Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: mOvcIuW20vaEulkil9Oy3Gg9C4zrXcpG5JmS9+cfbJg=
Subject key identifier: 88:A4:B6:4B:8F:32:F8:AF:38:3F:95:BC:3A:8A:53:F5:FB:67:75:A4
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019EB9FDC61D299C3E7ECB2E6367692BA7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1217
Signing time: Fri 12 Jun 2026 04:01:16 +0000
Manifest this update: Fri 12 Jun 2026 04:01:16 +0000
Manifest next update: Sat 13 Jun 2026 04:01:16 +0000
Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 9UekfkdQzkPgUQCXcvIPLHMeo+4FnsVF4pmNagLSUVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:c6:1d:29:9c:3e:7e:cb:2e:63:67:69:2b:a7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jun 12 04:01:16 2026 GMT
Not After : Jun 13 04:01:16 2026 GMT
Subject: CN=88a4b64b8f32f8af383f95bc3a8a53f5fb6775a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:24:6a:d9:2c:f1:56:bb:e8:2c:30:a7:56:
2b:f3:fc:75:26:0e:20:67:a2:cb:46:c0:19:84:7d:
6f:0c:0d:a6:fa:39:9e:d5:d6:cd:4d:b2:e7:f3:d8:
d1:5e:c5:e3:0b:30:73:53:03:4f:d9:41:f6:db:f1:
f0:1f:ff:15:ae:22:af:4f:77:d9:ee:7b:cc:3c:39:
1f:90:e3:22:0b:63:c4:fe:f7:da:14:b1:38:df:be:
aa:c8:af:35:f1:c3:84:31:d5:c1:92:47:c6:79:4d:
16:ce:d9:b5:17:85:41:55:11:4d:21:95:da:33:4e:
90:16:8a:2d:53:d4:c9:b2:9e:bf:b6:ab:49:b5:03:
ab:63:51:d0:43:a6:b5:cb:59:ee:61:c0:d5:ff:3c:
16:fa:f4:d6:0b:f7:4c:e3:db:15:bf:14:12:dc:97:
45:83:2b:a3:f3:b6:04:72:0d:f4:e1:9e:26:22:85:
14:09:77:5a:69:91:45:1c:c7:f5:f2:d3:1e:9d:27:
1d:2e:8e:fe:81:5b:16:a6:bc:03:4f:82:c5:cc:e3:
95:3a:8d:3c:18:04:d0:a5:c0:c8:ee:32:97:ea:f1:
4b:75:87:98:5f:a5:92:a6:ea:71:dd:39:66:ff:1a:
43:98:97:1d:78:20:24:c5:a7:6d:3c:37:05:b3:4d:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A4:B6:4B:8F:32:F8:AF:38:3F:95:BC:3A:8A:53:F5:FB:67:75:A4
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:45:6f:21:c0:37:b6:ce:1b:7f:cc:b5:c5:ed:b6:6a:1f:94:
a7:82:7d:21:42:33:66:37:37:2b:73:5a:32:ef:de:d6:fd:52:
66:ee:41:1f:b4:1c:7f:d9:e3:7b:08:52:a3:e9:8f:e5:89:b7:
37:43:21:fc:06:a2:e7:7d:3f:1f:c8:a2:7b:de:ce:54:59:3a:
e6:ce:a7:15:8d:b2:51:a6:e8:ce:15:e6:a3:40:b3:5e:29:77:
01:45:62:2d:95:ac:cf:9f:ef:10:4d:d8:61:b8:37:16:c9:0b:
a8:87:6d:90:55:5c:d6:2f:07:89:40:fc:a3:16:35:73:92:5b:
fc:b6:6c:46:c6:e5:6b:6a:ee:35:af:1a:70:2d:cf:c1:e5:33:
fa:de:d9:f0:23:51:8a:7b:d8:5a:42:6d:37:cd:23:3f:af:e1:
12:96:82:68:61:e6:d4:3e:50:bf:3f:40:e1:58:6f:78:98:b0:
a1:28:30:7e:6b:29:8f:08:5b:26:ac:49:cf:9f:b0:cc:5a:23:
a5:63:21:c5:12:10:db:8e:bc:b6:e9:4f:2c:a6:b2:71:d3:ab:
23:8f:dc:31:e9:31:8f:32:ec:05:cf:d7:af:02:3e:0b:30:3d:
35:8c:db:ff:bf:bb:da:be:b6:1d:ed:6b:bd:33:5f:c8:1d:a4:
f4:fb:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:02 2026 by rpki-client