Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: 4YPFa7jr/FWhGvdSa1VOtIBVQkwNSnEKB4nSCLaFVGA=
Subject key identifier: 8D:78:8B:31:D0:FE:BA:74:47:04:C4:4F:8B:30:89:E7:AE:6A:E4:C9
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 019F134140F133E0437546DD9D48140FA9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 0611
Signing time: Mon 29 Jun 2026 12:01:11 +0000
Manifest this update: Mon 29 Jun 2026 12:01:11 +0000
Manifest next update: Tue 30 Jun 2026 12:01:11 +0000
Files and hashes: 1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: U9Lz2p65NXrcQSB4nVHNQqVPKqtGgSJuHrGTiOYC1kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:40:f1:33:e0:43:75:46:dd:9d:48:14:0f:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jun 29 12:01:11 2026 GMT
Not After : Jun 30 12:01:11 2026 GMT
Subject: CN=8d788b31d0feba744704c44f8b3089e7ae6ae4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:a3:32:13:ed:4e:cc:39:95:8e:e3:fd:12:
9a:d4:5d:42:98:53:15:bf:3b:36:e9:d7:2f:0c:d0:
c1:9a:5e:f2:8f:df:93:81:d5:7d:58:bc:82:07:c1:
12:90:be:a5:7b:f8:6c:7f:96:ec:43:95:55:98:3b:
3d:65:35:5b:86:d6:dd:a0:cf:1e:8f:d2:82:56:e8:
bd:4d:0c:cc:a5:72:e7:77:4b:69:ab:d0:88:2e:f8:
28:e8:dc:9f:d1:6d:61:25:a4:f2:36:d1:79:d4:fb:
dd:02:a7:6b:6d:65:1f:34:80:ea:d4:46:57:11:7e:
8b:c3:ee:dd:0f:6e:a2:89:04:57:7c:22:02:0b:cb:
3f:b8:6f:bf:f3:ce:c6:f6:39:33:70:27:9d:eb:b4:
09:99:29:1a:9a:ab:f7:09:bd:21:7e:35:4d:f1:02:
d7:88:92:5c:80:33:d1:5c:7a:21:f1:70:78:79:5c:
54:f9:29:fd:92:94:8a:0c:70:d9:49:e9:51:cd:9e:
08:e8:be:83:e8:4a:8f:9a:52:b5:cb:67:e2:58:ef:
be:4d:2b:ec:16:47:a5:da:42:b0:e7:36:6f:b5:68:
88:4d:79:89:92:ad:c3:11:fc:c6:8a:49:9b:68:78:
a2:70:7b:80:58:3c:10:85:e2:50:1a:d7:31:6b:83:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:78:8B:31:D0:FE:BA:74:47:04:C4:4F:8B:30:89:E7:AE:6A:E4:C9
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:43:ce:55:5f:86:e5:65:b9:ff:24:ae:de:3c:92:c8:ea:
f4:ef:8b:ec:6c:80:01:60:d4:0f:8a:91:e9:8f:d0:c8:b0:64:
c5:4f:05:f3:35:36:77:84:9a:ba:1a:9b:3b:c9:00:fb:90:00:
83:20:84:6b:93:66:84:44:d0:0a:32:5b:b9:16:ad:f7:55:d4:
3f:50:fb:cd:7e:f3:77:5a:4f:74:7b:21:ab:b2:9b:34:da:3a:
19:76:05:3f:79:a1:03:7a:3c:6c:93:78:81:a2:ba:18:b3:88:
b4:7f:b5:b8:d0:76:49:8c:84:49:09:00:32:e7:50:bd:09:32:
17:78:7d:e1:ad:0b:0e:35:24:f8:ff:51:8b:42:1f:34:da:a8:
60:52:a9:f4:05:d1:29:79:59:12:a8:cd:f9:88:fb:f3:f5:8a:
94:ff:83:b1:83:b2:32:96:57:ad:b1:df:be:ed:34:5f:7d:a8:
92:d9:4b:68:b8:c8:35:a3:dc:7e:7d:e7:de:87:b8:d9:ff:f1:
dd:ad:b6:28:bc:8a:a2:72:c2:8a:7b:37:97:14:8c:6b:0f:e6:
75:37:9f:a3:34:32:e4:ed:47:50:c8:fc:e9:ab:43:d4:32:5b:
cb:2e:af:51:d7:a3:e3:1d:53:bf:5f:7b:14:d9:a9:63:3e:31:
28:0c:11:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQUDxM+BDdUbdnUgUD6nMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDcwNDFmZTU1NTkxZTRlMjIzNmE0MGY0MzkwMGVmMjZl
ZjA0NWUwHhcNMjYwNjI5MTIwMTExWhcNMjYwNjMwMTIwMTExWjAzMTEwLwYDVQQD
Eyg4ZDc4OGIzMWQwZmViYTc0NDcwNGM0NGY4YjMwODllN2FlNmFlNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvajMhPtTsw5lY7j/RKa1F1CmFMV
vzs26dcvDNDBml7yj9+TgdV9WLyCB8ESkL6le/hsf5bsQ5VVmDs9ZTVbhtbdoM8e
j9KCVui9TQzMpXLnd0tpq9CILvgo6Nyf0W1hJaTyNtF51PvdAqdrbWUfNIDq1EZX
EX6Lw+7dD26iiQRXfCICC8s/uG+/887G9jkzcCed67QJmSkamqv3Cb0hfjVN8QLX
iJJcgDPRXHoh8XB4eVxU+Sn9kpSKDHDZSelRzZ4I6L6D6EqPmlK1y2fiWO++TSvs
Fkel2kKw5zZvtWiITXmJkq3DEfzGikmbaHiicHuAWDwQheJQGtcxa4N1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI14izHQ/rp0RwTET4swieeuauTJMB8GA1UdIwQY
MBaAFJ0HBB/lVZHk4iNqQPQ5AO8m7wReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDkt
NzQ3NDY5ODlhYzkyLzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDktNzQ3NDY5ODlhYzky
LzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC9DzlVf
huVluf8krt48ksjq9O+L7GyAAWDUD4qR6Y/QyLBkxU8F8zU2d4SauhqbO8kA+5AA
gyCEa5NmhETQCjJbuRat91XUP1D7zX7zd1pPdHshq7KbNNo6GXYFP3mhA3o8bJN4
gaK6GLOItH+1uNB2SYyESQkAMudQvQkyF3h94a0LDjUk+P9Ri0IfNNqoYFKp9AXR
KXlZEqjN+Yj78/WKlP+DsYOyMpZXrbHfvu00X32oktlLaLjINaPcfn3n3oe42f/x
3a22KLyKonLCins3lxSMaw/mdTefozQy5O1HUMj86atD1DJbyy6vUdej4x1Tv197
FNmpYz4xKAwRrg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:30 2026 by rpki-client