Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: NnA1TnyyAFwde5MIV1KX95CeWH97Rg2O32eCJ94ssXc=
Subject key identifier: 3C:F9:5F:A0:C7:A4:B6:E1:BA:A9:DB:7A:B0:83:34:F4:EC:0D:33:74
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019EB80E8E8A866F378F354D00EC86FACA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0579
Signing time: Thu 11 Jun 2026 19:00:22 +0000
Manifest this update: Thu 11 Jun 2026 19:00:22 +0000
Manifest next update: Fri 12 Jun 2026 19:00:22 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: xbBE8HCHHUKt6ipLH6BltSPunSj16O3sl3NEdkG1bZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:8e:8a:86:6f:37:8f:35:4d:00:ec:86:fa:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jun 11 19:00:22 2026 GMT
Not After : Jun 12 19:00:22 2026 GMT
Subject: CN=3cf95fa0c7a4b6e1baa9db7ab08334f4ec0d3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:4d:8b:33:f0:6a:57:96:8e:79:59:59:d7:
da:03:92:ae:86:02:10:c1:42:23:c8:bb:86:6f:0a:
1d:36:49:4f:c1:23:30:7a:2a:69:b5:b7:d5:b9:eb:
61:ca:77:44:dd:52:b9:21:16:49:d1:e6:5f:f9:b3:
4f:3f:8d:4d:dc:69:63:64:4b:8a:25:af:f3:0f:9e:
fb:a9:2c:48:ab:b2:a1:1a:dd:57:b6:40:56:58:10:
19:4c:84:29:07:81:76:98:06:9b:c6:19:78:fe:02:
68:af:ce:61:c6:6d:a7:66:84:0d:5d:7c:06:a1:94:
6f:a8:74:b1:69:ef:20:2e:4e:00:5e:cb:47:5b:bd:
3b:53:03:3c:84:6f:0d:ea:0b:09:0f:4c:67:43:95:
69:99:9c:f7:6a:ee:c4:42:2f:a3:f4:2f:7e:c3:39:
4d:40:e1:28:ea:e3:d8:0b:6c:31:68:2d:68:6f:ff:
19:b7:02:d3:c8:86:a7:c0:90:fc:14:9d:19:86:55:
62:a4:9b:82:84:d1:5b:ff:49:99:ba:35:e7:8b:95:
b5:5b:a2:0e:3a:50:b9:9e:9d:ce:60:c5:e6:d0:7c:
52:26:9a:99:a6:5a:47:95:89:82:56:95:5a:67:07:
f3:06:30:bc:3a:72:f6:09:08:ab:66:f3:bb:98:81:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:5F:A0:C7:A4:B6:E1:BA:A9:DB:7A:B0:83:34:F4:EC:0D:33:74
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7c:59:bf:66:e1:3e:b6:a9:85:a2:95:cd:c5:7c:d2:dc:59:
42:a4:b4:c7:2f:b5:10:a8:13:cf:8e:e9:a7:4e:74:a4:bd:d6:
59:32:ec:b0:de:b7:93:ff:55:ef:b2:08:5b:41:7b:ca:e6:71:
b1:ed:cb:7a:cc:01:90:7e:c3:65:79:a9:77:d2:00:23:c3:a8:
7d:01:89:1e:3e:78:d1:af:c4:90:2c:4a:00:6c:6c:a3:34:6d:
bf:8c:60:73:54:4a:84:22:c3:a4:7c:b0:61:de:b9:81:c8:98:
ed:fa:14:1c:84:31:dd:d4:36:5b:8c:d0:b2:b2:f3:bd:85:21:
3e:fb:a3:76:25:15:e8:eb:67:89:31:a5:ee:91:e2:71:6f:dd:
a6:20:aa:5e:4c:37:ee:7a:27:ce:2a:d8:ab:c7:24:06:55:e7:
32:4e:87:db:42:a0:3e:c6:11:db:30:43:de:b8:ac:9b:92:e0:
37:3f:82:22:4d:c1:6f:51:fd:17:5d:b1:9d:18:95:7d:12:a3:
97:14:06:f6:aa:db:cc:7c:93:14:6a:a3:a6:76:d6:1a:52:01:
1f:4b:70:44:b7:7d:e9:04:5f:33:6e:d5:fe:cc:23:af:00:5e:
3e:2b:28:64:8e:15:4a:cc:f9:ef:f7:3e:22:eb:e0:09:6d:3b:
db:7a:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:47:34 2026 by rpki-client