Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: JRbDe4vS0CdFzcxTFxPXp+cTrHQYUfjAxNbitlp14w4=
Subject key identifier: 07:FC:5A:60:DC:4D:B9:7A:1D:B0:F8:B7:6E:C5:07:7E:6F:F2:32:10
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019EC1487BE58DDE11B31476C985BD7FF2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 169B
Signing time: Sat 13 Jun 2026 14:00:13 +0000
Manifest this update: Sat 13 Jun 2026 14:00:13 +0000
Manifest next update: Sun 14 Jun 2026 14:00:13 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: zVKJb2R8UQOsG+Qvp4Wm/ttdHGbbtDPMYgdJ2ax4xHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:7b:e5:8d:de:11:b3:14:76:c9:85:bd:7f:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jun 13 14:00:13 2026 GMT
Not After : Jun 14 14:00:13 2026 GMT
Subject: CN=07fc5a60dc4db97a1db0f8b76ec5077e6ff23210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:90:76:86:e0:24:cf:f4:ee:8f:c0:b3:4f:
0c:ac:7a:1a:92:40:36:21:16:23:a7:6a:07:bd:4a:
5c:ab:0c:39:d7:06:e3:85:07:f2:63:82:51:d8:64:
97:57:61:48:00:be:b9:1d:09:5a:96:5c:f4:8f:e3:
c0:52:5e:5d:d2:dd:4b:71:fa:e8:be:43:2b:fa:ea:
28:69:dd:62:a2:5e:a3:f4:c8:ca:29:09:62:f4:31:
9f:db:ce:fb:02:2f:bd:f3:64:a7:c7:3a:84:9c:58:
f4:f0:78:6d:ac:cd:73:e4:e2:27:3a:dd:4f:a9:a5:
d8:2d:04:8e:ae:3d:6d:c3:dc:99:b5:cf:4f:3c:26:
4c:1f:86:26:6d:81:c5:5c:4f:88:63:de:af:5c:6f:
18:60:cf:86:8f:8e:4f:d5:cf:33:df:86:45:1b:4c:
c7:07:2f:23:7d:2e:fa:f1:e8:50:4d:8d:89:04:ff:
40:fd:83:cc:ce:01:ba:26:a5:ef:5a:9b:f9:f0:d4:
f0:dc:5f:db:a3:fc:3b:9f:a0:36:5a:ff:23:29:17:
1d:7f:45:c9:2b:d9:e4:41:18:31:06:d4:76:9f:0a:
85:88:a5:0f:50:06:b7:ec:7b:30:94:6d:54:c9:25:
32:94:8d:6f:ea:77:cf:7a:3a:d5:7b:20:e9:cd:65:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:5A:60:DC:4D:B9:7A:1D:B0:F8:B7:6E:C5:07:7E:6F:F2:32:10
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e1:b2:c6:42:04:b0:6f:7d:b6:97:14:22:31:39:2c:e5:4c:
d4:45:bb:38:bc:a3:d8:eb:93:25:19:4d:da:d1:ce:35:02:94:
4e:d9:9f:11:09:3d:ad:cc:22:76:85:67:a5:0e:7f:0d:c3:61:
62:ac:31:2d:d5:ea:8c:df:59:07:e9:14:b1:0c:6c:84:15:c0:
39:a8:79:5a:e5:8c:73:76:56:a0:d5:32:48:a5:09:6b:d8:3d:
4a:7d:82:99:48:6a:67:bb:7d:49:9a:ff:7d:68:0b:a0:38:80:
3d:7a:6e:98:f2:9d:fc:ea:d5:1d:32:33:e7:e9:df:48:c1:3b:
3f:02:65:e2:b3:a2:18:78:c8:bb:44:72:9f:8c:61:85:d7:e4:
7a:04:49:31:10:f9:15:31:1c:4e:01:8c:8c:a2:20:3e:14:fd:
86:5c:94:d6:dc:3e:eb:8a:07:57:f4:fb:de:76:22:32:81:63:
79:38:fc:29:cd:97:83:01:24:41:b4:6c:97:03:ac:5f:bd:41:
d1:a6:67:79:a4:6c:63:96:7b:63:30:dd:a1:d4:db:9b:67:c6:
ab:51:03:6d:5e:7f:5b:ce:b1:c1:7d:80:70:9b:24:c6:34:28:
14:30:bf:65:a3:c2:b0:f3:8e:36:b2:d0:3d:56:f3:26:a2:ff:
0b:7a:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:49 2026 by rpki-client