Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: SW/dTHpq9oQj4Fhb2zQSZlVBrf+m+uZEnVInelx5ais=
Subject key identifier: CB:4C:F6:F6:CB:1E:C7:EC:FD:A9:E9:B9:CB:34:AB:7E:2C:E2:32:FA
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019E1F7EDF4BAD3677EC7CC2B7E2DFA522F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 03BE
Signing time: Wed 13 May 2026 04:01:08 +0000
Manifest this update: Wed 13 May 2026 04:01:08 +0000
Manifest next update: Thu 14 May 2026 04:01:08 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: ZmElEnh+ZCj+FEz6AgwG6zRKR580U0wR0752zV2H5L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:df:4b:ad:36:77:ec:7c:c2:b7:e2:df:a5:22:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: May 13 04:01:08 2026 GMT
Not After : May 14 04:01:08 2026 GMT
Subject: CN=cb4cf6f6cb1ec7ecfda9e9b9cb34ab7e2ce232fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:ed:f4:65:7d:24:ae:fc:85:e3:e7:95:ac:
83:c5:7a:b9:e4:a1:ee:29:bf:38:0c:55:79:ac:04:
53:18:88:9b:c1:98:dc:f8:87:0a:3b:f0:aa:7a:ad:
1c:ab:4b:6b:7a:d5:f8:b8:f1:70:79:8f:50:0f:c1:
3f:07:b8:53:be:03:36:5d:cd:b5:24:9d:16:b0:2b:
67:f6:0e:5d:7a:a5:4b:2a:9c:a3:5c:99:63:89:d7:
4d:c1:0b:f5:1a:b3:40:fa:cd:71:44:3f:3f:a7:90:
00:e0:14:74:1b:3c:0d:0a:23:5d:8f:ae:e3:49:ac:
6a:c4:bb:19:c1:5a:36:7b:29:28:f6:85:10:d7:1c:
ba:3f:c8:90:0d:1d:1d:56:03:ac:14:d7:20:f8:ae:
2e:04:56:47:49:40:39:34:a1:72:a4:69:32:a8:d1:
51:dc:6c:66:60:9a:d7:26:86:e9:26:2b:36:af:8c:
3d:37:2a:7f:ed:d5:dc:de:34:d3:bc:18:ee:c7:4c:
07:f8:86:02:4a:31:e9:c2:e4:aa:71:7f:21:f1:84:
d3:b2:66:2d:64:a6:d1:4f:9a:54:d3:58:c9:34:f5:
b2:76:ff:e8:bf:24:5d:50:c3:68:0e:a5:20:4c:bd:
6c:0d:b7:40:d9:a2:df:15:18:ef:d3:52:f2:bf:de:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:F6:F6:CB:1E:C7:EC:FD:A9:E9:B9:CB:34:AB:7E:2C:E2:32:FA
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a9:9c:fc:11:55:3d:85:61:6b:71:39:ec:4e:4f:10:33:14:
7a:37:25:e5:f9:e8:15:b0:c0:8b:03:6d:bf:53:85:5d:0a:47:
36:54:d8:f8:5e:9f:6c:a2:95:90:f6:6c:81:f4:37:61:c7:78:
42:23:22:1c:ca:1c:36:25:86:58:6f:2c:06:a7:e3:82:72:75:
bd:d9:22:46:c3:70:e6:34:7b:c4:79:81:5c:fd:18:0a:1b:fc:
ea:af:23:35:6b:97:73:0e:ba:61:7e:fc:51:cf:42:55:07:35:
61:f9:d4:ae:eb:dd:7e:7a:73:4f:ed:9d:b3:b4:ef:71:c7:9f:
c4:82:a5:04:fd:a7:fb:01:49:7e:e5:98:55:5d:91:cd:f0:e4:
73:93:98:a7:c7:d5:a5:3d:67:a3:84:19:c6:bb:1e:d9:d4:db:
40:2b:df:12:d6:d0:95:e3:29:de:d6:04:2c:12:6a:0d:e2:33:
79:9d:9b:db:a8:5e:21:8b:bb:1c:0f:c4:3f:76:ba:82:ee:90:
09:6f:ea:69:20:c2:29:4f:8e:0f:3d:9a:26:c7:d1:63:c8:13:
9b:9a:72:42:64:58:b5:0a:e4:08:d0:80:ab:7f:97:cc:84:0c:
47:87:3e:31:12:52:2f:ed:c4:aa:87:3e:0a:c0:04:fd:8c:ed:
dd:c9:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:04 2026 by rpki-client