Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: vGKh4fBnVHm1v2pfiUz2fjIC1Fbh2yaHjvGbftA2j5E=
Subject key identifier: 58:31:77:B4:C3:BC:62:B9:53:60:AD:D4:10:0F:65:B6:A1:7C:EC:80
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019E1D2283B1DC086DA04EEB637B89541915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0C39
Signing time: Tue 12 May 2026 17:01:01 +0000
Manifest this update: Tue 12 May 2026 17:01:01 +0000
Manifest next update: Wed 13 May 2026 17:01:01 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: 6Mmt8dmBIzWA27pVeYRxgjO45+zgqCe94VQzOqxgh0s=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:83:b1:dc:08:6d:a0:4e:eb:63:7b:89:54:19:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: May 12 17:01:01 2026 GMT
Not After : May 13 17:01:01 2026 GMT
Subject: CN=583177b4c3bc62b95360add4100f65b6a17cec80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:94:e5:96:c7:46:63:2c:b5:dd:59:7b:ae:
40:4f:d7:a7:7f:cf:90:fe:68:f6:40:81:e5:b9:2c:
0f:94:fa:23:ab:dc:cb:73:d2:08:7c:62:c9:96:9d:
32:b1:47:82:b4:13:49:a1:85:8e:28:ca:27:f6:95:
0b:ac:e0:0f:f5:53:72:40:ee:5d:a9:91:f7:18:bb:
30:0f:ec:43:6c:bc:f5:fe:2a:78:3b:26:15:6e:7e:
ae:47:8b:25:2a:a1:05:9c:81:dc:9f:2c:d9:b0:13:
1f:7d:b4:09:c3:70:8d:d6:c7:17:39:55:d1:50:fd:
a6:a2:48:a6:a6:83:d2:2a:48:4d:e0:d6:8d:19:d4:
c9:82:ba:e4:b4:12:0a:1f:d4:dd:33:b9:52:b8:d9:
b6:6d:14:41:c2:bf:fd:4a:bf:f7:69:e4:d8:cd:ba:
73:f6:f7:55:f5:34:52:96:5d:0f:f8:20:eb:94:15:
4b:40:6d:3f:90:d5:1a:cd:18:76:86:0e:31:b8:ed:
83:8d:47:d4:44:e7:b2:36:f0:79:c8:aa:50:4d:f0:
1e:f7:fe:fe:18:87:19:7f:ea:14:81:f3:c0:e0:41:
6f:7f:c7:cf:3d:a0:be:e0:19:92:58:bd:f9:d3:ad:
7c:c5:f4:c5:b0:f6:b2:30:15:8a:f0:d5:c4:7d:22:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:77:B4:C3:BC:62:B9:53:60:AD:D4:10:0F:65:B6:A1:7C:EC:80
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:65:7b:22:cf:8b:b9:9f:92:86:cf:f9:32:2f:b9:fb:0b:
da:e6:7a:a4:a4:12:8a:35:0a:96:21:69:9e:e0:bf:de:94:73:
44:c6:0a:fd:66:b0:f6:a3:2f:0a:86:27:3f:d9:d9:8f:cd:1a:
24:15:cf:18:a8:59:6b:86:38:a2:ca:a7:4b:1e:4d:e0:f4:0e:
67:c0:8a:52:62:6d:79:3b:e9:37:a7:0b:71:54:33:b6:52:2e:
c4:be:a1:d9:67:bd:3b:24:04:e8:3e:77:a5:fd:9b:23:c6:fd:
34:5c:eb:3d:af:b4:b2:a0:ad:25:68:34:0e:5d:11:b3:87:95:
cb:db:04:27:d6:c3:2d:77:1e:1a:0a:34:48:d2:9d:9d:f7:e5:
23:af:a1:c6:8e:26:c2:b9:49:3d:20:4f:72:73:45:3c:e0:8d:
18:02:67:ac:68:44:ab:ad:2b:c6:29:f9:7b:01:24:cf:72:ba:
3d:33:76:24:7b:99:af:e1:07:ec:4b:04:a4:8d:72:45:1e:17:
14:ec:fa:ed:c8:7f:18:cb:ec:6d:72:e0:2e:b6:f4:c1:d2:35:
b6:69:c5:f5:c5:e6:04:b9:c9:9d:6c:ae:cb:0a:b4:21:77:c7:
7e:e6:2f:7d:68:67:d0:63:e1:ba:28:fe:04:3f:44:b2:43:b8:
75:71:47:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIoOx3AhtoE7rY3uJVBkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3
M2I2ZWYwHhcNMjYwNTEyMTcwMTAxWhcNMjYwNTEzMTcwMTAxWjAzMTEwLwYDVQQD
Eyg1ODMxNzdiNGMzYmM2MmI5NTM2MGFkZDQxMDBmNjViNmExN2NlYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH+U5ZbHRmMstd1Ze65AT9enf8+Q
/mj2QIHluSwPlPojq9zLc9IIfGLJlp0ysUeCtBNJoYWOKMon9pULrOAP9VNyQO5d
qZH3GLswD+xDbLz1/ip4OyYVbn6uR4slKqEFnIHcnyzZsBMffbQJw3CN1scXOVXR
UP2mokimpoPSKkhN4NaNGdTJgrrktBIKH9TdM7lSuNm2bRRBwr/9Sr/3aeTYzbpz
9vdV9TRSll0P+CDrlBVLQG0/kNUazRh2hg4xuO2DjUfUROeyNvB5yKpQTfAe9/7+
GIcZf+oUgfPA4EFvf8fPPaC+4BmSWL350618xfTFsPayMBWK8NXEfSLfDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgxd7TDvGK5U2Ct1BAPZbahfOyAMB8GA1UdIwQY
MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt
NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk
LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKJleyLP
i7mfkobP+TIvufsL2uZ6pKQSijUKliFpnuC/3pRzRMYK/Waw9qMvCoYnP9nZj80a
JBXPGKhZa4Y4osqnSx5N4PQOZ8CKUmJteTvpN6cLcVQztlIuxL6h2We9OyQE6D53
pf2bI8b9NFzrPa+0sqCtJWg0Dl0Rs4eVy9sEJ9bDLXceGgo0SNKdnfflI6+hxo4m
wrlJPSBPcnNFPOCNGAJnrGhEq60rxin5ewEkz3K6PTN2JHuZr+EH7EsEpI1yRR4X
FOz67ch/GMvsbXLgLrb0wdI1tmnF9cXmBLnJnWyuywq0IXfHfuYvfWhn0GPhuij+
BD9EskO4dXFHkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:13:35 2026 by rpki-client