Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: KEfqSBbRZzzKk38brOygkJSVuL9zqlRd0p48g+HwLdU=
Subject key identifier: 23:BF:A5:EE:38:71:27:0F:AC:C5:A3:CB:A4:16:FC:89:3B:4A:4A:18
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019EB7D7CEBA312A7E6F51DCD16498C0190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 1204
Signing time: Thu 11 Jun 2026 18:00:34 +0000
Manifest this update: Thu 11 Jun 2026 18:00:34 +0000
Manifest next update: Fri 12 Jun 2026 18:00:34 +0000
Files and hashes: 1: ercPbtahy3f9eM5GSzohbTGgqsw.roa (hash: 6i0HSVm0VOwA3Kxo8s7D20nC5SFv01ATtGPCU/ddYG0=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: 6Q8Fgh/VjpK4XpI8lqiW385R9St3zsO7LBRl2vo4SoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:ce:ba:31:2a:7e:6f:51:dc:d1:64:98:c0:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jun 11 18:00:34 2026 GMT
Not After : Jun 12 18:00:34 2026 GMT
Subject: CN=23bfa5ee3871270facc5a3cba416fc893b4a4a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:a9:8d:ad:e4:79:58:0a:ad:d4:f4:7a:d1:
89:48:6c:d5:11:90:a5:c2:7d:00:a9:27:e4:72:1c:
e9:4b:3d:9e:3d:ce:30:04:b7:75:43:69:44:bb:c4:
53:68:3d:66:cc:59:84:95:69:42:59:5c:1d:9e:42:
8b:66:1f:86:ab:6b:e3:66:5c:2e:43:46:44:d9:74:
a5:4e:ed:b5:42:6e:2b:9c:94:49:4e:2c:1a:51:df:
18:76:a4:57:14:4c:3c:17:76:2e:0a:b5:37:b3:65:
36:90:fc:72:99:92:25:3e:19:61:2b:21:f3:76:20:
60:65:53:58:49:4a:5d:a3:52:ac:18:c9:b1:3f:11:
75:bc:92:0e:0b:48:5d:98:6a:69:8a:7a:07:25:5d:
b1:ef:56:31:65:c3:00:59:3a:be:74:af:1b:90:bb:
d8:12:00:34:a0:7e:33:03:5a:5d:a8:6f:55:4a:21:
49:c5:dd:f3:07:cb:15:fd:fb:53:b8:ab:3e:42:5f:
42:12:be:a2:3b:ee:41:7b:97:17:ba:4b:b4:02:df:
01:b2:60:0f:38:a0:db:31:fa:fc:32:a2:a8:b4:35:
41:9a:0a:94:d4:99:d7:a4:9f:c5:ba:4a:69:e9:99:
62:23:e5:54:d1:bf:a7:6d:f1:82:ca:18:47:11:b7:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BF:A5:EE:38:71:27:0F:AC:C5:A3:CB:A4:16:FC:89:3B:4A:4A:18
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5b:30:16:32:f5:56:31:84:7c:1f:17:16:75:db:c9:95:f3:
1a:19:84:f0:fb:d8:7a:53:fc:41:d4:1a:d8:4a:a8:59:12:a6:
8a:68:01:77:57:cd:b3:c2:27:7f:05:8b:4e:0d:ef:97:aa:b7:
ba:12:48:80:c3:01:06:23:0b:27:84:5e:35:51:bc:a2:d2:eb:
92:63:58:58:02:1e:ed:8e:2c:ac:9b:9a:bf:c6:e0:52:7d:fc:
09:9f:8d:d8:d9:fc:f7:04:24:4c:da:55:1a:a0:d1:db:e1:13:
84:04:68:f4:6d:b5:65:8a:f2:e9:20:59:ca:2f:90:a9:8d:4e:
f9:47:ca:70:8e:aa:36:2a:5e:3b:91:24:2f:20:5c:1d:13:60:
b5:4d:86:a0:fb:a6:87:0c:75:7c:11:02:55:a6:72:4c:df:90:
ab:be:92:95:77:da:02:f6:02:72:bb:4d:02:b5:6e:8f:2e:69:
cf:ea:b2:b0:07:e5:71:23:c0:e2:5e:8f:8b:3e:46:bc:c9:69:
e1:79:64:d5:67:e4:2d:a2:9d:14:13:33:a9:13:16:e9:b1:fa:
27:99:9e:83:43:5c:15:84:d2:37:66:b4:b5:4b:ba:ed:b9:bc:
e8:43:f8:7a:b8:d3:fc:53:2b:e8:6e:91:66:c8:8d:18:4b:ef:
83:e4:c0:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ631866MSp+b1Hc0WSYwBkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3
YzMyNDgwHhcNMjYwNjExMTgwMDM0WhcNMjYwNjEyMTgwMDM0WjAzMTEwLwYDVQQD
EygyM2JmYTVlZTM4NzEyNzBmYWNjNWEzY2JhNDE2ZmM4OTNiNGE0YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU6pja3keVgKrdT0etGJSGzVEZCl
wn0AqSfkchzpSz2ePc4wBLd1Q2lEu8RTaD1mzFmElWlCWVwdnkKLZh+Gq2vjZlwu
Q0ZE2XSlTu21Qm4rnJRJTiwaUd8YdqRXFEw8F3YuCrU3s2U2kPxymZIlPhlhKyHz
diBgZVNYSUpdo1KsGMmxPxF1vJIOC0hdmGppinoHJV2x71YxZcMAWTq+dK8bkLvY
EgA0oH4zA1pdqG9VSiFJxd3zB8sV/ftTuKs+Ql9CEr6iO+5Be5cXuku0At8BsmAP
OKDbMfr8MqKotDVBmgqU1JnXpJ/Fukpp6ZliI+VU0b+nbfGCyhhHEbfxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO/pe44cScPrMWjy6QW/Ik7SkoYMB8GA1UdIwQY
MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt
ODlhNjhlNWEyMTEwLzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw
LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlswFjL1
VjGEfB8XFnXbyZXzGhmE8PvYelP8QdQa2EqoWRKmimgBd1fNs8InfwWLTg3vl6q3
uhJIgMMBBiMLJ4ReNVG8otLrkmNYWAIe7Y4srJuav8bgUn38CZ+N2Nn89wQkTNpV
GqDR2+EThARo9G21ZYry6SBZyi+QqY1O+UfKcI6qNipeO5EkLyBcHRNgtU2GoPum
hwx1fBECVaZyTN+Qq76SlXfaAvYCcrtNArVujy5pz+qysAflcSPA4l6Piz5GvMlp
4Xlk1WfkLaKdFBMzqRMW6bH6J5meg0NcFYTSN2a0tUu67bm86EP4erjT/FMr6G6R
ZsiNGEvvg+TA0A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:32:01 2026 by rpki-client