Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: rYjwmPG3IoI05yZ+1ZZCNdStkfmJBPOV2vf0Chejjr0=
Subject key identifier: 83:15:29:50:E9:88:7D:CD:AC:20:68:E6:BC:88:71:B2:56:4E:12:1C
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019EC300A6B65C49E78A83302A6591E14F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 22:01:00 +0000
Manifest this update: Sat 13 Jun 2026 22:01:00 +0000
Manifest next update: Sun 14 Jun 2026 22:01:00 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: JUgDo9uTlIAbJ5cN3bD48tzXtH7fBr9AE3rZlxxnvlM=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:a6:b6:5c:49:e7:8a:83:30:2a:65:91:e1:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jun 13 22:01:00 2026 GMT
Not After : Jun 14 22:01:00 2026 GMT
Subject: CN=83152950e9887dcdac2068e6bc8871b2564e121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:e7:b2:73:b8:11:cb:43:56:d8:8b:43:de:
06:74:b9:f7:a1:f7:56:10:b7:d5:39:fc:de:c1:fd:
7d:fe:33:88:18:35:a2:14:3b:ae:74:de:a6:c3:24:
cd:16:19:98:62:4f:73:a4:5e:15:02:85:e4:01:75:
56:92:1e:90:3f:b8:85:5b:b4:4f:21:8c:2f:47:a6:
f7:3c:3d:5e:81:7b:45:91:5d:02:af:29:7c:08:c5:
ca:b9:5f:5d:fc:80:46:86:e5:65:1c:f4:4f:53:d2:
6c:e5:a4:25:50:98:a8:72:1b:38:0e:bf:a8:21:7d:
30:3c:08:e4:c4:4c:ed:52:64:61:65:db:cc:15:a5:
c9:8d:e7:f8:48:1a:42:64:e7:83:da:d7:28:b3:2e:
35:6b:8d:43:28:f1:c0:bd:d1:ac:d4:fc:0b:51:42:
34:68:90:62:6b:35:a8:ea:c4:92:cc:ae:0e:a4:dd:
44:98:6e:45:a3:05:6e:6a:ea:a7:3a:c3:4f:86:34:
16:f2:89:6f:71:a8:49:d1:59:4e:e2:9d:a4:ab:28:
b9:dd:b3:46:a8:b0:0d:6b:e8:47:38:7f:72:d9:d8:
62:69:26:bc:04:d4:e8:b5:89:a5:5e:e5:5a:a6:b7:
c1:db:eb:06:9e:19:fe:e3:e1:0b:dc:e2:74:66:0f:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:15:29:50:E9:88:7D:CD:AC:20:68:E6:BC:88:71:B2:56:4E:12:1C
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:57:be:3d:bd:9a:4f:dc:4b:38:40:12:87:f1:cd:32:d6:20:
22:f7:b2:d4:f8:4c:aa:26:7b:8d:ae:47:7c:35:a1:37:27:e7:
65:49:07:04:95:df:80:2b:22:1d:f0:d0:d2:3f:51:42:07:ff:
4e:2f:2f:3a:3d:34:4c:8f:28:1a:fd:e7:5b:3d:6d:06:7d:5a:
b3:74:27:30:43:c2:e3:35:f6:2f:37:f3:38:e0:32:3a:78:f0:
b3:85:88:ee:33:12:b6:22:93:4a:69:83:a4:58:11:c2:78:3c:
b1:0b:02:64:9f:d7:fe:89:65:d3:da:f9:da:57:ac:e3:0a:e5:
bd:e6:5a:f5:09:1a:40:26:b9:54:18:80:71:e6:70:04:b2:1e:
0b:8b:03:cb:b5:ae:d1:4c:6a:ba:3f:4a:df:f4:41:7f:df:1f:
a7:7c:dc:9a:f7:91:d8:53:77:23:00:46:ed:21:a5:6b:2a:2d:
cf:e4:db:71:db:97:92:44:92:2b:b8:5a:5c:61:6d:72:40:ea:
fb:76:70:ab:f9:bb:5f:c2:06:9e:b1:03:39:c2:ba:8b:1e:1a:
d3:4b:60:b9:4a:98:54:36:de:a5:61:03:22:de:96:9b:ca:bd:
24:64:3c:a5:98:9e:f8:8c:bf:4a:b6:ad:67:92:82:4f:d0:4e:
7d:b4:34:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAKa2XEnnioMwKmWR4U9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjYwNjEzMjIwMTAwWhcNMjYwNjE0MjIwMTAwWjAzMTEwLwYDVQQD
Eyg4MzE1Mjk1MGU5ODg3ZGNkYWMyMDY4ZTZiYzg4NzFiMjU2NGUxMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/fnsnO4EctDVtiLQ94GdLn3ofdW
ELfVOfzewf19/jOIGDWiFDuudN6mwyTNFhmYYk9zpF4VAoXkAXVWkh6QP7iFW7RP
IYwvR6b3PD1egXtFkV0Cryl8CMXKuV9d/IBGhuVlHPRPU9Js5aQlUJiochs4Dr+o
IX0wPAjkxEztUmRhZdvMFaXJjef4SBpCZOeD2tcosy41a41DKPHAvdGs1PwLUUI0
aJBiazWo6sSSzK4OpN1EmG5FowVuauqnOsNPhjQW8olvcahJ0VlO4p2kqyi53bNG
qLANa+hHOH9y2dhiaSa8BNTotYmlXuVaprfB2+sGnhn+4+EL3OJ0Zg+9/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMVKVDpiH3NrCBo5ryIcbJWThIcMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFe+Pb2a
T9xLOEASh/HNMtYgIvey1PhMqiZ7ja5HfDWhNyfnZUkHBJXfgCsiHfDQ0j9RQgf/
Ti8vOj00TI8oGv3nWz1tBn1as3QnMEPC4zX2LzfzOOAyOnjws4WI7jMStiKTSmmD
pFgRwng8sQsCZJ/X/oll09r52les4wrlveZa9QkaQCa5VBiAceZwBLIeC4sDy7Wu
0Uxquj9K3/RBf98fp3zcmveR2FN3IwBG7SGlayotz+TbcduXkkSSK7haXGFtckDq
+3Zwq/m7X8IGnrEDOcK6ix4a00tguUqYVDbepWEDIt6Wm8q9JGQ8pZie+Iy/Srat
Z5KCT9BOfbQ0mw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:09:10 2026 by rpki-client