Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: yAMCfAhgTS/7i1pywwqqJcXkwGfIBcvfq4jMKA/AT7k=
Subject key identifier: BD:90:DD:0A:92:C6:74:64:D6:AD:A3:6B:14:BA:1E:AD:F9:80:BF:F9
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019E1DC6FB1ADC6C80D8B2FCA188630880DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 10B7
Signing time: Tue 12 May 2026 20:00:40 +0000
Manifest this update: Tue 12 May 2026 20:00:40 +0000
Manifest next update: Wed 13 May 2026 20:00:40 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: TC/MShh30JWeaAM/Z5B27sj5E1XcN7IPiU5ghW1lThY=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:fb:1a:dc:6c:80:d8:b2:fc:a1:88:63:08:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: May 12 20:00:40 2026 GMT
Not After : May 13 20:00:40 2026 GMT
Subject: CN=bd90dd0a92c67464d6ada36b14ba1eadf980bff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:17:43:e2:ed:f9:c7:b5:f9:87:bd:48:d7:
51:72:bd:9f:ca:d4:77:06:5e:e3:e9:54:f7:23:82:
01:7f:fb:44:5f:4f:ac:09:2f:6e:21:bd:43:3e:b3:
e5:4e:b7:7f:a0:d0:f8:87:ab:a5:2d:9a:b3:d3:ad:
10:99:bf:e9:9d:21:a4:4d:e1:bd:3d:44:44:02:96:
32:2b:aa:fa:db:2b:12:ae:ff:6c:bc:c7:a4:9e:20:
29:0f:5e:26:e0:d6:e5:62:03:9b:64:5e:e0:c4:14:
20:29:8e:1c:e1:9c:7b:a7:2b:c7:97:54:bc:2d:15:
40:ad:f8:78:07:d5:60:c3:2d:4b:ef:cc:99:e4:eb:
2c:46:1e:39:c1:63:c1:0c:85:82:db:c3:f9:94:5f:
1f:09:23:2a:a8:97:61:3d:55:ff:be:05:b9:4a:8f:
8f:a3:00:97:44:37:dc:e6:4f:78:85:4f:40:d4:4e:
6a:73:9b:3e:f4:38:1c:fc:0b:89:04:e5:9a:30:c1:
9e:44:eb:5c:31:b6:e3:f3:b4:37:58:dc:6e:d3:de:
ba:2b:38:76:6e:f1:fa:19:aa:32:b3:17:4c:00:e9:
2d:f5:77:08:eb:2b:5d:22:37:bf:9c:41:69:1a:0f:
67:d1:d3:a4:1d:fd:3e:59:39:54:5c:62:09:64:25:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:DD:0A:92:C6:74:64:D6:AD:A3:6B:14:BA:1E:AD:F9:80:BF:F9
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9d:42:18:7f:e7:4e:8d:46:07:46:2c:01:71:72:3e:73:ff:
0f:b2:15:46:c5:30:1d:cf:ff:75:b8:98:68:ea:ad:10:d6:48:
f0:9e:44:c2:fa:db:81:bf:db:c9:2e:59:e2:c8:0d:41:6d:77:
cc:d2:10:15:17:a8:65:46:25:af:cb:a8:40:6a:4c:93:a9:80:
56:e2:b6:87:1a:1c:3d:2d:f0:66:45:39:20:73:48:56:27:cf:
9f:4d:ee:a9:51:44:d2:61:95:74:a3:4a:78:ee:b2:cb:72:41:
c1:d8:23:2a:43:be:b7:5e:0b:cb:a3:1f:70:08:f3:c5:e4:d3:
d1:d4:3a:75:19:25:5d:51:e0:3a:4d:72:8f:fc:b3:6d:94:2c:
d0:38:8e:26:af:01:55:91:14:c4:cb:9d:52:d5:55:f8:a2:fe:
58:2e:55:1e:39:c7:e7:92:f3:34:6a:43:42:7a:fc:8d:8a:1f:
df:17:bc:72:e7:1d:91:5e:fa:5b:16:e2:35:08:9a:3e:b4:90:
5d:47:32:1c:b3:b3:6a:58:d2:2f:28:b2:50:c3:b7:64:31:66:
90:67:14:65:d6:60:29:75:40:ba:ab:ad:68:84:f9:9a:05:6f:
c6:fd:47:a8:b3:d8:dc:15:5b:9a:5d:4a:56:65:b4:e6:62:dd:
ed:00:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:01 2026 by rpki-client