Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: /FtFE/V2IMTSiBsgqUO/RUsPUQ8/v7sgcVNadbahyFE=
Subject key identifier: 6F:DC:5A:0F:EB:BE:9B:F3:CF:63:13:8E:F9:4A:45:BA:13:53:3F:07
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019E1E35D21D675F298D57AEE86B6581D47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 0246
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: MSv+LB/pNHu7aJTrA5yjrpWAbbaFYua85tE8bySIraY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d2:1d:67:5f:29:8d:57:ae:e8:6b:65:81:d4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=6fdc5a0febbe9bf3cf63138ef94a45ba13533f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:81:2f:af:69:b6:49:05:94:21:ab:95:6f:
ad:d9:13:8f:55:86:4d:fd:4d:b9:60:97:6d:0a:7b:
b5:4f:82:e6:33:d9:3d:40:07:aa:5a:1a:ad:42:9c:
8e:9e:0f:4c:c7:04:33:3d:4c:ee:75:9e:8f:ce:9c:
0a:a9:be:3c:dc:a4:b7:2a:86:48:84:0a:d5:0d:f9:
58:db:26:33:38:a5:f5:f2:43:f0:b2:ea:af:9f:ac:
7e:9f:b6:ce:f1:41:cf:bf:f5:fa:7c:1d:7b:d1:60:
9c:ce:cb:94:7e:53:02:83:7b:df:10:3c:87:4d:2b:
27:c5:f6:a5:1d:e9:99:39:93:1b:e8:7b:a9:cf:8c:
3d:18:fc:54:b6:02:53:4f:44:d8:6a:cd:da:df:06:
d7:fb:59:8c:1e:ab:c5:13:b4:cb:80:c5:03:41:22:
3c:36:bb:4d:f5:45:11:55:4b:10:be:ec:79:1e:d4:
58:44:47:67:d7:fc:95:55:25:ae:94:55:a5:13:db:
16:34:38:90:05:cf:97:d7:b5:e9:87:4a:d9:fd:a0:
ac:e7:be:53:ff:5c:a9:97:ed:94:c6:b6:fd:cc:3b:
57:6e:88:39:ee:c5:67:21:44:c3:c3:08:33:38:df:
79:25:a8:f5:83:11:5e:d2:03:cd:bc:fa:d5:db:a9:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:5A:0F:EB:BE:9B:F3:CF:63:13:8E:F9:4A:45:BA:13:53:3F:07
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:4e:63:67:03:d1:40:53:01:eb:67:20:54:cb:29:06:f4:
d2:44:c8:9d:d7:f7:37:6c:64:27:4e:28:aa:bb:ba:bb:ed:d2:
a3:6e:b1:4c:4e:4c:80:52:18:71:65:a4:f7:5f:8b:fd:8e:18:
08:d4:6e:07:f3:e7:68:db:02:0d:96:24:35:47:07:09:d1:63:
8f:83:8a:ec:79:73:16:c8:81:21:79:d3:29:a6:51:3d:f8:3c:
22:8e:6b:6d:ab:23:36:3e:d7:dc:25:7b:6e:41:cc:83:28:ae:
61:8e:cd:e2:9d:4c:c6:17:2f:14:46:7f:63:4d:e4:13:ac:e8:
ee:3c:cf:f9:8d:d9:b5:95:11:55:31:3f:6e:1d:c4:9e:3a:4a:
f7:e9:0c:37:b4:06:50:20:91:8f:dc:4e:10:4d:be:86:e6:64:
cc:80:ca:5b:98:9e:10:ef:60:ff:dc:ee:6f:2b:91:bc:45:73:
3c:59:86:d7:fb:cf:8f:32:9e:d7:be:e5:51:24:8e:be:f8:eb:
f2:1d:85:d3:5f:a7:44:b3:20:36:ec:3d:61:7f:d9:0e:ef:7a:
b7:f3:5c:23:13:4d:b5:b2:12:36:00:ed:2c:1a:88:b9:47:8a:
50:4d:79:07:cd:6c:68:c3:4d:72:e0:00:4c:53:01:f0:65:c8:
a2:ac:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:39 2026 by rpki-client