Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: SK2JppxP4Vv3yGMtkFYKzhqaQgxDnWpwwOWGGueclAo=
Subject key identifier: 5A:99:B5:96:C1:A5:8F:11:F1:99:20:10:63:6D:92:90:E8:C8:78:B5
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019E1E6C44EF62546B7848463D82FF9C2962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 11C9
Signing time: Tue 12 May 2026 23:01:12 +0000
Manifest this update: Tue 12 May 2026 23:01:12 +0000
Manifest next update: Wed 13 May 2026 23:01:12 +0000
Files and hashes: 1: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (hash: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4=)
2: D-ZsgxX-lJM43XQWd73eBSAxS_Q.roa (hash: WzGIf/FRP/VRfafRsDZV4L+vI/ltiwsGao4Ec2r89Fo=)
3: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: LFI3AzmW/OsY+ejTNOc/PDZhzTbluQUv2YRzLRzowGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:44:ef:62:54:6b:78:48:46:3d:82:ff:9c:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: May 12 23:01:12 2026 GMT
Not After : May 13 23:01:12 2026 GMT
Subject: CN=5a99b596c1a58f11f1992010636d9290e8c878b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:48:98:28:00:0d:a7:aa:6b:91:c5:5d:01:1a:
42:e2:53:d2:38:f4:c5:ef:6f:13:f5:f2:ba:e4:ae:
88:ef:10:24:3b:f7:80:13:d2:14:a2:01:ea:e9:0f:
ed:9e:12:00:a5:85:87:49:44:c2:5c:77:be:ec:c2:
9f:c4:25:38:3e:25:0c:a6:ef:0d:77:18:50:76:18:
5b:ab:e7:0b:4a:e3:35:4a:7c:7e:d4:f6:03:2c:0d:
d7:0d:64:aa:72:dd:55:f6:ad:b1:00:a1:77:13:5b:
88:14:9b:a9:c1:e7:f3:3b:54:7b:96:46:84:70:33:
e4:bd:2b:06:ee:12:72:d7:f0:19:83:80:81:d3:f9:
e5:47:7d:ca:93:35:3d:9d:18:63:5f:fc:c9:c5:20:
11:de:89:78:65:5e:89:8d:e9:10:42:91:ff:d5:de:
9d:1a:65:a5:9e:06:0c:79:4e:07:96:f6:3f:51:11:
f0:d5:ee:44:77:b3:f5:5b:07:c6:c4:57:f9:05:44:
ab:ee:b0:a2:12:8f:59:b7:67:62:fc:c3:4f:5e:23:
6c:8a:e2:50:54:78:fb:0d:0d:46:fa:67:a1:84:6a:
38:82:af:ff:10:2a:78:54:21:10:f0:63:bc:24:5a:
cb:bf:a5:6f:9e:7f:82:db:55:7b:7b:07:7b:ab:47:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:B5:96:C1:A5:8F:11:F1:99:20:10:63:6D:92:90:E8:C8:78:B5
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8c:00:8e:a4:f4:ed:10:8a:46:b6:48:51:f8:31:a2:7c:55:
eb:24:d0:e9:07:a0:e1:d5:c1:ce:ca:fe:99:12:6a:e6:cc:4b:
b7:b7:66:b7:04:5f:e7:07:d5:d5:4b:d7:31:e7:60:fb:a4:7d:
47:0d:04:1d:28:1d:76:f2:d0:78:33:5e:30:9a:59:1b:a8:81:
bf:ee:4c:c3:12:7f:7d:50:1c:fe:df:96:a1:6b:55:80:3d:58:
cb:09:28:15:d5:4f:ac:57:4f:26:e4:57:76:9b:32:aa:78:a8:
e2:7e:80:ae:b5:7f:f6:c4:26:6a:b0:bf:71:a6:00:04:a5:a6:
7b:3f:85:0b:fd:e3:e4:98:cd:4f:3c:50:1b:eb:81:6a:cd:f5:
0a:48:1a:83:53:73:8f:44:ce:b4:2f:f9:9f:33:38:b4:a5:f9:
58:ec:fa:75:1c:c9:1f:47:9e:1e:64:71:2d:76:79:18:b5:6d:
98:c4:1b:78:d8:8f:79:ac:b7:1c:1a:ca:bb:83:16:1b:07:64:
2e:d5:92:1f:fc:ab:15:16:fb:36:6a:f6:27:80:75:6c:77:0a:
9f:68:c9:4f:5f:ad:b6:65:11:02:d5:81:23:58:f9:bf:d5:6d:
80:ee:e8:86:f7:50:40:57:d9:e2:15:84:9e:cb:f4:08:81:9a:
74:7e:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:38 2026 by rpki-client