Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: HAj+EZJeXeBclI0RiO+9UeDWgH5RMRDU3EgibMvxfdA=
Subject key identifier: 66:3F:E8:D9:9D:32:E8:2B:90:C5:F5:C9:BE:85:3F:FF:52:ED:AA:C0
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019EB7A16173E8DBECCA1BBC81566C480F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1913
Signing time: Thu 11 Jun 2026 17:01:07 +0000
Manifest this update: Thu 11 Jun 2026 17:01:07 +0000
Manifest next update: Fri 12 Jun 2026 17:01:07 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: jSXyAh5QDuGUAAJWOwcTZVlE9OTs6r5cdjbQwy5XxJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:61:73:e8:db:ec:ca:1b:bc:81:56:6c:48:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jun 11 17:01:07 2026 GMT
Not After : Jun 12 17:01:07 2026 GMT
Subject: CN=663fe8d99d32e82b90c5f5c9be853fff52edaac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:3e:37:e7:46:05:f3:a1:09:40:f9:5c:05:
a2:7a:3e:44:ab:dc:2a:04:2d:05:6e:af:b3:4b:d8:
9c:4e:6e:d1:75:fe:09:97:90:88:07:f6:45:44:53:
54:fe:0d:6f:5e:eb:fc:8b:0a:c4:46:00:61:9e:e8:
6a:2c:b0:98:c4:27:0a:31:50:d7:32:96:e4:4f:59:
9a:3b:7a:06:5f:f9:ee:e0:8d:55:85:68:6f:af:49:
ac:e4:32:9a:04:c6:e8:4d:bd:de:ce:c3:fc:06:fa:
e4:fc:3c:5b:8c:f3:a5:39:10:c4:35:1a:81:c2:4e:
a6:eb:44:ee:e8:b7:52:43:bc:13:b5:f8:61:c6:24:
bc:53:d8:49:5b:03:06:cb:c1:72:6c:7f:fb:82:57:
50:aa:73:95:ba:a3:00:4b:a8:06:b6:50:a2:61:95:
63:8a:73:2c:32:dd:d1:02:c9:2b:cb:fb:2b:4e:af:
cd:c7:b7:be:9a:55:97:a0:fa:98:93:a9:69:76:40:
07:e9:b3:a2:6a:29:40:bf:3f:20:a6:52:bf:7d:9a:
e1:3e:ac:62:17:db:4b:c1:5e:29:f8:4f:e6:da:f2:
87:2a:98:b1:84:84:a2:a1:ec:2a:b0:63:36:0b:f0:
5c:be:66:54:d4:ff:86:87:02:7c:4d:af:c0:f2:37:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:E8:D9:9D:32:E8:2B:90:C5:F5:C9:BE:85:3F:FF:52:ED:AA:C0
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:d3:9a:55:ae:a2:34:52:37:47:6e:e3:6d:6a:d8:1b:e6:
89:a6:05:d4:83:b8:a5:80:ec:ba:59:f2:ee:ca:39:e7:7f:58:
8e:d3:6d:9b:8b:91:16:3f:52:e5:f6:b3:4a:1d:a1:f6:ac:72:
03:44:5a:b7:55:39:bd:71:64:70:aa:60:15:68:61:91:f1:23:
a0:8f:cc:3c:f5:bb:1f:ab:a0:e2:93:19:89:56:03:77:a4:bc:
3f:60:56:a9:94:ca:6b:39:f7:1e:bf:4b:4c:e6:07:32:e3:3a:
72:fa:37:c4:65:29:85:67:32:fd:9e:a8:f3:23:df:a4:a7:d1:
55:b4:dc:c3:c0:df:10:7f:19:08:97:3a:9f:d9:09:f8:ca:88:
ec:aa:f6:02:f7:6f:c0:ec:a2:b7:f7:4b:af:bb:7b:16:d8:5e:
97:5d:df:da:2b:42:b1:2e:e4:7b:42:e6:e5:b7:71:29:1e:20:
cc:1e:01:34:fa:ba:16:71:46:88:9b:e4:82:50:39:7e:71:4e:
80:13:47:94:51:1f:35:fe:aa:df:22:54:f0:ed:23:68:8f:b7:
a3:b2:9b:97:dc:f8:10:c7:b6:97:55:17:55:9d:50:67:8e:40:
98:94:63:33:2b:28:b6:38:bc:29:6f:80:dc:15:cf:8e:db:02:
1a:0c:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:04 2026 by rpki-client