Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: S7m1EOhCKLzgTsB1fhPU1/VpejYQr9rkZQzSpGq9R0E=
Subject key identifier: 6A:76:E0:66:EA:36:AD:D5:F9:77:EE:DE:03:30:6E:36:7A:FD:ED:C7
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019E20FF5E8FA8D78123E0D81EB5174B91CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 040D
Signing time: Wed 13 May 2026 11:01:07 +0000
Manifest this update: Wed 13 May 2026 11:01:07 +0000
Manifest next update: Thu 14 May 2026 11:01:07 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: V7bbF7dFgqIEFdA+lYwaPPYPZcVcQNGslsS2uGB8Qpw=)
2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:5e:8f:a8:d7:81:23:e0:d8:1e:b5:17:4b:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: May 13 11:01:07 2026 GMT
Not After : May 14 11:01:07 2026 GMT
Subject: CN=6a76e066ea36add5f977eede03306e367afdedc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:3a:db:49:3f:81:f7:4d:fa:e4:00:9a:d2:
17:d9:5a:a9:09:a3:3c:98:1e:89:1f:71:8f:93:45:
55:f0:a5:cf:90:a8:5c:68:3a:96:a5:15:6f:b5:43:
55:ff:73:f4:36:17:75:33:17:ea:f3:4a:38:58:50:
c3:29:29:58:43:ef:4f:d6:23:31:aa:08:56:27:42:
b9:ee:cc:8d:c2:25:18:cb:71:06:74:a9:17:fb:17:
14:7e:f9:c5:e3:3b:37:7c:2d:6f:ca:87:c1:3a:72:
d4:fb:e2:3c:50:35:f7:ed:17:7e:fd:f4:c2:0a:74:
83:70:b6:98:88:e3:78:c5:df:56:54:d0:03:d7:61:
92:24:89:f5:4b:65:33:8e:90:4e:d4:41:01:69:81:
6d:6d:4f:b9:93:e3:ab:a3:3c:5f:19:c1:01:db:65:
3d:c8:aa:6e:7d:31:25:fc:d6:9a:08:c7:be:bb:46:
d7:6a:4a:e3:16:c4:42:1f:b5:4f:11:2b:92:1a:69:
89:fb:af:64:f8:23:d8:97:66:ec:c9:92:ff:47:68:
b0:b9:c1:0b:9a:01:3c:22:c9:47:34:80:a5:f1:28:
72:08:20:3e:da:66:a1:db:0a:d3:2e:62:3f:01:92:
16:4d:69:a4:38:08:d3:f7:94:c4:9c:d5:fa:8c:36:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:E0:66:EA:36:AD:D5:F9:77:EE:DE:03:30:6E:36:7A:FD:ED:C7
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:98:97:14:65:28:41:50:82:38:dc:9b:29:13:4c:65:5b:
f8:65:38:76:10:c8:28:97:21:86:2f:6e:b5:30:0f:b9:c4:38:
77:b3:06:45:c3:a0:79:11:0e:84:d7:2d:af:6f:b8:bb:e0:89:
ee:06:4e:37:84:b4:e1:f9:d7:c7:54:1e:05:02:9a:b0:31:5c:
1e:d6:1c:31:ce:b9:15:ec:37:e5:68:57:7b:bf:9f:1d:a8:88:
5d:bf:b0:b0:d7:67:c2:c6:e8:7c:57:83:77:74:00:11:67:2e:
6c:f0:2f:0c:f0:3d:7f:c7:e0:66:27:0f:de:dc:43:2b:93:6c:
2c:f0:37:77:fb:ee:a9:0e:68:8d:22:1b:66:33:24:f1:ee:6f:
e2:75:5d:c5:0b:81:1a:8a:d1:00:7e:91:93:4f:cf:0b:49:de:
0a:db:5f:06:28:66:cd:bb:9a:49:17:05:7d:1b:99:07:a5:67:
3d:c8:3d:6b:57:0b:86:5e:b4:df:71:18:20:3e:7c:7d:cd:d6:
2e:0a:d4:6c:4c:9f:b9:e2:d1:09:c0:33:55:c2:8d:ec:12:db:
58:ce:0f:b1:87:03:d1:e0:32:2a:30:61:d3:ce:c9:de:9a:c2:
6b:d0:86:4b:40:0b:2c:3f:e8:6c:cf:33:ae:50:be:b7:b5:7a:
fb:f0:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:13 2026 by rpki-client