23:f8:08:9c:ed:13:94:30:79:5b:1f:b0:46:
e8:3d:e4:0d:95:2e:60:16:e6:51:94:7a:e6:1c:32:a1:c3:7d:
4c:3b:38:a5:ba:36:f7:93:df:ec:a1:fe:2c:9c:dc:4b:2b:e3:
db:7f:33:23:fc:6a:c7:e8:e0:04:c8:a9:ed:9b:16:51:29:32:
04:e7:c3:5c:d8:10:14:bb:93:a9:fc:f1:15:4f:92:07:f0:73:
9f:79:88:37:e7:32:3b:2b:72:07:09:07:17:30:48:5d:3d:96:
43:20:ea:51:69:0d:cf:f6:21:0c:62:6f:c5:03:43:a9:5e:ab:
8f:bf:7d:4c:18:39:a9:c7:a8:b1:d5:8b:5f:c5:d0:c9:05:b4:
73:78:a8:fc:62:62:bc:05:d6:25:4c:df:43:e8:90:69:a8:09:
a3:8b:cf:6b:cd:4d:12:96:af:1a:d2:c7:d1:36:5f:d1:69:d1:
ab:0d:0b:39:52:7a:af:52:6e:ff:ec:08:80:01:b6:71:0e:44:
50:b9:cd:9c:c6:55:cd:74:cd:ae:2c:1c:df:2a:1f:64:aa:07:
0b:1a:c1:ea:9e:a2:86:83:96:f5:69:d2:60:c1:54:fa:bf:6e:
cf:8f:4e:75:e3:b2:2b:d6:fd:dd:d0:0e:38:4d:b7:b8:02:9c:
a4:b4:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:50 2026 by rpki-client