Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: 3z+M/oX4IBPovMSBlyFE8fsZ0flBR5b6WRu53/sioW8=
Subject key identifier: 79:E8:4A:A9:C4:28:21:DD:40:C6:81:67:3D:67:E8:8F:35:B0:D4:6E
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019EB87D13E5DA9B8D60FEBE898858DA3E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 0559
Signing time: Thu 11 Jun 2026 21:01:05 +0000
Manifest this update: Thu 11 Jun 2026 21:01:05 +0000
Manifest next update: Fri 12 Jun 2026 21:01:05 +0000
Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: 2Y4hkt86xJMHXDEHgRb9AdcVIMcO3u1ZOBDFW/vustA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:13:e5:da:9b:8d:60:fe:be:89:88:58:da:3e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Jun 11 21:01:05 2026 GMT
Not After : Jun 12 21:01:05 2026 GMT
Subject: CN=79e84aa9c42821dd40c681673d67e88f35b0d46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:06:45:ce:a3:ea:b5:b1:6d:f6:c6:38:c4:
fd:c6:5c:b1:56:33:ae:fe:13:73:19:ae:2f:1b:12:
8f:80:77:ce:c1:90:e5:50:50:09:5a:57:fd:e0:fc:
35:56:f0:5c:e8:ad:d8:80:21:87:31:ff:7b:8c:34:
2b:48:e9:cd:32:63:84:cc:67:e0:df:70:34:15:0a:
e5:43:c1:23:e2:b5:bb:84:24:b8:d2:5f:a6:25:e9:
fa:54:16:c4:fb:16:8c:5f:a3:01:67:dd:7f:cd:d4:
11:17:64:f5:91:8f:a1:da:da:7c:88:e8:c7:df:f2:
f3:1e:95:b7:ca:34:86:c8:03:79:ce:1c:49:6d:d5:
d1:84:27:fa:1f:23:7f:54:a5:b9:0a:73:dd:41:13:
7c:33:53:4d:05:5a:5e:10:38:a3:db:3d:f9:ff:34:
0b:49:9b:b7:b6:41:0c:7a:5c:29:13:12:36:f3:12:
49:c5:fd:d9:bb:17:cf:1a:77:72:d2:c9:78:bb:c5:
75:d9:60:2f:e7:b0:74:e0:55:19:c7:15:4e:6f:e5:
9a:22:d0:d5:7f:41:35:f3:19:d6:af:b3:7d:2f:f6:
29:ca:58:e8:25:03:c3:ee:cd:0b:ca:61:de:e9:da:
16:46:5b:80:cd:95:a7:2f:22:f5:3b:59:08:c4:63:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:4A:A9:C4:28:21:DD:40:C6:81:67:3D:67:E8:8F:35:B0:D4:6E
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:db:22:c1:16:68:14:50:74:3e:6b:3c:ab:fe:5e:d7:ba:71:
ae:14:24:c1:47:42:a4:c1:56:7c:0a:13:bc:40:e8:6f:07:b3:
b7:93:30:26:7c:dd:15:68:fa:72:7f:27:23:04:3a:81:93:2d:
4e:89:6c:3c:e0:12:86:1f:0c:7a:37:32:d1:f6:54:6c:d2:73:
79:c0:7e:28:a5:22:94:5f:72:27:f1:30:46:2f:a7:e3:71:a8:
e4:38:26:1a:57:51:b2:9a:ad:9f:5b:cc:d2:52:02:41:11:62:
cf:c5:3b:d8:71:52:90:87:01:b2:2b:c7:3e:3c:56:32:18:cc:
33:77:24:5f:b2:55:e1:ff:8d:ce:e7:ff:cf:c5:9d:77:c6:a6:
d1:c7:d1:de:56:20:43:59:97:c6:2c:28:57:fb:e5:18:9c:66:
53:5a:bf:7e:1d:cb:a7:bd:cf:61:70:d6:52:2b:d2:05:8b:18:
d0:36:bf:2d:65:c4:e3:f5:86:e4:7f:6c:ee:7b:2c:4e:92:62:
b3:dc:b5:26:a8:59:20:e9:bb:6a:3e:6a:46:7a:95:a4:83:18:
11:bf:95:de:13:84:7a:bc:ff:29:f7:1b:cf:9a:94:a5:15:ef:
5e:3b:97:af:36:57:d2:89:2c:3f:e3:80:c7:00:d8:c3:4c:ff:
55:5c:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:03:59 2026 by rpki-client