Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: chPIU7u6+srpNM/+1TzGSRI65tWbdKdlcSJdwW5fpyE=
Subject key identifier: E5:B2:4F:2D:AF:BC:6B:31:7A:61:2C:B8:B9:6C:05:8B:00:C0:09:B5
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 019EB845F3A489FD2E9BF366760E387376DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 08A5
Signing time: Thu 11 Jun 2026 20:00:52 +0000
Manifest this update: Thu 11 Jun 2026 20:00:52 +0000
Manifest next update: Fri 12 Jun 2026 20:00:52 +0000
Files and hashes: 1: mNCgVhtdcHk_wU97-Gy3cw-WdNw.roa (hash: mTADEdCwBT4z8h+n4TsVWFX5hSFlb40/mneHRKe61U0=)
2: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: 6IaYO1in+JPZKJVuHrQ4gf1KbIwBVruZdmPWGTEuQGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:f3:a4:89:fd:2e:9b:f3:66:76:0e:38:73:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Jun 11 20:00:52 2026 GMT
Not After : Jun 12 20:00:52 2026 GMT
Subject: CN=e5b24f2dafbc6b317a612cb8b96c058b00c009b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:78:1b:3e:b1:f1:6b:b9:1b:b6:19:ee:9c:
b0:e6:b3:7d:53:f2:34:2b:ed:46:c1:11:50:da:93:
a1:fd:65:1e:85:43:3e:12:9e:e4:b8:f3:1d:da:0f:
a4:9c:50:c8:cc:01:65:71:b1:43:4a:f2:b6:76:37:
53:c2:da:59:96:ec:58:98:05:4f:9e:9e:92:74:e9:
c0:bd:93:b3:3b:8b:59:0a:d4:af:25:2e:59:4c:3f:
85:9c:48:80:29:61:5e:8e:96:cc:f5:38:ff:0f:3d:
e8:5c:3e:51:7f:d9:51:25:ed:2b:33:2b:e8:f8:83:
01:c5:1a:35:85:72:74:a0:e5:f7:90:04:42:04:6f:
64:98:df:c1:0f:b1:53:49:32:15:cb:bd:3d:be:8a:
27:bc:75:25:ac:fb:15:c4:15:e4:35:40:1d:08:a4:
93:9a:c3:2d:b4:ec:89:c9:e9:ba:d7:04:94:b2:d9:
82:f4:2e:e9:1a:68:0b:f3:6a:e3:a3:77:e1:96:16:
81:fe:d7:b9:23:4c:1f:ec:c8:23:f5:a6:3d:fc:99:
49:29:bd:1d:00:08:16:d5:b9:cb:09:90:68:ab:77:
65:0f:36:f7:f0:6c:d2:08:99:7b:c5:d4:9c:d0:e5:
3d:2e:8c:65:95:b6:aa:d9:e3:e0:99:32:45:f8:af:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:4F:2D:AF:BC:6B:31:7A:61:2C:B8:B9:6C:05:8B:00:C0:09:B5
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f2:b0:bb:29:ff:3f:52:2e:a5:75:48:0d:e8:c4:22:3f:5d:
9c:8e:96:7a:79:45:d3:0b:05:53:07:40:03:04:8f:43:61:de:
b7:dd:2b:2a:b0:2b:69:05:98:0b:2a:2a:0d:61:31:11:35:ac:
5a:75:49:c3:79:c5:a0:02:9c:de:e0:64:80:ed:8c:45:9f:0d:
04:bf:72:0e:c1:0f:14:62:ae:a0:a5:07:c9:1a:61:00:07:67:
6c:d6:88:53:e2:8c:ec:44:62:8f:b5:88:55:33:f9:d0:11:63:
c1:e9:fa:5d:78:fa:2c:e7:ec:0d:b7:53:75:32:f4:66:fd:c1:
f1:e5:76:e5:ab:32:7d:bf:d9:46:14:13:84:ca:36:62:d1:f7:
1d:ca:74:df:bd:59:11:c2:2d:38:f0:0d:8d:b9:41:1d:3e:2f:
28:8e:08:48:c9:dd:71:2c:14:24:57:68:9d:0c:62:2d:bf:c8:
23:4a:53:1d:53:65:4d:5e:9f:bd:3a:74:95:ff:84:1d:fe:e9:
75:27:96:2f:17:a1:53:cc:cc:94:1b:58:a5:c5:f6:82:e0:26:
e9:64:d0:e3:c5:62:20:95:de:18:15:32:94:c9:02:6a:c5:d9:
72:d1:55:3b:98:dd:d6:76:78:86:6e:07:29:76:ff:bf:a8:18:
c9:34:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:38 2026 by rpki-client