Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: kcU659rfGiID8z92ejRdPHlLgcnQ1v4Jl27EdLjwCQI=
Subject key identifier: 87:A9:DE:55:4C:03:82:51:6E:E6:1B:26:9B:4B:23:59:32:8C:E0:CD
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 019F19B0E3BACD9FF018DA68B58C5899105F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 18:00:50 +0000
Manifest this update: Tue 30 Jun 2026 18:00:50 +0000
Manifest next update: Wed 01 Jul 2026 18:00:50 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: D4cOKipmm/0dtDDFP27JbdFLPZf8MxI0gViT2dBTeIs=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b0:e3:ba:cd:9f:f0:18:da:68:b5:8c:58:99:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Jun 30 18:00:50 2026 GMT
Not After : Jul 1 18:00:50 2026 GMT
Subject: CN=87a9de554c0382516ee61b269b4b2359328ce0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bf:8d:b6:95:ad:c3:7b:f8:75:e1:d5:7b:c2:
2e:46:e5:6d:22:81:d0:33:7e:41:7e:70:95:8a:08:
6d:a2:fe:b5:18:c1:8a:ce:05:ed:1d:83:b6:d0:c5:
68:96:c8:aa:4e:92:aa:2e:f7:b8:3c:d7:c6:80:24:
b8:8c:34:88:a4:e9:9b:82:82:d9:8f:0d:d9:64:e6:
39:61:e6:3f:39:ed:3f:99:50:ba:27:4a:d5:42:b9:
60:38:21:1a:00:ae:44:40:65:dc:84:27:ed:91:5f:
5d:3a:29:21:f0:65:35:69:a8:44:da:42:7e:6d:fe:
2a:2f:1d:5a:e9:b0:1e:b3:39:90:60:6f:22:7c:7b:
f6:05:e8:90:3c:e9:c8:01:fb:34:9b:23:e1:2e:11:
77:f7:f2:6b:ec:cf:c7:ce:23:72:39:ce:19:c3:57:
83:13:94:9a:aa:cd:de:f2:46:e2:51:70:82:7a:1a:
f4:bb:f8:6a:63:f3:37:13:9a:b0:22:7d:61:c0:34:
30:04:1e:d9:42:52:4e:e2:36:31:0b:b3:dc:d2:1f:
27:cf:c2:27:70:c9:69:f6:21:44:81:25:08:9f:9e:
cc:31:b0:86:c4:6d:99:b6:da:09:e5:67:5e:42:87:
47:59:b9:d4:e8:be:7e:8c:e4:9e:32:4b:da:da:7f:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:DE:55:4C:03:82:51:6E:E6:1B:26:9B:4B:23:59:32:8C:E0:CD
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:76:47:18:14:05:6a:39:8b:c0:d3:4c:44:9b:99:b2:7c:6d:
84:4f:90:43:0c:fd:9d:09:b3:10:f2:c6:aa:52:b5:39:34:0a:
fe:15:6d:28:57:94:23:9c:b7:86:21:74:13:47:c1:e8:c4:bd:
ac:19:5c:24:c8:b8:4b:19:f3:62:de:76:11:d5:7e:38:a0:b1:
8d:44:9f:79:0e:19:1b:8d:5b:74:67:04:fd:f5:bd:5d:09:db:
00:ed:0e:45:74:fd:39:1f:f9:1a:59:81:ef:f6:7d:02:71:ef:
1e:ae:36:9e:4a:f0:82:e9:bd:56:e2:da:32:9f:74:fe:6d:c9:
92:68:65:b3:a1:6a:53:1b:2a:a8:c3:8c:33:e6:c5:d3:24:87:
76:ea:8e:56:4b:25:cc:49:42:34:8c:2e:40:a2:93:a0:26:63:
cd:4d:41:e7:fb:d2:3b:33:87:28:75:01:4d:99:e2:87:1e:c8:
bb:a0:3c:f2:d9:aa:92:91:82:b9:3f:f7:69:fb:c9:19:98:5a:
ee:e9:3e:93:86:b6:90:db:84:6d:bb:7b:c1:ad:9b:3d:3b:91:
92:87:b1:dc:f8:71:d9:59:1a:9c:ac:9b:76:f4:b0:0f:e1:e1:
f8:db:f9:60:9f:84:60:7d:d4:d2:5e:ec:7b:d5:b1:92:2f:5a:
3c:5f:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:11 2026 by rpki-client