Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: n8YeJUmN/2nohT297HzrJF5CFvjeGV71do/qWW8T24Q=
Subject key identifier: 56:2D:44:07:54:F9:BC:D6:DD:EC:FE:52:22:2A:33:A4:11:7B:E1:02
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 019E1DC6F332ABC8A96334E7E558D832F8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0ED2
Signing time: Tue 12 May 2026 20:00:38 +0000
Manifest this update: Tue 12 May 2026 20:00:38 +0000
Manifest next update: Wed 13 May 2026 20:00:38 +0000
Files and hashes: 1: 5RFARNnQP81iGTseWeUutxn3EXI.roa (hash: Nxourp9u5nBIWhDVwCVmI/AilNX0cSXhcM93qEhrhhU=)
2: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: Klqv3fBjtRvgQc66p6g0EZYWaGHlVRuukK7IYi4FXYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:f3:32:ab:c8:a9:63:34:e7:e5:58:d8:32:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: May 12 20:00:38 2026 GMT
Not After : May 13 20:00:38 2026 GMT
Subject: CN=562d440754f9bcd6ddecfe52222a33a4117be102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:c4:ae:44:35:7c:55:cb:7b:2d:b4:1a:fa:
7c:de:6f:51:3c:3e:f3:5c:fc:63:37:44:0d:ef:5d:
54:45:4b:ed:38:69:3d:f5:65:5b:b9:db:bd:69:11:
95:e9:eb:ff:ef:99:a7:2a:f9:fb:8e:92:18:66:23:
19:d5:3f:80:60:9d:db:5e:f7:49:17:12:3c:c8:4b:
24:9a:84:ae:0d:02:96:97:bb:b6:4a:50:ee:01:22:
9d:06:d3:91:33:23:64:a4:31:17:94:a8:4b:0f:58:
1f:6d:ef:ec:fa:cf:35:e6:f6:7f:7b:1b:82:15:77:
0d:b1:9a:48:80:d7:51:d9:b0:28:a6:03:d8:cb:bc:
e1:04:85:cf:66:63:80:19:8e:a8:ec:59:0d:c7:54:
ae:a0:a6:6d:66:7d:ca:7e:63:c0:1b:64:66:94:f1:
b0:63:49:4e:f4:42:41:98:1c:4b:4a:23:46:7a:d8:
6e:22:ed:9b:03:92:f0:ee:90:39:46:e2:1b:24:61:
c1:9d:8c:59:78:19:54:c6:1b:2a:5b:44:3f:bc:7c:
1b:e3:2c:05:4d:62:c0:a1:f9:78:2b:a3:c0:54:8c:
ac:76:50:8d:d1:55:f7:69:59:e1:5d:c8:89:17:a5:
45:77:47:f1:12:fc:e8:25:b4:59:88:f6:55:02:13:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:44:07:54:F9:BC:D6:DD:EC:FE:52:22:2A:33:A4:11:7B:E1:02
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f0:d5:6d:cc:4c:7c:64:8b:72:ea:db:f4:6c:73:7b:90:56:
9d:cc:dc:20:77:4f:25:10:21:71:9f:d3:41:c3:1b:9e:e8:85:
75:a9:86:20:d4:75:3f:1a:98:29:48:85:75:1c:94:88:d7:9d:
c4:75:38:78:aa:5e:d2:f0:05:13:2f:bf:d0:cc:62:00:e4:6b:
99:ab:ae:5c:a9:13:dd:12:1b:94:9c:46:f1:5e:e9:c5:40:04:
15:97:49:a8:ab:f9:f5:be:c7:78:aa:4d:1d:27:e5:2b:8c:a3:
2c:51:26:ca:95:fc:4b:84:c8:f7:b8:b4:d4:06:03:6c:5b:13:
2f:a6:c3:58:11:34:79:6b:6a:67:46:92:08:de:e2:af:1a:b5:
7f:c6:d5:6e:91:11:84:16:7e:2d:0b:58:a1:84:db:e7:08:7e:
ab:f5:9a:9e:af:43:86:9b:c2:92:ee:11:5f:1f:9f:fd:b7:da:
3a:2d:b0:d1:99:7f:ee:32:82:2d:7e:0e:d0:5e:17:b4:5e:b1:
12:d8:1c:ea:10:e8:6f:1d:ee:1c:11:4e:5a:38:77:7d:c6:20:
6e:e8:ce:f1:9f:5c:e8:0b:f9:9c:16:8e:3c:81:c3:3c:87:b4:
1e:5f:6b:db:77:97:be:7f:c2:2a:67:89:aa:6d:e7:1d:47:b8:
c2:72:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:20 2026 by rpki-client