Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: f8+0tJl3CpVCb5vFuDAySnEIjFnZ+qoJfgcwX9jNwlg=
Subject key identifier: BF:30:C2:A1:5A:B6:1F:85:95:23:B8:94:E6:A5:71:31:FF:81:28:E4
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 019E1F47DF5CD61034084F3769B31E740D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 1678
Signing time: Wed 13 May 2026 03:01:04 +0000
Manifest this update: Wed 13 May 2026 03:01:04 +0000
Manifest next update: Thu 14 May 2026 03:01:04 +0000
Files and hashes: 1: R7Ev9HH_K9DOIOMp6xmYQSBJ3LQ.roa (hash: X1Rxis2xsh9D70KdlclAD1iUcJEca7H7zmBLpXbXixs=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: YliOacj/S+n9Kmbfbp/PbnT86/08KMpecOnPXOdCoFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:df:5c:d6:10:34:08:4f:37:69:b3:1e:74:0d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: May 13 03:01:04 2026 GMT
Not After : May 14 03:01:04 2026 GMT
Subject: CN=bf30c2a15ab61f859523b894e6a57131ff8128e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:1a:33:ad:e6:7f:33:7d:c2:b0:06:f4:94:
d1:05:fb:6d:01:f3:54:e5:5f:7c:83:0c:34:e8:bf:
d2:44:32:a4:7a:15:92:80:37:ae:11:f6:59:65:e6:
28:cb:a0:42:d0:dc:21:4d:69:91:3e:66:39:73:9a:
15:bc:67:ca:1d:4c:aa:6d:a9:0d:9e:06:c2:13:b2:
40:89:6d:ef:57:e7:c9:e7:22:28:8a:c0:69:01:a0:
20:dc:eb:01:76:fa:07:a4:0a:22:ee:d7:f7:de:71:
dc:ee:c8:60:21:ef:b3:b6:a6:ce:36:1b:34:a7:4c:
be:54:2e:13:54:4d:dc:0b:dc:f7:d2:cb:30:79:b7:
ee:34:4b:f8:69:85:02:f7:79:44:a2:3d:8d:25:92:
92:07:73:61:d8:66:11:31:f6:0e:98:66:ff:0a:cd:
da:2a:ad:fe:50:0d:db:9e:94:6a:67:45:bc:2e:f2:
b1:8b:a2:cb:a3:b1:95:44:d9:14:ac:cd:2b:13:c7:
ca:fd:a9:49:9d:84:90:c8:2d:95:b5:43:ab:d2:8b:
8f:95:bd:80:c4:1f:a3:e8:fe:c9:79:3b:d8:e2:19:
b5:00:92:14:b9:fc:6d:23:ee:04:30:6c:70:93:73:
8d:e4:6a:b5:c2:cd:7b:e6:0f:6c:dc:29:07:4c:73:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:C2:A1:5A:B6:1F:85:95:23:B8:94:E6:A5:71:31:FF:81:28:E4
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:75:03:f6:ac:03:e9:b8:a7:3c:1e:66:d2:67:ce:b9:fa:a5:
51:24:70:54:22:e0:2e:2a:8d:88:34:60:6b:6f:f4:5e:7d:e5:
30:41:31:15:d5:17:8c:42:d3:d4:24:f8:54:d1:8d:08:1d:44:
97:db:aa:44:a8:96:91:eb:1b:d4:42:f1:fb:86:3f:e3:bb:b7:
fe:50:85:57:99:bd:92:5a:50:a7:58:6d:6e:e1:70:4f:c2:ff:
41:35:06:30:7e:2a:ef:f4:bb:ab:08:4a:72:02:e0:2e:6c:9b:
35:b1:26:12:4c:70:a3:a1:72:c3:bc:69:d9:be:9d:51:1d:0d:
a4:e3:76:4d:14:07:43:1c:40:cc:a7:5c:28:1c:e1:f3:15:13:
ba:c2:19:22:78:c7:e2:16:32:7e:bd:72:f7:46:a6:c8:1c:6e:
e3:d7:df:3d:c3:5b:a8:96:ec:43:a6:3b:06:99:11:1b:18:86:
f2:87:c4:46:24:4f:c4:c7:da:3f:26:28:1e:09:ff:d6:94:ac:
57:aa:f8:0e:49:2a:40:15:df:e2:1b:a4:cb:84:96:ce:dd:f7:
bc:90:11:fc:6a:0a:81:79:c1:45:f8:3d:bb:e3:fa:30:7e:ab:
74:2b:d3:4a:b1:f2:97:81:01:70:29:f1:07:60:b8:88:17:44:
67:2f:0c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR99c1hA0CE83abMedA1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkY2Y1ZWRjNGU2YWVkYzhkZjQyNDVhNjJmYTM3ZmEyMmE2
MjBlYWEwHhcNMjYwNTEzMDMwMTA0WhcNMjYwNTE0MDMwMTA0WjAzMTEwLwYDVQQD
EyhiZjMwYzJhMTVhYjYxZjg1OTUyM2I4OTRlNmE1NzEzMWZmODEyOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vwaM63mfzN9wrAG9JTRBfttAfNU
5V98gww06L/SRDKkehWSgDeuEfZZZeYoy6BC0NwhTWmRPmY5c5oVvGfKHUyqbakN
ngbCE7JAiW3vV+fJ5yIoisBpAaAg3OsBdvoHpAoi7tf33nHc7shgIe+ztqbONhs0
p0y+VC4TVE3cC9z30sswebfuNEv4aYUC93lEoj2NJZKSB3Nh2GYRMfYOmGb/Cs3a
Kq3+UA3bnpRqZ0W8LvKxi6LLo7GVRNkUrM0rE8fK/alJnYSQyC2VtUOr0ouPlb2A
xB+j6P7JeTvY4hm1AJIUufxtI+4EMGxwk3ON5Gq1ws175g9s3CkHTHNAEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8wwqFath+FlSO4lOalcTH/gSjkMB8GA1UdIwQY
MBaAFJ3PXtxOau3I30JFpi+jf6IqYg6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMt
MGVkZGViNDhlM2FlLzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMtMGVkZGViNDhlM2Fl
LzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnUD9qwD
6binPB5m0mfOufqlUSRwVCLgLiqNiDRga2/0Xn3lMEExFdUXjELT1CT4VNGNCB1E
l9uqRKiWkesb1ELx+4Y/47u3/lCFV5m9klpQp1htbuFwT8L/QTUGMH4q7/S7qwhK
cgLgLmybNbEmEkxwo6Fyw7xp2b6dUR0NpON2TRQHQxxAzKdcKBzh8xUTusIZInjH
4hYyfr1y90amyBxu49ffPcNbqJbsQ6Y7BpkRGxiG8ofERiRPxMfaPyYoHgn/1pSs
V6r4DkkqQBXf4huky4SWzt33vJAR/GoKgXnBRfg9u+P6MH6rdCvTSrHyl4EBcCnx
B2C4iBdEZy8MuQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:53:28 2026 by rpki-client