Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier: nCDHjkqnQOBYlilJCx2mtDP7IcDFSosICQdTMeD2xao=
Subject key identifier: 99:EF:B3:5B:4F:9D:2D:3F:C3:7D:13:70:66:54:DC:F7:45:D6:A6:A3
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 019E1E6C6CA5C4392E645FC89DEE78E4C0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number: 4E
Signing time: Tue 12 May 2026 23:01:22 +0000
Manifest this update: Tue 12 May 2026 23:01:22 +0000
Manifest next update: Wed 13 May 2026 23:01:22 +0000
Files and hashes: 1: 54-l6_WE4mpSzibcgvfylxURMs8.roa (hash: sePGTr5+yfqTzWvL3Wjt87hvin99jlrgLvtLsAD9+VQ=)
2: 6Bd_dmaoEZ1Gs0FRJb3NyILTT9A.roa (hash: Mk+M/Fjc68fkukvC6/Uq0uxs0FLSquR7Kh7pIPdntc0=)
3: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: VcTb4jsAmsL0rkb2t3TQ6OE/WfbOXFA53vQg2CHWh9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:6c:a5:c4:39:2e:64:5f:c8:9d:ee:78:e4:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: May 12 23:01:22 2026 GMT
Not After : May 13 23:01:22 2026 GMT
Subject: CN=99efb35b4f9d2d3fc37d13706654dcf745d6a6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1f:c3:c5:2d:3f:3c:36:d6:6a:d2:51:2c:0d:
b1:4f:91:2d:38:1d:c1:b0:65:85:e8:54:dd:c0:e5:
23:fe:93:60:f4:af:32:69:ea:a8:47:aa:84:16:a0:
68:ea:0c:96:12:ea:9c:a5:82:7b:f6:f0:8e:25:70:
82:57:3d:73:23:79:b4:ad:8f:cc:18:12:bc:1c:96:
8d:38:bc:f7:b2:cc:73:31:56:6b:c6:25:06:b3:fa:
d1:ef:23:37:30:4d:05:fa:aa:73:d7:57:ee:10:8d:
6c:db:16:b8:21:19:cc:6f:02:0a:44:14:ed:b9:1d:
6f:2e:b7:5e:05:cf:c4:7c:54:e3:17:55:d0:06:57:
24:1d:ab:86:72:49:6a:6c:88:dc:1b:af:62:3e:c2:
6c:42:f5:9f:fa:3c:58:6b:b1:03:70:01:65:d9:0e:
57:a8:bc:ca:2d:4e:c0:15:c1:9e:c0:05:b7:c2:58:
5f:f1:64:ec:d5:57:d7:3b:3b:7a:2c:83:fb:11:b7:
f7:5f:2b:0d:99:95:85:a6:2d:ee:7b:e9:70:78:14:
b2:ae:fd:49:6a:7b:73:da:68:ea:1a:ba:3b:96:39:
9f:06:40:3c:20:dd:f9:02:fe:67:53:c7:d4:76:f8:
f2:1a:d0:23:b5:95:14:83:f2:e1:d5:74:5f:a3:1d:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:B3:5B:4F:9D:2D:3F:C3:7D:13:70:66:54:DC:F7:45:D6:A6:A3
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:df:e9:fa:9f:5e:87:e8:2a:60:c0:ae:92:76:61:4f:0a:
e5:19:e2:be:c5:ce:87:75:7a:3f:0a:9e:68:0e:d5:e4:3a:6d:
32:2f:7c:48:0f:85:ee:f6:50:58:ea:fe:06:2f:b9:d0:2b:78:
2d:fe:05:99:37:38:c6:fa:f9:b0:fc:91:c1:eb:1b:c4:cb:3d:
ec:df:11:8a:03:f1:33:09:1d:50:f0:dd:af:ad:19:1c:b3:e8:
15:7a:97:0c:d7:a3:e0:83:ae:e5:fa:80:5f:09:f6:b8:f4:08:
d7:ab:2b:53:60:9a:ab:c0:cc:b7:cd:67:ff:3c:8d:64:fb:fe:
46:f5:ff:a6:5c:c1:7f:4d:12:e0:80:5c:ec:ea:de:42:1e:06:
44:65:2a:c1:21:80:b2:46:39:d4:af:ff:19:a1:db:14:72:dd:
b7:62:61:00:02:29:04:31:f9:96:1f:2c:cf:2c:b2:6f:bc:95:
64:bc:cc:c4:d6:bb:cf:27:e9:0a:68:b5:c7:01:22:67:a9:5d:
9b:ab:f7:e9:ef:4a:0f:20:72:33:a8:6f:37:fc:0d:a8:f0:be:
88:1e:cf:d5:7f:55:ce:0f:28:4b:5a:67:6f:a1:fa:8c:f8:8e:
5e:17:22:9e:f8:a6:17:76:df:c5:10:0d:e3:02:3c:36:d9:7c:
e4:9d:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:56:17 2026 by rpki-client