Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: i4Ljrm4kpEqlAAoknnV+JnOFRNOJjAXC1yWSoGKqnTI=
Subject key identifier: 3F:12:1E:77:36:CE:F5:97:27:B6:AE:D9:04:F2:41:1F:D6:43:AC:96
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019E33AA6EC61526C4ECC9499174DA87F8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 0507
Signing time: Sun 17 May 2026 02:01:07 +0000
Manifest this update: Sun 17 May 2026 02:01:07 +0000
Manifest next update: Mon 18 May 2026 02:01:07 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: jxbD2MRq4/8hNGLWzc/DD+FeLOELo1r4lfWIpAeICi4=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:aa:6e:c6:15:26:c4:ec:c9:49:91:74:da:87:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: May 17 02:01:07 2026 GMT
Not After : May 18 02:01:07 2026 GMT
Subject: CN=3f121e7736cef59727b6aed904f2411fd643ac96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:d6:af:e6:b0:5f:27:29:51:a7:05:4c:a3:
82:82:a4:5a:11:4b:02:87:da:30:58:65:b7:9a:4e:
75:0e:f9:5d:12:7a:1e:5e:04:42:cf:fd:2a:c2:19:
7c:52:68:8c:25:95:59:3f:0b:94:7c:6a:63:f9:27:
db:41:94:5d:ef:53:dd:47:41:7a:1d:c4:a8:d3:84:
3f:84:43:23:7f:5f:cc:0d:c0:d4:3b:bc:63:ad:e2:
12:b1:63:58:81:e3:c5:ed:b4:4f:ba:14:50:a4:2f:
64:73:77:39:9a:4e:bd:04:e0:7f:99:5f:c9:6a:6c:
64:3f:fb:c0:14:ed:54:b5:51:9e:34:17:a6:49:32:
57:09:a4:f2:79:b1:0c:e3:f8:e5:99:90:73:c5:b5:
f0:d3:79:64:e8:52:15:db:b3:70:9a:78:45:42:39:
f9:51:7c:fd:98:8d:0e:72:3f:66:e1:0f:3c:72:d5:
89:15:ec:ef:32:7c:98:da:d7:0d:50:29:51:b5:eb:
17:19:01:f4:44:07:91:9b:21:24:b5:07:fc:f1:0e:
1e:43:a7:da:60:2b:c1:b7:af:fd:c2:3d:c9:f3:89:
40:2a:19:2b:3d:fa:96:4e:e0:89:27:f4:0c:d4:35:
7c:d5:cf:22:b3:27:e0:de:0a:f3:4a:c9:24:b4:a7:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:1E:77:36:CE:F5:97:27:B6:AE:D9:04:F2:41:1F:D6:43:AC:96
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:cb:ad:1f:0b:92:41:95:06:2f:d2:a8:9b:16:47:85:67:
74:ad:55:80:db:2c:d2:d8:2d:2a:1c:11:3a:19:60:79:45:b9:
b7:59:2d:ab:97:e6:37:57:ca:05:f3:86:eb:10:26:5e:ae:bf:
92:a9:18:8d:dc:7e:58:f0:c3:32:95:73:51:63:65:af:cd:96:
20:7a:0d:06:be:c7:92:0b:79:b5:1e:e7:c8:df:f6:bb:86:12:
cb:c5:da:75:12:a6:43:2f:e7:12:86:47:1c:68:d4:d8:71:96:
00:39:45:f9:22:11:f3:ba:c6:ce:a1:f5:4c:07:31:79:d4:27:
83:fc:14:53:26:7b:26:cc:2d:8c:ed:b4:ba:7f:31:c9:39:80:
ca:10:60:34:6a:5f:bd:46:05:9d:25:22:b8:62:ec:56:c2:dc:
fd:0f:f6:54:ef:ab:96:2f:6d:1e:4b:3b:4b:05:11:de:57:1e:
b2:11:4a:69:8b:e6:aa:f7:7b:52:18:6f:42:05:47:1f:3a:ca:
a0:cb:a4:80:58:3a:4c:ae:0b:68:42:cb:46:b1:5b:78:8f:96:
22:31:e8:b3:57:e0:4b:77:02:e0:fb:17:59:f0:b8:4a:39:6e:
f6:1f:10:6e:8d:76:b1:66:35:6a:0e:f0:fb:ad:23:10:65:c9:
a7:15:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:16:07 2026 by rpki-client