Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: XvcSlhbVKikl82SiEvTuZEjymqzRWhVLw6LWytRaRHQ=
Subject key identifier: E3:24:0F:F2:D9:3E:45:4E:4A:3C:8C:E3:D1:CD:C2:FF:F0:7C:88:CE
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019E91012FA9E3617B4A0975F48CF601E9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1890
Signing time: Thu 04 Jun 2026 05:00:34 +0000
Manifest this update: Thu 04 Jun 2026 05:00:34 +0000
Manifest next update: Fri 05 Jun 2026 05:00:34 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: yn51XEAXzw1qHTmG8PSZ8N2MRGr3IgfIz0sYm9gspSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:2f:a9:e3:61:7b:4a:09:75:f4:8c:f6:01:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jun 4 05:00:34 2026 GMT
Not After : Jun 5 05:00:34 2026 GMT
Subject: CN=e3240ff2d93e454e4a3c8ce3d1cdc2fff07c88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:b5:2c:52:3a:d4:58:23:5e:e1:25:3e:a0:
c0:8f:ad:d9:a8:6c:1a:d9:57:b4:b2:88:cd:0c:67:
73:95:50:6a:ef:36:fa:3a:aa:cb:65:b5:fa:95:5d:
97:dc:57:c3:53:77:b7:5a:6d:15:a2:61:cb:99:ee:
ea:c7:d2:da:d1:26:62:01:16:4b:5d:95:66:ad:fb:
22:dd:2f:b6:64:8e:9c:ac:9d:28:e0:a6:a9:e2:3a:
18:ff:e0:66:88:46:60:79:51:d7:58:a1:bc:ae:30:
ef:77:99:cf:c7:4c:e3:25:9e:1b:15:5f:14:55:41:
14:7e:05:80:ca:1e:f8:68:4d:9b:d4:ec:1b:9d:f3:
64:d5:51:51:96:cb:b8:ce:fa:dd:4e:ad:6a:f6:da:
b0:24:44:2b:88:eb:a5:37:73:bc:2a:54:92:cf:69:
c9:05:c8:46:a9:9c:b3:a8:d5:40:e8:5c:53:57:20:
0f:07:b5:c6:57:3e:43:ee:44:87:d5:42:db:e4:a0:
42:7b:82:35:ca:3d:73:82:24:f1:92:cc:5a:f3:07:
d7:1e:f7:33:82:93:89:45:1c:98:56:87:fe:0b:37:
4d:7c:4e:fe:78:63:5f:7f:b6:62:e6:b8:4d:b6:98:
5b:da:eb:07:7f:ee:12:56:79:bd:6d:e8:1f:c5:97:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:24:0F:F2:D9:3E:45:4E:4A:3C:8C:E3:D1:CD:C2:FF:F0:7C:88:CE
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e8:29:f2:42:f3:e4:5b:4c:06:91:26:dd:28:e3:ce:65:5b:
75:ce:81:19:6c:6b:a6:63:bb:80:1f:a0:6b:46:83:dd:a0:60:
b3:cc:b0:80:67:57:09:38:a5:e6:99:ea:c8:c5:9b:c0:eb:dd:
1d:52:ae:a8:31:a1:94:36:b3:18:1c:cf:e3:c0:7f:0d:de:b6:
cd:5d:28:03:b0:02:32:76:a9:ff:14:14:4e:ea:e1:e2:54:81:
af:bd:d0:a7:a3:9e:8b:2a:66:df:6c:90:b9:2f:46:70:9b:db:
b8:f0:0e:ed:99:4a:06:7f:73:52:c3:c7:54:ea:3f:a9:57:e9:
09:61:c9:d1:02:46:9b:3e:77:90:d0:be:56:b9:28:65:cd:3a:
f2:cf:d2:03:5e:e5:df:8f:bf:c6:7d:4d:dd:9a:fe:42:64:b3:
77:4c:6e:a1:0b:8e:6d:0c:ae:d9:09:5e:ca:04:cb:26:f8:e6:
de:13:f7:a9:a6:05:f8:66:86:91:ac:9c:0d:c7:31:38:b8:0c:
e2:b6:95:ee:5f:f7:7a:0b:85:95:73:3b:55:51:a8:ff:7e:0e:
8d:c1:6a:65:e5:c1:df:71:dd:3c:96:1c:e0:8b:07:5a:23:d6:
75:13:89:e3:04:fb:b3:46:c6:ed:be:a7:a7:cf:3e:d6:da:2a:
ba:08:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:34 2026 by rpki-client