Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: u+fT/BedHWnqpGNO5cwb10Jrp7v9pIuA7+dpLQCE214=
Subject key identifier: F3:31:D3:9B:75:7E:D8:F6:A1:1B:0F:81:E6:80:C0:FE:1E:6F:D0:E4
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019EE39ED855929010AF4B59AE7C5ED97A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 196C
Signing time: Sat 20 Jun 2026 06:01:38 +0000
Manifest this update: Sat 20 Jun 2026 06:01:38 +0000
Manifest next update: Sun 21 Jun 2026 06:01:38 +0000
Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=)
2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: ze7FiYIgWjWN6TxUQwwaE/YlBDqtIEDeYhwV5VOJSbI=)
3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:d8:55:92:90:10:af:4b:59:ae:7c:5e:d9:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jun 20 06:01:38 2026 GMT
Not After : Jun 21 06:01:38 2026 GMT
Subject: CN=f331d39b757ed8f6a11b0f81e680c0fe1e6fd0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:8a:5f:42:00:44:04:e7:ff:23:bf:2e:c2:
34:6d:8b:0f:60:87:61:47:a5:86:61:c0:82:40:fb:
b8:84:d1:02:dc:88:27:ac:ef:9e:ae:7e:aa:74:af:
24:c9:d0:35:9f:34:cf:e6:4f:31:9d:8b:cd:15:61:
33:f5:82:7d:97:24:5d:13:c1:ef:75:f6:68:70:04:
72:90:85:b8:f0:e2:cf:cc:da:46:c5:b8:b6:a0:0b:
d8:a6:e9:5e:99:db:bf:b2:6e:2f:a4:84:56:11:19:
99:e7:88:5e:c4:75:bb:7f:10:90:38:56:2d:8a:fd:
df:92:9e:b3:40:77:e1:f0:eb:3b:89:f5:d4:75:77:
4c:f0:6c:a6:da:b0:12:21:66:53:02:6b:1d:dc:9f:
c1:28:3b:23:14:dd:90:69:9c:c5:f6:ed:31:a2:ee:
d9:87:58:36:4b:8b:83:3d:27:59:7e:58:d1:d6:54:
9c:2d:f7:1f:cb:4a:3f:68:61:b2:02:5f:ea:55:2c:
69:74:f6:56:88:1c:ed:a4:76:a7:7b:6f:6c:c4:1d:
bf:53:f8:4d:89:7e:25:dd:1c:61:b5:0b:60:35:8d:
7d:8b:38:06:b2:b8:26:51:50:ed:c8:22:38:50:3f:
5b:6f:5f:d0:98:8c:79:83:a5:19:93:81:77:48:1c:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:31:D3:9B:75:7E:D8:F6:A1:1B:0F:81:E6:80:C0:FE:1E:6F:D0:E4
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:12:df:0d:09:0e:8c:3c:f3:ba:24:48:42:98:fa:51:ec:b9:
c6:af:5f:2d:e3:cb:9b:36:9e:44:87:c7:4b:b4:bc:e9:a0:eb:
74:f7:fd:a1:63:98:b7:60:3f:f4:b0:4d:5a:76:32:3c:fe:20:
76:b9:c5:f1:de:ed:fb:70:2c:5f:d4:f2:91:47:8a:8a:cc:cd:
40:e2:6c:e1:bf:67:4f:5b:0e:37:fb:04:b4:5e:eb:37:8d:33:
c2:37:1c:40:a2:26:e4:6f:9e:0c:73:c4:10:2c:81:a0:31:4f:
0a:db:a8:38:4a:db:09:75:22:ca:fd:03:d8:ee:8b:35:a0:4e:
05:e3:41:5d:66:c9:68:a3:1b:37:1c:61:62:ea:64:dd:45:98:
51:cb:8b:9b:0e:05:41:dc:68:6b:29:46:66:12:22:ff:c2:c7:
1c:f2:36:3e:17:c7:aa:2c:99:78:0e:1f:eb:95:6b:3a:f0:6b:
de:d2:e2:34:34:4b:80:e9:fa:cd:1e:ca:a7:e7:28:d0:14:bc:
1b:ca:f7:b0:ab:2a:85:11:b9:88:c0:7a:15:d4:10:aa:47:3e:
00:ff:b3:62:2a:fc:d7:a6:fe:7a:01:5b:f8:70:ec:27:c1:74:
aa:9a:22:0c:85:f1:07:0a:ee:73:95:90:b4:a5:af:b7:d2:46:
64:10:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 16:29:55 2026 by rpki-client