Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: xeLsOInvv49HzDjg83pR+Y+if9wGGkUK0xXW250mWO4=
Subject key identifier: 39:C7:1C:DB:51:83:E7:18:FE:D8:00:D9:62:1C:BE:A7:16:44:BE:2F
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019EB8460BB7F9F8DAF50E0662B3B953859C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1452
Signing time: Thu 11 Jun 2026 20:00:58 +0000
Manifest this update: Thu 11 Jun 2026 20:00:58 +0000
Manifest next update: Fri 12 Jun 2026 20:00:58 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: itWFYNUTNG0+uJAmuMlvOXbegEOtUVSCeXjBk1Q8KMg=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:0b:b7:f9:f8:da:f5:0e:06:62:b3:b9:53:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jun 11 20:00:58 2026 GMT
Not After : Jun 12 20:00:58 2026 GMT
Subject: CN=39c71cdb5183e718fed800d9621cbea71644be2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:a8:d7:7e:65:11:24:35:3b:8e:c4:8e:8e:
18:98:cc:1e:43:5f:4d:42:b2:d7:73:96:35:64:de:
4d:f4:4f:c1:3a:bb:bf:44:72:80:75:42:c4:5f:3a:
c1:7c:72:81:02:82:ce:49:17:31:8c:07:e8:08:e9:
5c:63:26:59:dd:7f:0a:2f:f7:63:45:2c:87:c7:66:
02:73:77:e5:66:10:6e:fa:23:bd:71:15:09:03:47:
08:7d:fa:ec:9f:93:73:58:0a:fc:99:66:2e:20:46:
6e:e7:6c:3c:1b:b5:7c:c3:57:62:07:e3:ac:bb:8a:
86:a6:ed:3e:71:7c:9f:1a:de:a4:6b:4c:47:e0:02:
09:0d:5f:53:40:a8:6f:9f:79:fb:ad:d7:e7:01:dc:
d6:ea:b3:ca:80:68:16:05:c2:b7:c9:1f:ce:56:d2:
2c:f4:81:2e:b5:79:10:7c:ee:1e:c6:14:d3:d1:24:
d8:37:97:f3:97:26:1d:e7:c9:fe:49:81:df:2d:04:
be:f7:8f:bc:00:5c:c2:8d:18:f1:7e:c6:44:de:b7:
d6:72:61:02:8c:f2:8b:28:7d:4c:34:17:64:1b:08:
1b:dc:8a:01:c2:b1:7e:46:9f:41:6f:91:e8:81:69:
19:c2:2b:48:39:2d:cd:7d:1c:d4:2c:28:f4:f8:b3:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:1C:DB:51:83:E7:18:FE:D8:00:D9:62:1C:BE:A7:16:44:BE:2F
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:2b:54:89:b0:a4:55:27:5b:81:be:f5:cd:e4:b6:fd:3b:
51:f7:a8:26:66:1a:4e:b0:79:2f:38:17:c8:0d:f5:a4:ca:43:
ed:43:9c:91:b2:5f:1d:87:29:0f:18:02:f6:26:65:09:0c:34:
35:66:3c:16:39:f6:68:36:67:a5:71:b1:f3:c9:5d:b0:8e:fb:
fc:28:48:ae:6a:f4:bc:f4:f0:62:26:53:c6:69:da:7e:be:fb:
d3:b1:1b:57:68:82:12:23:d4:8b:2a:ee:4b:ab:8e:d1:6f:24:
3e:66:ea:38:91:90:52:75:62:57:0a:c4:ac:e4:d5:7e:57:1e:
a6:7b:3d:45:be:3a:ea:0b:19:9f:d5:d3:de:ed:aa:bb:de:b3:
69:be:66:a0:dc:4c:21:08:4e:3c:84:a5:25:75:a4:c5:45:60:
45:99:6d:a3:e8:cb:ec:c8:77:60:76:03:e5:b4:6e:46:0d:b8:
cf:76:a6:60:68:5d:56:27:15:96:93:9c:f1:a6:98:01:08:64:
4a:f0:74:ea:ab:d7:0c:ed:87:3a:e0:e6:c1:71:b4:b7:38:d4:
7c:d5:91:6b:fd:5e:12:27:2f:ad:ad:c9:db:66:95:53:c7:cb:
7c:89:69:cf:49:eb:4b:de:3d:bf:a3:f7:a4:4e:dc:a4:a3:77:
aa:d7:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:16:26 2026 by rpki-client