Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: Eo7uuy54MuNtGO4dl3dASAf6RFQbzyFGqAk/weHor78=
Subject key identifier: 38:72:DD:43:E5:11:6B:58:8B:4A:5E:83:42:0F:8E:3B:14:40:35:BD
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019EB845B732949210562E254D13D7C8C623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 20:00:37 +0000
Manifest this update: Thu 11 Jun 2026 20:00:37 +0000
Manifest next update: Fri 12 Jun 2026 20:00:37 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: DnSGirfnxjZk3uM6IOJWVIoOc8/jhUP/m2gU3WxhLzY=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:b7:32:94:92:10:56:2e:25:4d:13:d7:c8:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jun 11 20:00:37 2026 GMT
Not After : Jun 12 20:00:37 2026 GMT
Subject: CN=3872dd43e5116b588b4a5e83420f8e3b144035bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:92:78:74:c3:be:1c:f2:df:bf:6e:63:53:
9a:4b:fa:17:6b:e4:3e:c4:44:05:88:5b:62:31:bd:
42:83:4b:33:d3:ca:40:18:5f:e6:a6:fc:b3:cd:93:
bc:09:e7:a6:90:3f:ef:78:3a:fe:34:be:42:7c:f4:
bc:6d:c9:1a:d7:67:7c:c4:a3:2a:96:96:b7:00:8f:
16:ef:e1:6b:1a:fc:ac:a9:59:0b:5d:e4:d7:d7:8d:
c9:d7:06:70:f4:c0:70:08:b8:92:9a:2a:c5:c0:23:
db:2d:07:f4:32:41:e0:e5:9b:6c:01:1d:bd:a7:75:
cb:9c:a4:e1:d0:94:07:28:3d:e5:04:39:9f:87:31:
f9:99:78:fd:ff:b8:e9:81:b9:ed:5b:96:4d:4a:9c:
f5:58:db:14:61:3f:22:7c:5a:1d:7a:c4:eb:88:71:
ac:48:85:56:41:d7:2f:c5:05:88:80:c6:bf:da:a7:
90:24:66:c0:1a:55:58:81:25:94:fa:69:b0:f1:00:
3a:9a:80:0f:af:76:60:9d:29:99:b8:8e:3c:67:bd:
8b:c5:1b:75:82:a6:16:45:38:f6:d2:56:2f:c8:07:
79:59:0e:e8:be:87:bd:32:f6:48:32:dd:f7:85:32:
8f:fc:b1:18:b5:f8:cf:ec:6b:b4:2a:37:a2:61:38:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:DD:43:E5:11:6B:58:8B:4A:5E:83:42:0F:8E:3B:14:40:35:BD
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bf:f2:09:93:61:51:57:81:50:0a:bb:ce:bf:66:37:6f:ef:
16:b0:ab:bf:07:44:45:36:77:3e:a4:1f:93:49:ca:f2:68:e7:
7c:89:c3:e7:d7:f6:6b:55:20:88:46:06:bb:17:37:b6:69:45:
65:14:55:1c:c8:8c:3c:0e:15:52:f6:ab:7f:ff:02:f3:52:f1:
8d:43:25:32:b1:f4:84:9c:67:d1:38:8f:06:64:74:b5:c8:ae:
bb:f0:da:74:75:cb:70:14:01:01:ce:69:0c:8f:b2:9e:50:2c:
6d:45:98:7d:86:16:08:c7:87:cc:cc:29:8c:37:72:d0:64:3a:
30:58:c7:da:ef:f3:b1:4d:b9:26:ec:2a:89:74:01:6b:d3:a3:
f1:1d:f0:64:69:8b:67:59:24:10:8c:6a:4f:17:7b:3e:80:4b:
ce:b2:fe:87:53:be:07:a4:73:50:26:0b:f9:8a:43:e4:d3:54:
d7:50:fb:16:49:ab:70:03:83:f9:f7:70:d9:e2:24:29:66:b8:
18:37:81:72:7b:58:97:ff:55:ca:bf:77:98:e1:82:2f:54:14:
70:52:b5:95:77:cf:9a:af:d5:2b:00:fd:6d:ce:50:b5:d0:7e:
85:6c:aa:6c:cc:1b:58:d1:a5:3b:26:a2:3e:2c:4e:26:94:aa:
60:60:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:22 2026 by rpki-client