Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File: nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier: Fc1zXQMucbmQJ9qFB4IrH+tSSaVFi5da82YPPVJh9hk=
Subject key identifier: A8:AB:42:83:58:AF:C1:BC:16:C0:2F:2C:6A:9F:00:03:92:A0:48:13
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer: /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial: 019E9AA99831ECF349FC72FEA42B24276479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number: 1D
Signing time: Sat 06 Jun 2026 02:01:06 +0000
Manifest this update: Sat 06 Jun 2026 02:01:06 +0000
Manifest next update: Sun 07 Jun 2026 02:01:06 +0000
Files and hashes: 1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: JGyNL8pD/pS75ub3O9BMjfPAIJINj8UkgK9zLY9Sx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:98:31:ec:f3:49:fc:72:fe:a4:2b:24:27:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Validity
Not Before: Jun 6 02:01:06 2026 GMT
Not After : Jun 7 02:01:06 2026 GMT
Subject: CN=a8ab428358afc1bc16c02f2c6a9f000392a04813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:70:aa:df:65:a6:3f:e2:06:71:c7:3a:2a:
0e:7e:1d:e1:d7:ca:1f:7c:ec:4c:33:00:55:8a:8c:
26:33:be:37:7d:97:32:39:e0:0c:e7:ba:ea:ef:9a:
16:f6:00:23:e0:d9:b5:4a:80:39:af:4d:73:ec:f5:
c2:34:e5:c3:cf:2f:00:b4:de:05:25:02:f2:f2:28:
0f:c5:bf:dd:e3:a8:82:1e:dc:88:56:f7:18:f0:6d:
f5:6c:af:20:e0:f0:bc:e6:7f:4e:ff:89:c7:88:9f:
d1:94:f5:83:ea:2f:8c:e1:87:c9:fe:10:c6:4a:16:
63:9f:0f:27:d4:02:db:b7:c5:27:8a:1d:59:55:04:
de:9c:a6:ef:9e:93:f2:c4:28:21:8b:64:ae:1f:fa:
10:74:db:1d:d5:f3:6c:f8:db:ed:6d:de:c7:3c:aa:
49:bd:41:25:47:8b:96:cb:a1:4f:65:82:b7:d3:37:
01:d1:c5:93:08:a7:96:e2:00:65:11:cc:b8:e4:26:
cd:af:91:bb:b6:25:10:4e:1e:06:bc:40:14:55:7f:
28:a0:14:4d:14:2c:54:d4:ee:e3:96:e2:b5:80:10:
c8:f9:af:ab:83:17:f0:70:12:d0:08:08:2d:a8:3d:
b4:19:5a:a2:ba:8a:be:54:9c:cc:28:c5:3e:9c:08:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:42:83:58:AF:C1:BC:16:C0:2F:2C:6A:9F:00:03:92:A0:48:13
X509v3 Authority Key Identifier:
keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:7b:76:16:7e:bd:e4:be:e7:0c:9f:65:9a:8c:c1:e5:b7:
f5:f8:4e:74:1d:42:41:3b:51:2c:f4:24:b0:ca:79:3f:f0:c8:
88:7c:c0:8c:7d:15:bc:67:7b:09:9e:0c:35:b5:15:9f:ca:9c:
c4:fd:65:78:cb:39:b0:2f:e4:07:c2:a3:7a:ff:9c:71:3c:9a:
67:76:90:65:c7:12:43:bd:51:36:94:58:71:dd:e6:b3:c3:bd:
cf:7b:df:a3:bb:77:a9:8a:3d:0e:64:13:e6:41:c4:0c:f3:33:
32:e8:f2:67:11:1d:07:af:15:0c:ab:17:43:27:a7:0d:07:b9:
df:2b:e6:59:84:3e:52:f5:7c:7f:30:da:33:35:2a:f0:f2:ab:
d1:b5:e8:00:60:45:be:b2:ac:25:95:2f:98:d5:b4:9c:46:be:
3b:5c:4a:f4:78:19:cd:a3:5e:92:73:9d:43:18:80:c9:72:0b:
f3:ce:49:a6:0c:63:10:3c:49:23:c9:9b:05:c9:c5:33:53:66:
c2:c1:a9:47:c1:34:68:77:96:f7:d7:06:70:ae:cd:ad:4f:6d:
a8:0d:ab:48:5d:5a:5a:7e:ae:b5:57:20:48:f0:46:d4:8f:ce:
0f:d8:d6:4d:aa:4c:a8:f4:e1:15:90:aa:e4:25:a9:8f:44:3a:
b5:da:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:08 2026 by rpki-client