Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: LXpyAOitfPxye3+qWZS21pKHDtL35WumQvloS9ks7oU=
Subject key identifier: F0:8C:D6:E3:1E:1D:79:F3:F9:8A:76:D0:26:F5:19:CD:AD:46:E0:BE
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019E9C97B56904BC9D0AAABC183947663544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0673
Signing time: Sat 06 Jun 2026 11:00:48 +0000
Manifest this update: Sat 06 Jun 2026 11:00:48 +0000
Manifest next update: Sun 07 Jun 2026 11:00:48 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: 5nVrXIkPyiwx1FXjS5q6s1LrxNRjFamgV8Rq+Teo/FM=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:97:b5:69:04:bc:9d:0a:aa:bc:18:39:47:66:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Jun 6 11:00:48 2026 GMT
Not After : Jun 7 11:00:48 2026 GMT
Subject: CN=f08cd6e31e1d79f3f98a76d026f519cdad46e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:a8:3a:92:7b:e3:3a:b2:57:6b:cf:56:88:
f5:90:af:d0:0d:5a:bd:22:96:67:9a:f6:58:83:8e:
f0:0b:d8:30:d9:02:de:61:12:2c:67:cb:e1:0f:f5:
6c:e8:ff:dc:6b:11:32:3b:59:f2:46:28:c2:36:87:
d1:e4:18:d9:81:50:e0:92:d0:18:e4:f8:f9:03:a9:
c8:19:91:6f:92:3d:7b:f3:77:e6:aa:93:5b:d2:c1:
21:47:53:b3:47:fa:a3:58:4d:af:ee:c7:75:da:87:
99:a0:e7:e0:2e:36:77:ad:1b:44:e2:9d:67:39:2e:
57:17:a1:63:0a:80:b7:3c:e7:97:df:2c:85:5c:24:
d9:1d:82:ca:55:00:e9:0f:cc:53:b9:93:84:bf:c5:
21:9d:62:4c:3d:eb:e9:ae:e1:ad:bf:f9:87:3e:8f:
d3:19:68:56:c6:87:12:36:5c:e7:f1:6c:0e:a8:2f:
a2:b4:54:95:bd:bc:7b:5d:d7:6a:8d:e5:49:20:38:
46:97:40:8b:09:33:8c:30:77:46:6f:8d:16:2b:80:
0d:88:4b:57:43:4f:8c:81:9c:04:89:08:74:76:5d:
e6:9e:60:bc:9d:64:6e:6b:59:0e:55:2a:13:92:4f:
a2:81:8e:0b:8f:5d:9c:5b:74:4d:11:d3:df:2b:cc:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:D6:E3:1E:1D:79:F3:F9:8A:76:D0:26:F5:19:CD:AD:46:E0:BE
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7a:6b:6e:b8:c3:d5:3e:1b:d0:ff:6d:9f:81:eb:74:a3:30:
9b:3b:48:86:e5:c9:e6:aa:78:1b:1b:d2:65:a4:4e:55:d1:d6:
4a:b6:65:88:37:cf:48:9f:f7:81:2a:fb:a0:ea:b9:05:5c:84:
63:71:d1:f9:75:bb:4e:44:37:03:31:1c:00:ce:c2:5e:dd:28:
cd:6d:bf:39:59:3e:94:75:9f:48:5f:7f:ba:d7:60:f7:61:f9:
38:d4:ec:2a:f2:f5:ad:be:20:06:84:25:88:35:14:c2:72:55:
a8:bd:3c:0e:e1:fa:8b:cb:9d:30:a7:94:b6:9d:9d:61:c5:b2:
bf:97:3d:ef:38:2a:f4:a9:a4:c5:3b:5d:4a:15:c2:7d:3e:58:
47:84:c2:ea:8f:5e:ae:91:61:38:48:63:1a:6a:aa:84:c7:f8:
7e:cb:92:e4:9f:11:d5:cb:58:64:8c:c2:5e:dd:40:d7:20:50:
c9:be:a5:26:19:7e:66:38:38:8d:82:5c:61:83:1d:8b:33:49:
9c:e8:cd:2e:c9:2a:47:b5:1c:1e:8a:a0:f2:87:93:65:94:f4:
8b:ea:db:10:59:66:d1:c9:62:12:39:58:ab:a3:34:1f:35:14:
3e:41:02:45:f9:b4:76:01:0d:6f:9c:04:78:3f:ec:f1:e0:58:
92:38:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:57 2026 by rpki-client