
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: bycZ5fhW3tF25kAt9CPwln+avmuudoTXp+mJL1hiP98=
Subject key identifier: BE:F4:00:B7:34:FB:B2:DB:4A:CA:F2:A3:2B:BA:20:C5:8A:63:28:85
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 019E1FECBF3610CA9EDC7713A13C7E7A0F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 0593
Signing time: Wed 13 May 2026 06:01:09 +0000
Manifest this update: Wed 13 May 2026 06:01:09 +0000
Manifest next update: Thu 14 May 2026 06:01:09 +0000
Files and hashes: 1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: S9tX7GCHVh2jgpas8aFPY3+szPiLIINVpnPxI9g5XOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:bf:36:10:ca:9e:dc:77:13:a1:3c:7e:7a:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: May 13 06:01:09 2026 GMT
Not After : May 14 06:01:09 2026 GMT
Subject: CN=bef400b734fbb2db4acaf2a32bba20c58a632885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:df:8d:f3:25:00:d4:b7:52:a6:29:99:08:
b3:18:01:74:d0:0d:29:6d:4e:79:d0:8d:bb:c1:1e:
63:51:27:bf:91:12:f9:9e:40:7f:85:c5:ee:90:45:
86:3a:38:f8:66:32:26:dd:6a:11:fd:3a:bf:81:f8:
b1:f6:07:64:1b:06:ef:b0:10:fb:1f:10:ee:81:15:
39:1d:7c:7a:f1:29:ed:39:1d:d1:bc:62:e8:bd:64:
79:95:c9:a3:b1:65:6f:0a:24:f4:53:7f:fc:91:16:
7e:e1:cd:9a:a9:a4:a0:0c:ff:9c:9f:78:2f:23:1b:
9a:c0:bf:36:99:59:11:59:f9:3f:b4:45:fa:a8:3b:
7a:5e:64:ee:e2:4a:ed:b3:dc:91:2e:32:44:da:3d:
48:f1:00:75:00:43:16:b7:8c:1e:d1:fc:3c:09:59:
5e:a6:c5:1a:d6:e6:c2:7f:1f:30:c7:6e:e6:1d:5c:
09:0a:ea:d7:89:7d:ed:1b:77:a9:ba:28:a4:7f:3e:
9f:11:c8:93:67:3e:87:bd:0d:9c:24:02:ee:b4:b3:
b7:c5:60:a1:b7:bb:11:69:b8:91:f6:b7:a2:cc:5f:
6d:73:45:e6:19:5b:4f:24:f1:aa:95:7f:ac:fe:92:
68:d8:a6:34:5a:8c:7b:5f:e3:9f:02:93:f2:df:ab:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:00:B7:34:FB:B2:DB:4A:CA:F2:A3:2B:BA:20:C5:8A:63:28:85
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4e:9e:69:ec:4a:d8:c6:8e:e1:4c:60:1e:ce:7f:e3:69:1c:
c3:4a:8b:24:e7:64:b6:36:76:0c:a9:89:8d:5b:35:f7:08:32:
c4:25:f2:41:05:5d:a0:00:c2:3c:93:a9:cc:c4:13:f7:92:ee:
fe:97:87:92:8c:3a:b5:bf:05:6d:94:f9:74:23:fe:45:02:b8:
97:52:e8:cc:7f:a4:cb:89:07:be:a6:8b:26:fd:04:4d:23:47:
d8:12:0a:33:f4:a0:47:53:29:fd:26:27:60:e8:a6:e4:41:16:
49:7d:2b:03:95:26:11:db:1a:c4:1a:c7:70:a5:96:a1:e5:47:
30:ab:15:50:3e:36:61:18:61:1f:1c:83:cc:8a:90:2f:8a:df:
89:34:65:94:f9:38:f5:e5:fa:47:92:b1:fb:18:ae:f5:41:a7:
f3:b6:51:6e:ea:bd:d3:59:53:8b:61:72:a6:ca:76:2b:5f:72:
af:c8:70:84:55:8e:eb:72:2d:95:e3:75:73:c7:6c:16:f5:0c:
ac:31:ee:69:df:db:6f:48:32:5d:db:b2:62:c1:ce:96:c4:42:
05:7f:bf:6e:a0:98:4e:e6:6a:d6:3f:32:ac:c4:b4:86:e0:7f:
1a:31:39:9a:35:b5:41:e7:d6:ec:42:a0:97:b4:53:ce:f0:1b:
99:31:83:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7L82EMqe3HcToTx+eg8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDcwNDFmZTU1NTkxZTRlMjIzNmE0MGY0MzkwMGVmMjZl
ZjA0NWUwHhcNMjYwNTEzMDYwMTA5WhcNMjYwNTE0MDYwMTA5WjAzMTEwLwYDVQQD
EyhiZWY0MDBiNzM0ZmJiMmRiNGFjYWYyYTMyYmJhMjBjNThhNjMyODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQjfjfMlANS3UqYpmQizGAF00A0p
bU550I27wR5jUSe/kRL5nkB/hcXukEWGOjj4ZjIm3WoR/Tq/gfix9gdkGwbvsBD7
HxDugRU5HXx68SntOR3RvGLovWR5lcmjsWVvCiT0U3/8kRZ+4c2aqaSgDP+cn3gv
IxuawL82mVkRWfk/tEX6qDt6XmTu4krts9yRLjJE2j1I8QB1AEMWt4we0fw8CVle
psUa1ubCfx8wx27mHVwJCurXiX3tG3epuiikfz6fEciTZz6HvQ2cJALutLO3xWCh
t7sRabiR9reizF9tc0XmGVtPJPGqlX+s/pJo2KY0Wox7X+OfApPy36v1tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL70ALc0+7LbSsryoyu6IMWKYyiFMB8GA1UdIwQY
MBaAFJ0HBB/lVZHk4iNqQPQ5AO8m7wReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDkt
NzQ3NDY5ODlhYzkyLzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDktNzQ3NDY5ODlhYzky
LzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE6eaexK
2MaO4UxgHs5/42kcw0qLJOdktjZ2DKmJjVs19wgyxCXyQQVdoADCPJOpzMQT95Lu
/peHkow6tb8FbZT5dCP+RQK4l1LozH+ky4kHvqaLJv0ETSNH2BIKM/SgR1Mp/SYn
YOim5EEWSX0rA5UmEdsaxBrHcKWWoeVHMKsVUD42YRhhHxyDzIqQL4rfiTRllPk4
9eX6R5Kx+xiu9UGn87ZRbuq901lTi2Fypsp2K19yr8hwhFWO63ItleN1c8dsFvUM
rDHuad/bb0gyXduyYsHOlsRCBX+/bqCYTuZq1j8yrMS0huB/GjE5mjW1QefW7EKg
l7RTzvAbmTGDUQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:33:13 2026 by rpki-client