Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: wlKb4L7SVWBeJK+T6usv6XCzSjx6bCnAKq5lu/A3CFM=
Subject key identifier: 61:58:14:AB:4C:74:05:91:5F:AF:0A:F3:44:46:0C:11:57:22:CB:BF
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019E1DFDECECE24B7D26ABBB46BBE3C2D2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 0509
Signing time: Tue 12 May 2026 21:00:40 +0000
Manifest this update: Tue 12 May 2026 21:00:40 +0000
Manifest next update: Wed 13 May 2026 21:00:40 +0000
Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: crkPDzdgX3RJ6s1Y92QVZYgz82VlDzkZjfAic8xQER0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:ec:ec:e2:4b:7d:26:ab:bb:46:bb:e3:c2:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: May 12 21:00:40 2026 GMT
Not After : May 13 21:00:40 2026 GMT
Subject: CN=615814ab4c7405915faf0af344460c115722cbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:60:d5:7d:69:5a:f2:ad:9a:fb:62:c7:6e:
24:cd:ef:af:e3:0d:ce:6b:fe:46:c7:52:c6:88:14:
fc:68:d2:3b:ec:8a:cb:4a:3c:51:eb:d5:14:27:24:
c8:f7:1a:c7:54:1a:fc:e7:e8:2d:ae:ba:a3:45:f3:
a0:31:de:32:7a:86:a9:d6:34:ed:d1:e5:23:19:82:
fc:9e:93:db:53:a5:87:58:56:19:9a:d6:13:c5:b2:
35:22:a8:e1:76:60:3e:c4:96:20:a6:0d:1b:8c:75:
4f:dc:be:0c:f3:c8:68:24:42:1d:c9:b5:78:ca:02:
02:07:fe:e1:50:a3:a4:fe:3a:9d:da:ef:59:52:d2:
09:7f:78:8a:67:b9:dd:bc:6f:ea:0e:a7:3b:52:10:
8c:5c:26:93:7f:2a:32:ea:d9:1c:8c:71:75:66:a5:
c0:16:07:9a:e7:6d:2c:32:9b:5f:d9:4c:b9:92:6a:
5a:2c:3a:e2:8c:e8:03:9e:d7:35:39:1e:1e:49:d6:
a6:e3:8c:dd:f1:5e:ee:94:9b:02:4b:40:51:5d:1e:
1a:20:da:7e:73:cf:85:24:49:2a:26:68:35:99:d3:
79:f1:76:5a:96:86:45:1b:6f:d4:b4:0d:57:46:eb:
d3:e4:98:0a:f8:db:af:17:16:39:36:ba:be:39:20:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:14:AB:4C:74:05:91:5F:AF:0A:F3:44:46:0C:11:57:22:CB:BF
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e9:68:cb:ff:7b:6f:30:8f:89:58:da:c5:aa:78:43:11:fc:
7c:a1:ed:cb:16:0b:1a:81:c4:95:1f:0e:04:28:dd:e1:00:08:
97:71:76:c1:02:f7:18:38:b0:15:7a:bb:43:ed:f7:59:83:f9:
fd:4e:eb:a1:33:18:1e:2f:4d:94:bd:19:89:9a:75:48:15:45:
89:e4:11:48:a2:8c:d2:5e:51:ce:e8:43:3a:ec:a5:30:17:35:
73:34:65:b1:0f:f8:5f:8a:2a:1a:13:84:48:85:cf:44:21:d3:
da:ef:b7:c5:d6:5f:ef:05:6c:54:ad:1e:a6:ed:c2:c7:99:65:
b4:c1:06:d4:05:2a:53:23:b1:e9:d6:c6:bc:41:1a:e7:a0:48:
0a:88:87:f0:df:16:b9:0d:99:ba:04:14:47:36:0f:19:e3:ab:
58:32:27:55:62:5c:d5:ff:25:4c:ac:5e:2a:86:ca:bb:2c:2f:
1a:bb:01:4a:a3:79:70:d4:3c:1f:50:f1:c2:f6:e4:50:69:82:
66:e0:16:a3:c4:d6:6e:eb:76:35:cd:b5:36:54:9c:e3:bc:cc:
4f:29:ef:7f:a5:cc:70:e6:b1:43:64:63:a5:11:d5:00:73:72:
52:9b:75:b5:df:b9:de:c1:aa:ea:02:f9:b3:ed:a6:d9:c5:c7:
c3:6b:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:56 2026 by rpki-client