Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: ePHAktkXMoflBAySGODpxg+x6uG+K36Iiq5r7A/dQ2M=
Subject key identifier: E4:AE:35:C3:47:BA:A7:24:7B:2F:63:EB:BA:85:56:A6:BB:34:DB:9B
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 019E9101F834FBC6CB30DB30ABD9176979DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0810
Signing time: Thu 04 Jun 2026 05:01:25 +0000
Manifest this update: Thu 04 Jun 2026 05:01:25 +0000
Manifest next update: Fri 05 Jun 2026 05:01:25 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: 8T8PcA6XQjoQG0Y2bmRMzNMVKcNpiLJvvQe9dJBJY/s=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:f8:34:fb:c6:cb:30:db:30:ab:d9:17:69:79:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Jun 4 05:01:25 2026 GMT
Not After : Jun 5 05:01:25 2026 GMT
Subject: CN=e4ae35c347baa7247b2f63ebba8556a6bb34db9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:a1:20:ec:d2:27:c2:23:ad:8e:7d:81:94:
5d:e2:d8:e8:b4:33:db:43:7b:14:ed:b4:84:5a:e2:
4a:f7:19:19:c8:a5:d8:5d:3c:4b:8f:45:67:4d:3a:
d5:2d:d7:d6:44:f2:db:5f:6f:2e:1a:08:a6:66:b0:
36:dd:2b:63:6a:83:67:9b:04:32:ba:16:b7:fe:e0:
92:6e:ba:a1:a5:6f:7c:72:d8:94:4e:be:f2:2d:9a:
42:f0:b8:9a:87:38:96:ff:ac:fb:1b:fb:cb:2a:12:
78:2d:f3:26:7c:76:f0:c8:1a:07:95:a0:f1:13:3c:
f2:0f:99:3f:e4:9a:4d:d6:51:0d:37:60:eb:5b:70:
9a:90:bf:52:eb:7a:74:d1:cd:ac:84:0f:d5:96:69:
45:d1:a7:ad:91:51:15:ea:81:96:df:76:97:a6:5f:
5c:3d:52:ef:02:c9:71:96:e6:13:40:de:ba:44:82:
f9:a9:36:87:8a:5f:bf:e0:e4:1f:4f:b1:29:77:66:
be:38:b0:7a:da:7a:e9:ef:7a:fb:51:b7:ce:91:06:
73:41:3e:02:43:9c:90:cc:0c:f2:42:e0:7e:41:21:
54:ce:a6:ab:af:ea:30:77:9f:d7:96:0f:a9:33:1f:
30:6e:ed:85:c9:49:dc:6a:47:b6:60:f3:de:65:8d:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:35:C3:47:BA:A7:24:7B:2F:63:EB:BA:85:56:A6:BB:34:DB:9B
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:93:9a:26:69:8a:ac:ce:08:5a:80:38:52:26:1e:85:a9:98:
fb:e9:9f:88:ba:65:25:8a:e5:bb:34:45:d3:71:bc:56:cf:9a:
8e:60:23:19:af:7f:e4:6a:2b:1c:c3:90:1e:cd:c6:75:d8:a7:
71:db:87:cb:7f:4d:78:0b:08:c0:b9:6a:18:6e:b7:44:a2:9f:
be:d4:3a:33:7a:2f:01:93:df:2c:a2:c8:10:63:45:f5:dc:5e:
19:c6:1b:12:b3:e8:15:a9:d5:03:12:bb:ac:3a:b7:c5:1d:f3:
4a:4d:e1:08:47:30:15:b2:26:02:4a:e1:b3:37:ac:6f:e4:21:
6a:20:b8:80:e5:16:86:cc:bf:37:d3:db:26:ff:81:5f:a0:2e:
3f:0b:38:2d:d9:c4:fd:01:3f:18:28:0b:8d:bc:2b:dc:e2:77:
e3:e9:cd:04:c6:ea:74:a9:da:14:ee:73:52:6b:aa:0b:52:5c:
75:5d:21:26:45:8a:23:57:b5:e4:34:ba:e5:bf:47:e2:56:76:
52:a0:d8:48:d7:6a:59:c6:0c:48:69:9a:a6:d1:4a:82:91:55:
2f:26:24:f2:f4:e4:af:d8:e6:54:24:e9:58:f4:55:43:0c:57:
69:37:f1:a9:5a:c3:1d:ce:d6:52:5e:ea:f5:93:69:77:07:ec:
5f:30:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:25:21 2026 by rpki-client