Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: fYXp44IXpRSP/rKxh1ZEPPNSzOwWWRBmDE0DM0L0InQ=
Subject key identifier: D1:6D:4A:5A:23:95:32:D4:F9:95:44:16:41:47:11:D3:7F:D2:7F:E0
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 019EB7A0A6E85CD91F41931D3FD631691F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0E9B
Signing time: Thu 11 Jun 2026 17:00:19 +0000
Manifest this update: Thu 11 Jun 2026 17:00:19 +0000
Manifest next update: Fri 12 Jun 2026 17:00:19 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: 55KcEZEi6Q/FrXMh1CFTxRK9JLFuXnxfp/onNY3+aPc=)
2: lBqk0ZJjhRTU5WPqZKy0Q75ijLY.roa (hash: umtk9WvPU6HXcHOoGpqTOSwBwsTaIlBi9j5sLa9RX78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:a6:e8:5c:d9:1f:41:93:1d:3f:d6:31:69:1f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Jun 11 17:00:19 2026 GMT
Not After : Jun 12 17:00:19 2026 GMT
Subject: CN=d16d4a5a239532d4f9954416414711d37fd27fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:ae:2c:e1:98:d8:fa:a7:20:c7:f1:fe:c1:
39:05:e6:f0:e9:d9:b7:2b:4a:12:75:36:ab:6d:00:
4f:ba:04:f1:8f:38:41:61:cc:57:a5:c5:a0:8b:74:
b3:dd:74:45:bd:03:09:56:6f:bc:d9:ae:89:da:cf:
a5:20:ea:d7:4b:c9:d4:3d:85:fb:29:98:23:08:e5:
0d:55:4d:33:2b:e9:20:d4:31:49:cd:3f:60:d3:a2:
85:2f:2f:ea:83:59:d9:33:65:c2:c4:b3:ed:f1:f5:
9f:7b:ee:8f:7d:db:5c:fa:b6:de:7d:34:28:ea:cb:
34:8c:fa:37:77:72:ba:86:1d:b8:25:c8:7b:75:22:
0c:fd:ab:99:af:30:9e:3f:f1:ab:b5:b0:49:c0:0d:
ec:06:a8:20:1a:d3:a7:c6:89:ca:cc:0f:82:90:cb:
cd:f3:9f:25:2a:6c:de:6a:a9:4f:72:85:4f:36:2a:
78:d9:e9:ef:54:fb:71:8c:37:04:d0:5a:39:6a:dd:
d5:1d:c6:88:b5:f4:b3:d0:17:77:3f:b4:c7:0d:e4:
15:26:db:f1:46:e6:19:69:08:4a:b5:10:6c:8f:73:
d0:77:b9:9d:6e:f1:66:ad:9d:6a:85:c7:01:1c:de:
19:07:21:44:2b:c8:cf:f5:20:09:46:ba:b9:4d:39:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:4A:5A:23:95:32:D4:F9:95:44:16:41:47:11:D3:7F:D2:7F:E0
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:90:0a:7f:33:83:81:ef:3a:61:97:c8:6d:65:46:34:d4:97:
83:d5:16:90:39:55:2d:68:ca:f2:65:24:c0:9e:ef:e9:c0:66:
bd:d5:10:a3:f1:2a:fa:56:64:6d:4d:e6:da:f9:68:69:40:28:
93:fa:8b:f7:da:bb:ca:02:5a:a4:f1:9e:c7:ef:25:e8:63:6b:
36:26:0e:9c:ba:ac:b6:61:c2:0d:9b:5d:06:b3:6b:49:62:92:
90:3e:b1:04:34:c1:83:a1:fb:5f:c3:d4:1a:cd:4e:f9:24:dd:
c6:ec:0f:66:6f:8c:73:12:31:11:3d:8e:ac:7e:8a:c1:30:ab:
b3:4b:c1:56:5f:f4:00:17:0e:96:a6:d0:3e:c1:1c:60:17:fe:
56:19:f4:13:59:75:22:22:c6:a0:41:07:75:41:22:17:4d:aa:
0a:cc:61:bc:32:6a:b9:db:48:fc:a0:99:dd:78:53:dd:9e:04:
45:8c:ab:d7:98:19:20:08:2f:86:0a:fc:39:cf:a5:36:f9:30:
7b:a7:eb:3b:9c:cb:05:36:08:73:f5:9c:ec:e3:ac:7e:8f:5c:
ec:84:0a:fa:bd:59:88:d2:99:da:f0:f9:da:71:73:1d:c5:b3:
fe:dc:d6:1e:bf:66:de:fb:c6:e7:d4:fb:d3:65:11:5d:73:fc:
f2:47:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:16:26 2026 by rpki-client