Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: 4hrgCQRqWd7iZLDY/5q8jWBUtPDu19SGQpSXGDO5Me8=
Subject key identifier: C4:A2:E4:BD:7E:9E:0E:66:51:BA:BA:D8:88:6A:1F:2A:44:76:F4:5C
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 019E21DAE28A7128D1FFBE119795BD6642B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 04FB
Signing time: Wed 13 May 2026 15:00:53 +0000
Manifest this update: Wed 13 May 2026 15:00:53 +0000
Manifest next update: Thu 14 May 2026 15:00:53 +0000
Files and hashes: 1: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (hash: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: zrtT+lbi9DKvEMhlrAc69drwThAK1WAMxEoTMJZyPjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:da:e2:8a:71:28:d1:ff:be:11:97:95:bd:66:42:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: May 13 15:00:53 2026 GMT
Not After : May 14 15:00:53 2026 GMT
Subject: CN=c4a2e4bd7e9e0e6651babad8886a1f2a4476f45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:4d:2f:0a:8b:22:02:c7:cb:d4:bb:dd:e9:
59:d1:7e:01:b3:43:68:bc:d4:28:b4:5c:d0:c1:3c:
7f:f9:86:e3:1b:52:ae:78:29:24:c2:ab:35:2e:bb:
bd:7f:81:1e:67:38:d2:64:1b:65:92:b2:fb:84:c3:
ce:66:37:f8:0f:3e:9f:5a:88:36:53:99:98:b5:c4:
14:a1:a9:dd:ba:59:d5:3c:2e:1a:6b:b6:3c:ab:3f:
e8:df:33:20:c8:61:1a:95:b5:59:c4:ce:0e:e2:20:
0a:b4:c6:9a:f0:fb:9b:ea:fe:1f:1a:7d:c8:97:8d:
9e:d2:30:29:25:a6:3a:00:94:58:96:d7:65:40:7c:
63:ee:44:98:7d:f4:61:ec:69:ce:34:f8:8e:4e:76:
36:84:b2:ba:e7:94:d2:ec:f9:8e:87:8a:e2:54:06:
ba:b7:6e:5e:ff:ca:c4:f2:c2:7b:76:5c:d6:81:b3:
ee:43:91:03:bd:8e:df:1a:7f:29:b5:2c:db:f3:16:
36:28:f7:a8:cf:4a:f0:91:a2:18:dc:c9:70:b3:03:
51:c5:ee:dc:2b:ec:8b:db:3f:06:69:8a:17:00:4e:
82:1f:e8:79:2a:fa:0a:36:55:6d:43:85:97:ba:f3:
bd:93:72:2f:df:fb:76:67:28:e4:51:cc:3a:f5:d7:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:E4:BD:7E:9E:0E:66:51:BA:BA:D8:88:6A:1F:2A:44:76:F4:5C
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fc:a1:de:9a:d9:03:61:d3:20:e4:ca:f7:0d:b4:63:95:87:
2d:26:46:36:a2:0a:0b:a2:99:07:84:36:3b:5f:f1:e1:9a:ac:
58:05:51:09:59:b5:e4:b4:3f:90:e7:d3:1d:6f:4f:6c:5f:bd:
f0:c2:52:53:fe:b0:fb:99:e7:cc:06:92:d8:93:ab:96:13:6b:
27:83:f9:be:2b:53:dd:c7:87:bc:b3:34:bd:03:10:b8:7d:34:
cb:17:4f:e9:1e:84:b1:24:99:ff:40:1a:8b:08:8e:10:23:77:
a4:a6:bc:57:db:bc:3d:c0:2b:55:31:db:d1:de:10:ab:de:d4:
16:97:62:a6:c2:9a:17:3d:a6:d8:20:62:d8:61:58:02:71:60:
e1:c5:7c:de:60:43:64:7b:20:80:84:ef:84:6a:05:12:ea:3a:
0e:55:07:63:52:52:1e:6b:3a:01:b8:8c:51:a4:62:54:8b:a6:
6c:f4:38:ef:6b:07:88:b5:ab:e4:de:9d:1c:4f:98:2d:fd:d9:
27:8d:ba:32:d8:78:86:64:1a:0d:d0:df:0d:a1:7a:13:06:48:
b3:5d:dd:9b:05:38:7f:c4:81:a5:93:3d:c0:30:7b:de:34:69:
e0:9e:9d:21:94:dc:c6:3d:72:0e:5d:73:75:5b:4e:a2:88:42:
a3:00:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:03:41 2026 by rpki-client