Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: U1PE/oYN2slEcvtLlA4uGnpjRO2tdLnH1b8AAMqexss=
Subject key identifier: EA:EC:F8:6A:0E:FE:D3:6C:10:FC:50:72:B1:D1:FD:53:5C:3A:EA:A4
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019E20FEE9F2C361151653BEEF25671ABECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 042D
Signing time: Wed 13 May 2026 11:00:37 +0000
Manifest this update: Wed 13 May 2026 11:00:37 +0000
Manifest next update: Thu 14 May 2026 11:00:37 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: YUWqNV1SD2lxdkuEmSC7WEn9696qJbcmOUEPAsodUHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:e9:f2:c3:61:15:16:53:be:ef:25:67:1a:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: May 13 11:00:37 2026 GMT
Not After : May 14 11:00:37 2026 GMT
Subject: CN=eaecf86a0efed36c10fc5072b1d1fd535c3aeaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:1a:0a:61:a7:8d:2e:5f:1b:47:02:7b:07:
7b:4a:de:9f:d6:f5:43:04:ac:30:90:05:48:f6:d5:
f3:03:1e:70:c5:d6:86:0f:a1:d7:21:83:5b:53:e9:
71:6e:e2:97:ac:6d:27:44:e5:c9:fe:44:56:49:8b:
ba:70:65:06:8b:48:04:78:10:97:6f:05:9c:01:09:
91:6a:70:dd:f5:20:e5:2d:ee:3b:02:80:72:80:00:
f6:c7:59:d7:d4:89:a3:7d:a9:41:f9:1a:19:84:e9:
a3:31:01:12:7e:06:b1:0a:04:b8:11:3d:e9:23:ad:
29:1c:28:2d:36:4a:f3:e0:ff:b5:71:08:f3:4e:ee:
62:2a:e6:ec:0e:f1:7e:5b:b2:62:73:05:f8:96:3b:
a6:5b:07:08:0a:92:51:c7:8a:93:5e:5d:63:b3:1f:
64:8f:d8:ca:6f:a1:34:61:6c:9c:66:78:03:b9:84:
88:b7:dd:4c:09:ea:91:c2:ff:bb:ae:1f:74:d0:99:
61:94:c3:28:5e:e5:6b:19:fd:26:76:00:1a:85:b9:
b0:de:0c:bb:61:ed:26:df:ca:90:b4:5d:ac:ba:e5:
df:49:63:83:cc:87:79:3a:07:2a:c9:fb:ce:cc:b9:
1a:67:41:02:d6:9f:2c:21:91:95:28:ba:c2:a7:ca:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:F8:6A:0E:FE:D3:6C:10:FC:50:72:B1:D1:FD:53:5C:3A:EA:A4
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:53:1e:5e:db:72:f7:a8:0a:f2:c6:58:ec:d5:c9:1e:14:af:
a4:ec:71:2d:7f:c5:f1:83:84:47:c0:89:f7:98:12:4a:8a:09:
28:8a:61:78:9c:da:9a:a9:58:53:94:0a:50:d9:f1:80:b3:16:
92:75:32:a8:93:65:a6:8f:6a:2c:35:76:05:30:0b:f0:8e:17:
20:b2:45:41:2c:02:e4:0b:24:4c:d6:e2:5f:25:04:8f:a5:dc:
7c:3c:37:af:89:e7:52:8d:9b:c7:8e:eb:7e:0a:d1:b8:42:87:
a7:fb:1e:b9:34:46:8a:23:00:e6:0a:bb:f3:66:a6:e6:d6:50:
34:cf:2e:3a:34:0f:43:7b:5a:58:25:9d:d6:f3:32:76:ab:8e:
52:2d:3c:3c:ef:34:ef:bb:2b:e1:98:d8:58:a3:bb:34:e1:df:
2d:2b:de:f1:ac:b1:84:ba:c2:7e:07:e5:3e:68:ff:14:a6:06:
9c:02:83:5f:f3:27:7f:5a:29:74:e8:bc:3c:06:94:50:39:1a:
80:de:22:35:de:f6:65:40:95:41:87:48:9e:8d:a6:10:78:1b:
61:e7:09:e2:b8:b1:4a:30:e1:82:e0:b3:1d:0e:c2:69:9a:6c:
4d:b2:78:8a:62:96:b9:83:2f:e6:ae:0b:bf:13:98:4c:bd:b3:
4c:d2:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:11 2026 by rpki-client