Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: Sim0LMLdzxKUVFEqoTnI8s+T95NlNvfrfkOS2K7mowI=
Subject key identifier: 35:FB:E1:74:8B:71:35:B4:84:89:B6:FA:B9:B8:13:47:E6:03:58:B5
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019EB845FC7A04276CBA070A5FCDD65FAD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 1107
Signing time: Thu 11 Jun 2026 20:00:54 +0000
Manifest this update: Thu 11 Jun 2026 20:00:54 +0000
Manifest next update: Fri 12 Jun 2026 20:00:54 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: 01Qe7W+9owLFoMc2ZXjQtSOhh1R+yPWGskT6FoFxinA=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:fc:7a:04:27:6c:ba:07:0a:5f:cd:d6:5f:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jun 11 20:00:54 2026 GMT
Not After : Jun 12 20:00:54 2026 GMT
Subject: CN=35fbe1748b7135b48489b6fab9b81347e60358b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:a5:da:b5:a9:d2:8b:66:9b:0d:1a:5c:2f:
c7:78:21:06:dd:5b:c4:da:9b:db:b0:59:9a:1b:45:
10:47:b9:68:b1:a9:34:35:68:1a:b7:3f:d7:35:67:
f3:a6:a3:49:58:88:9a:2d:19:c0:f2:9d:31:51:64:
07:71:db:63:e0:da:c4:5f:55:c6:ff:75:dd:48:8a:
e9:ed:0b:8b:97:86:79:66:36:1c:25:8c:20:36:b5:
a4:be:31:18:ad:f2:08:eb:ef:f3:d2:5c:a6:92:71:
27:57:5e:12:65:d7:a9:1a:96:f4:40:c3:e7:72:76:
6e:30:fd:34:b2:08:20:53:28:8c:0f:aa:ae:4d:d4:
2d:42:47:c8:6b:98:7f:71:05:53:76:64:9f:8f:2f:
b6:c5:d0:7a:62:03:b0:40:42:40:71:c5:e0:0d:13:
41:76:46:b8:da:83:56:10:cc:78:b2:91:07:95:4e:
77:9d:28:1e:93:01:0f:e7:c6:8a:57:55:3b:4e:b0:
6e:04:da:af:6f:41:30:74:f8:f6:76:c6:6e:9d:cb:
9a:13:ac:d0:0c:c1:f8:68:2b:37:0b:56:97:bc:7d:
dc:d9:4c:7f:1a:22:2e:ea:ed:92:ef:ca:52:d7:11:
1e:5a:bb:7e:ec:b9:ed:3d:b3:3a:d7:68:1a:e8:ae:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:E1:74:8B:71:35:B4:84:89:B6:FA:B9:B8:13:47:E6:03:58:B5
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8f:c5:d6:a9:63:71:f6:78:c3:30:c8:a9:80:f9:6d:ca:ff:
41:75:7a:59:6f:a5:f3:1c:1c:cc:ff:31:e6:5b:5f:b0:19:11:
ef:46:97:67:48:2a:8e:37:31:c0:a6:48:b7:cf:da:5a:2e:7b:
34:44:f1:6e:6f:35:49:9d:e6:a8:64:57:35:10:8a:2e:4a:71:
05:91:e0:42:68:9f:da:5a:35:64:2a:cd:e0:d0:85:ab:83:c2:
b8:93:d4:c2:af:1c:1e:9b:f8:ca:23:c9:9b:23:06:e1:c3:d1:
92:81:98:24:71:69:71:02:b0:b2:ad:7a:73:a6:05:2b:72:86:
29:47:b1:45:3e:00:92:b6:d9:1d:b8:97:c7:87:b4:89:d2:ea:
7a:e5:d1:50:21:e5:f5:b5:27:b0:bd:1a:4e:52:db:1c:65:ff:
07:7a:26:ec:4c:4f:33:0d:08:60:e2:8d:02:b9:b6:3b:cf:50:
7e:fd:be:6e:e2:30:6f:c5:9b:9e:a8:11:ef:ab:42:f1:1c:a4:
2c:26:f5:7e:3d:c4:30:9b:3e:60:37:88:9c:65:a6:34:b2:f6:
6e:02:1c:ff:8f:08:8c:14:fa:44:03:5a:f2:c0:a1:b5:06:5f:
b3:75:7a:9b:fd:b1:3f:18:9d:d4:11:66:a1:32:a7:7c:4c:23:
93:8a:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:19:33 2026 by rpki-client