Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: VlEhI0eONnQkaOEDI5kmW4+5zk7Y+dDOptN+lODzmFw=
Subject key identifier: DF:85:51:64:F3:6B:34:49:67:CC:4E:95:A9:C1:6B:60:34:E8:67:34
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 019EB80E9134203D98325331CA27482C2E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 1578
Signing time: Thu 11 Jun 2026 19:00:22 +0000
Manifest this update: Thu 11 Jun 2026 19:00:22 +0000
Manifest next update: Fri 12 Jun 2026 19:00:22 +0000
Files and hashes: 1: _3hDeG2_gP2OF_kOwQ_-RVY6AGk.roa (hash: MhtbxEEzpA8s8MGWNiwEnIVTeslC4E8X2PXN0HorBxY=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: J5vj3C1+4qVFLP4aQMEkTYdaHIr+ooxOPDnfvpw4ceY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:91:34:20:3d:98:32:53:31:ca:27:48:2c:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jun 11 19:00:22 2026 GMT
Not After : Jun 12 19:00:22 2026 GMT
Subject: CN=df855164f36b344967cc4e95a9c16b6034e86734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:bc:5f:f0:17:2d:85:a1:3b:6e:4c:d9:53:
53:fe:8e:ac:b2:f2:c7:a7:35:25:00:30:ff:2d:b0:
d0:a0:11:a6:8a:d2:87:21:7e:d7:ee:26:ec:dc:ad:
44:98:9b:ab:8a:6b:cc:c0:14:86:dd:ad:df:9c:70:
ba:8f:06:ab:f2:1b:03:e3:9f:24:3d:fd:14:3f:42:
dd:ca:07:86:4b:4e:b9:ae:8a:8d:34:d2:16:32:42:
3b:34:66:75:ed:dd:34:37:9e:de:f9:4a:91:ef:59:
a4:1e:2e:2e:f7:ad:0a:80:78:26:df:fd:f3:a6:e1:
77:90:59:19:63:ee:8a:11:bb:c8:2a:c5:36:07:ec:
48:3f:90:5c:c8:ff:62:71:e8:cf:4c:32:fa:57:1e:
0b:f3:95:b2:4c:af:09:78:bf:18:ad:4a:36:b8:f7:
e7:62:07:99:26:9a:b6:a9:7c:4b:be:d0:ad:eb:1c:
ef:14:d1:81:4e:45:c1:54:22:c6:33:bf:7d:19:e5:
e2:c4:a5:a2:ea:89:9a:57:01:0e:62:b8:38:bc:f8:
f8:f5:25:53:75:da:2d:22:46:45:72:f6:78:db:12:
70:b2:67:6b:60:41:2e:6e:4f:c2:48:cd:37:83:38:
2d:a2:8a:03:e9:d1:e2:6d:46:94:b0:fd:68:ca:ab:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:51:64:F3:6B:34:49:67:CC:4E:95:A9:C1:6B:60:34:E8:67:34
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c5:cd:2c:1d:d3:f0:85:0b:67:4d:b3:9d:83:e5:18:50:35:
c2:c0:a7:19:67:80:01:15:de:b1:5e:59:7f:88:73:ce:9a:9a:
60:64:37:9f:26:df:20:43:4e:ae:06:6b:38:58:c8:59:00:07:
28:0e:ef:a2:93:45:ca:8d:69:7e:29:61:e4:dc:6a:17:d6:0b:
04:ae:85:be:fc:7b:09:3a:98:07:12:dc:2b:c1:93:ff:f7:bb:
3a:3a:de:e5:95:42:85:54:43:68:a9:a0:9b:ab:fb:6c:1a:ab:
26:a7:f0:7b:2a:a2:66:71:75:0c:4f:a8:46:d9:e9:63:d2:93:
2b:08:cf:fe:18:2c:3f:f1:11:a2:0b:62:5b:4c:61:65:2d:d3:
eb:1c:a6:0b:88:46:48:30:47:3e:1d:7e:a3:98:a1:9e:17:f5:
01:b8:4b:07:3b:a2:cf:f2:14:53:16:0e:3b:2a:ba:86:a9:14:
13:9a:c9:bd:de:12:34:38:fe:fd:1d:99:46:78:23:13:b2:15:
ba:22:3d:22:19:3b:bf:99:ca:4a:4c:84:6d:b8:67:7b:ce:9a:
9c:40:28:2a:0a:a0:94:91:af:be:97:5f:bb:a3:b1:52:15:55:
4e:b8:51:c6:83:10:17:f9:94:7b:5e:22:bd:a0:5d:99:57:48:
b8:3f:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:16:58 2026 by rpki-client