Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: RMGE2l9xVEo+9FJGIaL216F/pyanB+tVlFVzSF9Ru2k=
Subject key identifier: 6B:FA:F5:BF:CD:63:FD:AB:1B:63:02:E5:84:FA:CF:0C:73:65:CD:BF
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019E1FB57AB8214EB0568244589B5F2E2829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0CE5
Signing time: Wed 13 May 2026 05:00:47 +0000
Manifest this update: Wed 13 May 2026 05:00:47 +0000
Manifest next update: Thu 14 May 2026 05:00:47 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: lrZQ7Qnvb1LCGLvx+1HKIWOqS4I8d5YlT8gLHNzbbIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:7a:b8:21:4e:b0:56:82:44:58:9b:5f:2e:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: May 13 05:00:47 2026 GMT
Not After : May 14 05:00:47 2026 GMT
Subject: CN=6bfaf5bfcd63fdab1b6302e584facf0c7365cdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:8a:d0:7b:61:42:67:69:25:8f:da:a3:5a:
66:59:88:55:3b:c3:38:70:8e:56:c8:cb:b6:60:47:
1e:ed:1d:b8:a4:18:95:a9:62:94:83:8b:db:57:2a:
bf:5a:8c:73:a6:ed:a3:45:67:b9:86:62:91:ec:09:
fa:91:28:45:d8:01:98:fb:b2:0b:14:be:60:e5:3f:
7e:dc:c2:cb:0a:b5:2f:b6:f4:be:2a:9b:1d:44:9f:
6e:a3:77:65:f1:b0:74:fc:7d:b0:bf:8f:53:67:70:
7a:32:0c:fd:10:03:24:3f:d8:ba:3e:a6:69:7b:04:
23:51:8f:7c:c3:28:9c:1b:ca:5e:ec:32:99:b1:cb:
a6:3d:87:8c:bf:42:08:94:9f:8b:43:9a:89:f4:9e:
b1:d2:be:97:f9:94:9c:67:40:14:e5:92:5f:6b:9c:
61:4b:ae:c9:ae:cf:02:59:45:12:7f:93:70:bb:5a:
2f:27:92:1c:0a:4d:74:91:69:75:94:28:58:a8:af:
8d:4c:9d:e8:bb:39:ab:82:1e:a1:65:02:dc:56:74:
56:4b:22:c0:3c:69:63:88:d4:00:95:6d:54:39:cc:
b8:c3:b1:ad:02:6c:41:80:1a:d5:a1:d4:b6:34:1e:
8e:55:12:1f:de:57:fd:fe:4c:72:02:4e:c4:a7:4b:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:F5:BF:CD:63:FD:AB:1B:63:02:E5:84:FA:CF:0C:73:65:CD:BF
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cd:a6:1b:0f:c7:c4:19:7b:fa:3c:d8:3a:c3:9a:e2:25:56:
cf:67:30:55:19:ae:56:34:a6:c5:a1:9e:77:39:f5:f9:b1:5e:
7f:25:98:eb:6d:db:ee:69:96:32:21:d5:a9:8d:ca:92:88:6e:
a7:03:16:85:d9:32:84:4e:d6:52:b9:9e:57:bf:08:f8:b1:37:
c7:62:0c:c5:34:d1:7e:81:9b:8e:00:44:9a:9b:2d:a4:97:93:
c6:df:86:c0:a8:8d:7d:49:3e:60:b2:0f:39:1e:48:5c:59:8a:
c5:d5:d0:2d:06:1e:9b:c4:20:8e:68:5c:3b:06:d3:8e:29:45:
e9:ff:a5:76:fd:8e:4c:a3:a9:22:91:81:fa:1a:9c:70:9a:1b:
8b:4f:4b:ac:47:14:61:39:87:f9:26:b0:ce:7b:6f:cc:8f:e1:
7c:f5:f7:10:b0:8d:e0:41:a4:2d:e9:ff:56:74:9e:db:53:7f:
70:fd:cb:bd:3a:ce:96:4d:78:ee:ed:2c:35:a4:28:e3:39:eb:
7a:fe:64:5f:fc:3d:7c:b7:40:6b:b7:b8:2f:95:26:60:6a:e9:
52:50:45:c4:3b:68:c9:e4:e2:bf:d1:db:60:97:08:42:51:74:
05:5f:ed:99:56:59:13:53:4c:2d:6b:4e:11:08:bf:89:bd:05:
bd:a9:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:42 2026 by rpki-client