Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: 0Ob/7fud4DI7PtgDjP1+f99TE4hnhTSBlX27R4XcfqI=
Subject key identifier: 31:5B:0D:C8:FE:75:35:2B:65:E2:69:AB:E9:7E:76:78:E2:CD:6D:0C
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019EC1B6C39479A11BA691D8F33CF5B2AA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 0412
Signing time: Sat 13 Jun 2026 16:00:40 +0000
Manifest this update: Sat 13 Jun 2026 16:00:40 +0000
Manifest next update: Sun 14 Jun 2026 16:00:40 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: FX2cnwIWMW18A9WGsYuarjn8/Zu+7d3/Mg/dZ6Je+8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:c3:94:79:a1:1b:a6:91:d8:f3:3c:f5:b2:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jun 13 16:00:40 2026 GMT
Not After : Jun 14 16:00:40 2026 GMT
Subject: CN=315b0dc8fe75352b65e269abe97e7678e2cd6d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:01:72:92:91:3a:ed:a7:b4:53:f6:f3:e4:
01:b7:cc:7b:c1:a9:5d:e6:8b:05:42:87:f1:25:0d:
64:53:4d:da:0a:d6:bc:6e:b5:30:51:85:5d:59:ec:
02:6d:27:da:ad:57:c1:bf:39:1d:bc:43:bc:27:ec:
cc:80:74:94:3f:f0:12:e9:a2:84:b4:fb:39:74:06:
6e:35:0b:c8:38:09:e9:48:e1:4a:0a:86:d0:2c:5b:
f5:76:21:0c:a5:5a:5d:d7:c3:63:e0:34:8d:ac:94:
a0:fe:dc:84:82:77:53:42:97:6e:b0:62:bb:56:01:
b6:32:0a:7f:05:34:a9:eb:e8:3c:3c:c2:38:a3:29:
75:df:03:36:c9:a4:0a:be:2b:2f:41:cf:f9:e6:ad:
ed:ce:3d:79:51:63:b7:dc:d3:2f:90:29:38:a8:74:
ac:1c:9b:67:ea:b3:da:2c:ed:a6:67:df:19:ff:92:
4b:ab:27:e5:d5:f1:a0:d8:80:fe:64:43:8d:25:a3:
87:82:bf:37:8e:26:f5:39:a8:89:58:df:81:a5:b6:
21:87:7b:52:41:7b:cc:5d:09:e0:7d:68:69:f3:b2:
3a:ec:c5:3e:9b:1c:8a:20:21:26:6b:f7:ac:88:2a:
6a:85:86:01:6e:6a:99:de:7e:78:60:69:18:a4:25:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:0D:C8:FE:75:35:2B:65:E2:69:AB:E9:7E:76:78:E2:CD:6D:0C
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:d8:82:41:9a:f4:3b:72:75:37:60:ee:98:46:5d:a5:4e:
d1:50:ab:2f:2a:e9:64:6c:e1:ec:97:cf:01:6d:92:29:0b:e3:
97:1a:c0:10:3d:4f:26:9d:92:49:b4:cf:d1:c6:47:05:bc:48:
6c:ef:a3:ac:21:30:d1:89:b5:1e:46:25:d3:dd:f7:e8:9c:47:
45:6c:ac:fc:5d:a9:04:ab:3d:3d:9e:5f:10:11:b2:9d:e8:ad:
77:31:31:b9:5f:26:8d:65:ea:42:7b:0f:23:3a:3e:d4:35:ba:
ad:b5:d6:c6:6f:26:5c:ef:28:b6:29:0d:f7:95:5a:df:92:cc:
b4:79:67:f6:a5:f6:96:e7:42:a7:38:4a:01:de:0c:31:59:b4:
6a:fa:64:1c:a9:19:c5:42:bc:b0:e8:d2:29:bb:0c:46:b0:9f:
6d:cd:fc:44:5e:b7:ee:63:67:a2:46:53:1e:18:c5:4c:bc:bd:
5d:82:d0:26:f3:47:ea:5e:f2:cf:6e:21:a2:7d:14:69:39:ed:
f0:bc:29:8a:16:e4:c7:14:ca:d7:2f:fa:9a:f4:9b:94:69:aa:
4d:b3:7e:b2:fd:eb:78:48:1b:a0:8b:81:1f:9c:17:4d:6a:cb:
2b:d9:4d:f1:00:87:f5:ce:92:f6:03:0b:05:d2:19:d9:e6:6a:
d1:39:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:48 2026 by rpki-client