Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: lz/IQrlG99whs58LxTntqpMpHPfNug+nlg5gpTJ/JWo=
Subject key identifier: 0D:FD:EC:04:F8:13:01:D7:AD:80:0E:20:7A:77:14:69:57:9F:24:42
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019EBA34094D0FC3807EBD786A1928708F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0F8A
Signing time: Fri 12 Jun 2026 05:00:32 +0000
Manifest this update: Fri 12 Jun 2026 05:00:32 +0000
Manifest next update: Sat 13 Jun 2026 05:00:32 +0000
Files and hashes: 1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: G5dBdIrlBhIU/F51hTLZDUoS1Bc42KKhf5tCSDyeLiw=)
3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:09:4d:0f:c3:80:7e:bd:78:6a:19:28:70:8f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jun 12 05:00:32 2026 GMT
Not After : Jun 13 05:00:32 2026 GMT
Subject: CN=0dfdec04f81301d7ad800e207a771469579f2442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:10:c2:65:28:f5:39:5f:78:9a:c8:51:61:
39:84:55:f8:68:02:62:2c:30:d3:3f:12:74:18:f8:
02:49:9a:11:39:d3:72:66:c9:94:a8:12:8c:20:0c:
bc:a9:16:51:11:32:fd:f9:56:15:8c:13:19:25:97:
b5:53:2b:6f:be:56:4b:05:8a:64:c5:5a:28:c5:ab:
9f:e7:4e:a1:47:ea:2b:5c:e9:1a:61:08:f6:15:22:
4f:06:2d:0d:08:0c:ac:87:a2:2e:c7:35:cf:e1:46:
b1:f4:e0:e5:63:00:22:4e:44:c9:d2:cc:ec:90:0d:
6f:20:35:d1:00:52:30:4c:80:cc:11:9d:72:6c:79:
6d:fa:d2:06:ae:7f:fe:1a:01:25:c4:c7:0e:1b:ec:
59:05:80:ff:c5:b5:0d:15:d7:ba:85:89:23:ca:7e:
3d:35:77:33:ab:b8:80:e5:6c:1f:0e:71:33:f3:c0:
c5:9e:f6:f6:a2:41:6a:49:a9:45:8c:69:22:23:92:
ec:ae:21:75:9f:d8:69:af:b3:4e:6d:31:18:02:22:
ad:ee:47:19:28:00:9d:9f:52:6f:cc:68:18:2a:67:
b3:54:86:0f:5e:8d:b7:b6:4f:c6:94:96:87:5b:50:
c4:01:13:7e:73:10:04:6b:2c:37:dd:93:47:70:e9:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:EC:04:F8:13:01:D7:AD:80:0E:20:7A:77:14:69:57:9F:24:42
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fb:9e:7a:53:35:0f:75:d4:4f:fb:03:78:08:08:76:b8:ea:
04:a0:15:aa:97:77:02:11:f8:82:6f:8f:10:08:79:f5:b0:f2:
d3:81:a9:af:af:2d:a5:2b:f0:b8:ce:d6:1d:19:32:74:46:8c:
f7:ef:3a:14:89:6e:f9:5a:e3:cb:e2:a5:97:e1:fd:42:55:6b:
f7:1e:50:39:c3:ff:b0:df:b5:ef:02:25:55:63:e3:da:9c:5b:
9b:97:cd:26:b5:8d:6b:2e:87:79:84:63:e7:1f:e1:92:c2:0e:
26:bd:23:1d:3d:ab:19:85:0a:4f:4f:69:41:1f:8e:dc:5c:1b:
1b:01:53:1f:b9:4a:b7:de:6c:37:fa:22:68:b3:ee:6b:6a:97:
a8:1e:92:96:52:19:1b:c0:12:6a:aa:c7:41:8f:4b:bc:12:eb:
71:95:11:49:2d:f2:69:4d:52:28:23:27:4a:a2:a6:8a:95:fd:
9e:b0:f7:fa:69:67:8a:ba:5c:a5:80:7e:9e:a9:a4:a9:4c:f9:
e5:5e:c5:f8:27:6f:7e:e8:45:08:08:17:e5:21:5f:2c:26:e0:
b0:fe:2d:ac:30:3f:4e:05:cf:45:cc:20:76:bc:3c:37:7d:a5:
09:7c:78:86:17:98:7f:09:d2:3e:68:b3:56:fc:a3:5b:1c:c7:
93:cd:02:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NAlND8OAfr14ahkocI+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll
NzdmMGQwHhcNMjYwNjEyMDUwMDMyWhcNMjYwNjEzMDUwMDMyWjAzMTEwLwYDVQQD
EygwZGZkZWMwNGY4MTMwMWQ3YWQ4MDBlMjA3YTc3MTQ2OTU3OWYyNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBkQwmUo9TlfeJrIUWE5hFX4aAJi
LDDTPxJ0GPgCSZoROdNyZsmUqBKMIAy8qRZRETL9+VYVjBMZJZe1UytvvlZLBYpk
xVooxauf506hR+orXOkaYQj2FSJPBi0NCAysh6IuxzXP4Uax9ODlYwAiTkTJ0szs
kA1vIDXRAFIwTIDMEZ1ybHlt+tIGrn/+GgElxMcOG+xZBYD/xbUNFde6hYkjyn49
NXczq7iA5WwfDnEz88DFnvb2okFqSalFjGkiI5LsriF1n9hpr7NObTEYAiKt7kcZ
KACdn1JvzGgYKmezVIYPXo23tk/GlJaHW1DEARN+cxAEayw33ZNHcOnZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA397AT4EwHXrYAOIHp3FGlXnyRCMB8GA1UdIwQY
MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt
ZmEzZTA5MDFmMjQwLzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw
LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfueelM1
D3XUT/sDeAgIdrjqBKAVqpd3AhH4gm+PEAh59bDy04Gpr68tpSvwuM7WHRkydEaM
9+86FIlu+Vrjy+Kll+H9QlVr9x5QOcP/sN+17wIlVWPj2pxbm5fNJrWNay6HeYRj
5x/hksIOJr0jHT2rGYUKT09pQR+O3FwbGwFTH7lKt95sN/oiaLPua2qXqB6SllIZ
G8ASaqrHQY9LvBLrcZURSS3yaU1SKCMnSqKmipX9nrD3+mlnirpcpYB+nqmkqUz5
5V7F+CdvfuhFCAgX5SFfLCbgsP4trDA/TgXPRcwgdrw8N32lCXx4hheYfwnSPmiz
VvyjWxzHk80C5A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:42:07 2026 by rpki-client