Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: NEqRpj7lxf7BawxLfvQJe2+HwxahBwYTkb4sMifjOvQ=
Subject key identifier: 67:FE:EE:7B:DC:22:96:04:BC:F7:65:7B:F0:FB:C0:AF:14:E0:FD:90
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 019EB9C60BA48C89DBEAA56AC5187A545EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 16C8
Signing time: Fri 12 Jun 2026 03:00:24 +0000
Manifest this update: Fri 12 Jun 2026 03:00:24 +0000
Manifest next update: Sat 13 Jun 2026 03:00:24 +0000
Files and hashes: 1: R7Ev9HH_K9DOIOMp6xmYQSBJ3LQ.roa (hash: X1Rxis2xsh9D70KdlclAD1iUcJEca7H7zmBLpXbXixs=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: GPLnb6L1pb2WgqauhEV6W6QrTZ+60U7G0qQUy4+MrYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:0b:a4:8c:89:db:ea:a5:6a:c5:18:7a:54:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Jun 12 03:00:24 2026 GMT
Not After : Jun 13 03:00:24 2026 GMT
Subject: CN=67feee7bdc229604bcf7657bf0fbc0af14e0fd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:ac:b3:fc:4f:97:18:d6:66:16:1a:ff:8b:
10:72:ed:2c:3a:73:ff:60:94:40:ac:ce:ad:29:dc:
f3:5f:fb:62:7d:3a:2a:bc:3e:a3:b9:4e:36:0f:09:
3b:a0:af:62:5b:2a:5c:14:08:af:99:de:2a:74:ce:
89:72:60:7c:8c:6c:bb:65:53:f0:40:d9:bc:6f:5a:
e5:e9:2a:e1:26:8f:d4:58:74:96:89:71:07:c7:af:
57:52:21:9b:49:83:61:da:33:6e:28:4b:f9:dc:d9:
0b:48:b4:8c:60:1c:b2:b3:6c:f9:fa:03:16:8d:c4:
08:16:37:19:2f:12:c6:81:09:7b:b6:f6:7e:b7:19:
a0:14:b1:8b:b7:54:99:2a:98:7b:77:07:9b:c0:01:
4f:02:9b:c2:eb:90:f5:41:c1:f4:d2:c3:2f:c3:60:
89:f3:6d:af:c1:0e:aa:8e:70:ef:2b:06:b2:18:7f:
68:0c:06:14:3b:8e:54:a8:ba:13:42:a9:52:06:c1:
a5:03:f3:ab:cf:7a:ed:e6:dc:48:d0:34:17:27:47:
bb:c7:7a:ed:75:88:ae:5d:28:f2:d7:f7:6d:74:af:
7c:97:7a:e0:55:fd:56:8a:44:ea:ef:2e:fe:a2:88:
d4:93:df:8d:dd:25:57:e4:fd:a3:25:44:7d:8d:bb:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:EE:7B:DC:22:96:04:BC:F7:65:7B:F0:FB:C0:AF:14:E0:FD:90
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:a8:61:ea:ea:a7:2b:78:59:70:ae:e3:f9:06:96:41:30:
38:d0:2a:0b:79:c9:dd:bd:ab:ae:51:b6:0d:ea:df:8e:34:f6:
71:f8:7b:fa:7c:7e:e1:37:b0:3f:99:9b:b5:70:90:56:a1:36:
cf:7a:93:d4:0d:92:8f:fa:c2:a8:71:0a:1b:bf:97:01:4c:0a:
23:ff:70:d0:3e:e9:1b:8b:2f:3c:2b:e1:14:39:54:ba:e4:54:
0a:7b:ee:e6:c5:68:a7:a3:f9:94:76:f7:e6:0d:f6:9a:28:76:
28:61:b5:c9:d3:2a:aa:66:c5:be:aa:b3:80:2c:12:56:d7:a1:
a6:53:ef:ea:62:89:65:31:00:14:39:57:57:65:ba:55:90:6b:
b8:d1:b9:25:ba:f6:e4:86:92:a9:a6:c5:06:ef:31:a5:2a:0a:
d7:07:27:50:26:77:82:43:c4:e8:eb:00:3c:4b:05:e3:9b:7d:
08:65:a9:bc:2d:bd:0f:16:14:d6:bc:48:27:e0:85:0f:97:98:
af:39:ac:aa:b0:bf:b2:01:29:f8:c8:c2:e7:47:fe:be:60:61:
f6:43:36:0f:08:4a:83:bc:42:63:a9:20:ff:b3:cf:7b:0e:18:
f5:1a:a5:51:08:b5:98:f5:fa:62:fd:d7:68:2d:2a:d3:e9:f1:
81:a9:0b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:46:16 2026 by rpki-client