
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: LBFn4gCuUG7EM/9EKth2TwZ1FTWauFVfS8Lt8GvE+sw=
Subject key identifier: 40:FD:2F:6D:70:6E:89:E9:65:64:76:BF:3E:83:97:6B:42:44:3F:8D
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019EBFFF3DD72F2FC3CB6977029EA74EE969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 193D
Signing time: Sat 13 Jun 2026 08:00:36 +0000
Manifest this update: Sat 13 Jun 2026 08:00:36 +0000
Manifest next update: Sun 14 Jun 2026 08:00:36 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: Z5vWdcYF3rbrmrcgTv0usXlxmUJRDCKXANQnDZulEdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:3d:d7:2f:2f:c3:cb:69:77:02:9e:a7:4e:e9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jun 13 08:00:36 2026 GMT
Not After : Jun 14 08:00:36 2026 GMT
Subject: CN=40fd2f6d706e89e9656476bf3e83976b42443f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:34:e0:38:65:23:18:70:71:f2:ad:5e:7a:
7d:1b:0c:b0:b6:8c:cb:d6:16:fa:26:b0:73:29:10:
52:1b:59:56:c9:f6:2e:d4:ba:69:e5:eb:ae:fe:ec:
88:c0:96:5f:8b:3c:8e:15:86:04:b3:36:01:ab:d4:
2b:2c:4d:56:12:dd:ba:5b:76:70:b9:70:c8:b7:90:
cf:e2:46:7f:c3:5c:35:af:a6:09:5b:0c:4b:8b:a6:
b9:69:a8:48:a9:c5:da:f2:4a:1f:e9:53:c1:01:3d:
59:e3:14:89:00:c7:7b:91:28:bb:a7:aa:c9:18:35:
15:74:66:15:de:0a:39:fb:72:47:0c:65:34:34:6e:
ed:f6:cb:c4:c6:87:68:53:9d:f5:69:8c:12:a1:f5:
65:a3:24:c4:89:5e:ce:a7:98:7f:01:c7:ec:58:57:
e3:ef:e8:95:73:87:8c:5f:d8:66:e2:27:ff:a2:32:
90:e5:c1:8e:10:93:e7:97:33:d7:c1:e6:32:8b:5c:
a6:02:dc:eb:c5:8a:37:34:18:9a:93:4a:ae:83:7d:
5b:a1:76:73:56:9c:03:68:20:c9:0f:a4:8b:3e:ae:
7a:27:ff:e9:71:67:d8:58:21:99:aa:5c:ca:49:a3:
ec:44:fe:af:54:e4:8f:a2:f9:e3:ab:83:a7:81:ee:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FD:2F:6D:70:6E:89:E9:65:64:76:BF:3E:83:97:6B:42:44:3F:8D
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:7f:7d:c2:8f:ce:b3:31:b2:98:9f:df:90:53:de:7a:f9:
81:d0:37:4d:ac:d1:c5:ff:6e:e8:9d:5a:71:0c:26:86:82:45:
40:a1:02:ad:cf:e5:aa:62:08:6a:31:15:b6:13:ed:48:48:98:
b7:ec:a4:cf:05:ec:db:45:70:de:1d:b5:c8:65:f3:ab:8e:da:
b5:26:33:85:0e:b4:dd:44:33:d1:23:07:41:5d:25:05:da:08:
f7:ef:5b:db:0b:24:c9:7f:ff:cf:3f:2a:16:5b:fb:66:50:e3:
a4:bb:b0:24:5c:fd:c9:f9:8e:a6:77:e7:a6:49:e1:a8:dd:ff:
48:fe:51:ff:24:d3:fe:25:b5:4a:e5:2f:9a:cd:1e:b2:63:82:
74:38:6c:54:32:c3:69:92:aa:fe:3d:52:5b:4c:d0:99:02:f4:
91:71:df:4b:3e:5b:10:6f:c1:37:50:82:44:30:e6:dd:d3:18:
d8:7c:be:e6:d5:1e:bf:93:f8:b1:b6:50:9a:60:f3:4f:6d:82:
31:95:1f:e2:53:d6:c2:aa:ae:f5:8d:b0:f6:0c:fc:5b:28:d3:
22:35:b6:89:3e:43:0b:af:c0:2e:cd:9b:15:d8:02:c7:48:68:
eb:57:1b:f9:30:9b:7a:48:70:43:aa:d4:66:15:d2:b1:ad:6e:
1c:c3:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:47 2026 by rpki-client