Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: vE290yeK6NL49AkIb9SdkOJInl5EYATLlapwZzTKpeU=
Subject key identifier: 7E:77:A5:67:1C:E1:4E:13:E3:2B:F8:AF:B2:AF:17:AD:DA:EC:61:CE
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 019EB6FBE5579B1ED733EFC6E1A3E4BB1E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 14:00:22 +0000
Manifest this update: Thu 11 Jun 2026 14:00:22 +0000
Manifest next update: Fri 12 Jun 2026 14:00:22 +0000
Files and hashes: 1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: qRChZadVIT2frkWey00HPrCjbMqdPYwio/8mDPymIto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:e5:57:9b:1e:d7:33:ef:c6:e1:a3:e4:bb:1e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Jun 11 14:00:22 2026 GMT
Not After : Jun 12 14:00:22 2026 GMT
Subject: CN=7e77a5671ce14e13e32bf8afb2af17addaec61ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:d1:9b:29:bd:75:7a:47:27:fe:0a:bd:96:
44:22:63:96:ee:4a:88:b8:cb:06:98:57:b8:42:28:
5d:55:d9:bc:b3:69:08:69:3c:27:ac:88:9f:01:60:
cd:ca:01:25:12:c5:7d:46:e5:af:e3:02:06:e4:5e:
76:e4:0b:ee:d0:7a:50:80:3c:9a:72:d8:80:f4:5e:
23:65:42:c7:cb:3b:23:9d:5c:f7:32:26:12:5b:47:
a4:05:45:78:fb:65:ff:e9:c7:e2:79:66:4a:e2:9d:
7c:00:f9:32:77:13:99:76:97:f1:4f:9b:bf:d1:4a:
f2:25:30:f2:36:74:60:ed:e0:10:30:8d:26:31:55:
bc:4a:ae:3b:7b:d6:94:5e:bb:09:98:ef:49:53:6a:
9b:9a:1c:67:ee:21:d4:d3:f0:61:56:d9:6b:6a:37:
c3:a2:ea:0c:02:65:f4:b0:b7:a1:5a:39:69:d9:6e:
1b:3a:57:75:e0:2e:0e:f4:52:bf:21:9d:49:02:0f:
f7:1f:23:44:c3:15:48:96:cc:f7:e2:46:db:01:87:
77:90:f9:e4:65:ff:45:63:54:0d:64:8b:12:44:b4:
46:df:94:42:c3:15:cc:3d:6c:cb:79:37:51:ed:84:
3a:fd:d5:37:c2:15:ea:47:6d:69:2d:ae:ef:f4:01:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:A5:67:1C:E1:4E:13:E3:2B:F8:AF:B2:AF:17:AD:DA:EC:61:CE
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:23:7d:ee:08:3e:62:66:fd:d9:35:2c:13:d0:45:5d:93:51:
d9:2c:7b:98:8c:73:54:ff:7a:90:14:d3:8a:12:9c:cd:ee:f3:
82:f1:87:95:c3:53:7c:e4:80:c3:48:41:90:9e:02:16:5d:78:
a2:57:e5:d8:d1:ce:ff:f7:a4:9b:d3:e1:e1:41:74:f3:27:88:
64:98:e4:5b:4a:40:15:c3:04:c3:34:40:3f:3b:b5:f4:6f:f2:
00:ae:19:3e:78:30:52:b7:8f:69:4d:82:50:8b:3b:28:09:5b:
cd:a2:07:52:59:4e:90:8f:2b:41:d3:06:5e:75:ef:5a:55:49:
96:38:c9:fc:73:d1:74:27:d1:27:8f:21:f0:96:b7:6f:21:3c:
56:ed:5d:4d:0a:9e:a5:1d:58:0b:de:34:a9:10:13:44:22:03:
ec:d4:ba:e4:37:f7:2f:99:4a:46:aa:24:38:68:91:7e:08:e4:
2c:ae:4e:ef:86:ef:27:3b:67:0d:d8:41:4f:2b:40:83:bc:74:
5e:14:33:83:0f:9c:6c:99:bf:f8:15:35:89:a1:a1:8f:d7:ca:
16:bc:61:20:00:2b:d5:b8:09:07:44:31:ce:74:10:7c:42:b6:
65:4f:4d:23:18:81:bd:cc:8f:af:4c:3a:de:59:93:90:23:b1:
0b:80:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:17 2026 by rpki-client