
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: ygtOZZ8hiEA7G7u8fy6wGqSxhYzZkbS5LVGCPeqkifQ=
Subject key identifier: E0:ED:FC:2E:A0:43:F7:61:E2:6B:1F:1F:28:D4:39:49:F7:71:34:FD
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019EBB0FC783B33C8DF64BB571B0AA03520C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 06E7
Signing time: Fri 12 Jun 2026 09:00:33 +0000
Manifest this update: Fri 12 Jun 2026 09:00:33 +0000
Manifest next update: Sat 13 Jun 2026 09:00:33 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: A12drOhpIwnlU3OCnX3IeLNBj9wR6Ry+otBVJ5SzBtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0f:c7:83:b3:3c:8d:f6:4b:b5:71:b0:aa:03:52:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Jun 12 09:00:33 2026 GMT
Not After : Jun 13 09:00:33 2026 GMT
Subject: CN=e0edfc2ea043f761e26b1f1f28d43949f77134fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:af:c3:b7:df:1c:7a:91:a0:64:3c:72:2f:
34:69:db:39:be:13:a0:0a:24:31:a7:ad:72:3d:08:
39:74:61:38:13:48:8c:72:df:2e:1b:3c:71:af:c9:
4f:9f:b5:9d:71:9c:62:58:5a:f8:a6:c8:59:fd:b9:
9c:bf:07:e7:43:e4:57:16:c1:ed:45:9f:15:5c:f0:
93:c5:09:40:02:76:43:55:1f:6f:d0:83:6e:3e:91:
51:80:de:1e:d1:ab:d9:db:20:d7:99:33:4e:5b:ae:
65:6a:5b:c1:c3:23:8a:92:4a:5d:05:90:3e:f4:d3:
97:d3:1f:f4:16:27:2f:73:58:95:cc:e2:3e:2a:15:
ae:a8:be:f1:89:93:e2:b3:54:2a:cb:36:fe:98:1c:
56:c0:18:1e:34:56:fb:8b:16:6b:48:a2:f1:bd:98:
05:a0:52:b1:e5:e3:b1:7a:52:03:85:d2:f8:89:17:
08:3a:7c:4f:19:73:89:89:1d:a3:f4:bc:61:5c:80:
be:b5:f2:65:51:ab:9b:44:26:ec:b6:23:79:58:df:
e0:ec:4d:d6:77:7f:c9:ad:c9:39:38:ed:a5:35:7c:
3e:39:44:49:b7:2e:3b:de:be:cf:d2:a6:61:57:e6:
c7:1f:09:4e:69:0b:f7:07:77:71:e6:21:ba:fa:ff:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:FC:2E:A0:43:F7:61:E2:6B:1F:1F:28:D4:39:49:F7:71:34:FD
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:77:df:2d:25:c1:e8:75:fe:3b:68:21:34:6e:ca:2c:a5:34:
61:ff:37:15:1e:9c:2f:fa:2e:6b:9e:6a:2f:3b:49:7c:71:a6:
d7:e7:71:3c:e7:af:38:0f:85:08:4e:39:98:6d:bb:0e:db:60:
30:78:58:b2:5f:ce:a6:5b:96:a8:84:74:b9:fe:33:41:65:0f:
1a:2d:12:ee:ea:52:c6:82:78:b5:e0:62:8b:a0:66:cf:f7:00:
5a:8d:d7:c4:13:55:0a:3e:03:81:84:99:43:de:80:28:69:17:
ae:9a:02:04:a1:80:2b:d4:a4:c1:d9:95:05:3b:4b:64:d7:e4:
e6:e3:66:b6:f7:48:fa:9e:ec:0b:a4:3b:cc:ed:c8:39:40:ff:
15:08:d2:4c:f3:9d:c3:64:37:85:64:00:11:23:0d:53:9d:ef:
dc:84:69:eb:8e:c4:5d:22:c4:cb:18:50:6c:b8:a0:28:d2:94:
67:4a:2b:7d:5a:86:0b:37:9f:9a:9b:75:dc:97:84:19:2a:90:
82:e6:bb:6c:d2:75:6e:2d:0b:f4:5e:94:b1:95:18:90:3d:bb:
f3:10:b0:dc:91:33:29:ab:68:08:2e:90:ce:1c:34:ff:37:3a:
0d:78:62:c0:98:61:27:e8:98:fa:04:a6:ca:5f:d7:9e:2f:29:
31:6f:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:43:43 2026 by rpki-client