Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: LMAANK6/0SXsQR3Ij2rnAwvLS6skmFM4eiCxeMuKD+s=
Subject key identifier: C3:7F:A1:4E:17:4A:8A:E0:32:9A:C4:1B:01:F1:41:DD:BD:C5:FC:3B
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019EB95832415F064D1BB40C4AB58DC31B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 01:00:25 +0000
Manifest this update: Fri 12 Jun 2026 01:00:25 +0000
Manifest next update: Sat 13 Jun 2026 01:00:25 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: xp0wMCpsIA+Is98KFP+AtQJgwxajT3K1amnEXDC3/dE=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:32:41:5f:06:4d:1b:b4:0c:4a:b5:8d:c3:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jun 12 01:00:25 2026 GMT
Not After : Jun 13 01:00:25 2026 GMT
Subject: CN=c37fa14e174a8ae0329ac41b01f141ddbdc5fc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:44:cc:cc:d2:4f:3d:14:5d:55:53:03:ff:
6c:a0:99:a7:c8:53:31:8a:48:fc:ff:4c:43:e1:6e:
d4:64:fe:81:e2:00:3a:97:27:f1:96:85:22:cb:5b:
dc:98:4f:26:fe:9a:b6:48:fb:75:16:e4:5c:8e:c9:
6e:4e:14:12:a2:fb:c0:0c:bf:0e:41:c4:18:00:ef:
7a:55:34:2e:7c:e8:60:be:35:f5:67:ef:6d:6e:b3:
b4:91:61:5d:c2:15:ff:bf:ef:18:05:74:e3:df:ed:
c9:20:da:a2:f7:8f:48:16:ba:05:0f:75:3a:7f:7e:
a1:54:cf:a5:0d:2f:69:81:ec:67:0d:71:0d:9c:b4:
2e:ab:3a:30:03:7e:9c:df:c1:97:ce:8d:af:68:80:
84:79:66:3d:3d:0d:a2:a2:cf:28:ee:44:24:83:79:
60:1d:39:a5:ed:c1:f8:90:3a:fc:14:ff:d4:83:a6:
ae:6d:48:f0:1a:ea:20:ed:81:36:be:6b:fd:11:f4:
c3:fd:8d:8f:a9:be:e5:94:41:46:d0:83:49:54:f9:
64:88:45:c7:e3:31:0c:95:88:62:c9:8c:dd:e9:7a:
dd:52:8e:99:e3:08:87:97:1f:4a:69:25:0f:83:82:
7b:0d:51:55:ba:19:7d:0f:8a:30:15:5a:40:90:a2:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:A1:4E:17:4A:8A:E0:32:9A:C4:1B:01:F1:41:DD:BD:C5:FC:3B
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:95:19:2c:5c:21:f4:c0:89:8d:07:4e:41:15:f3:c6:f7:d3:
81:01:01:9f:d0:f7:67:e5:51:c6:ab:a1:fd:66:ff:9c:51:dc:
6e:52:1b:c1:9f:64:7a:3e:f1:83:2a:4d:2c:99:06:5a:4e:13:
01:13:22:dc:0d:25:02:b8:b0:e8:80:40:61:fa:53:7a:51:bb:
b9:f9:00:06:19:a0:4b:44:ad:6e:66:73:f9:d9:7e:16:6a:2a:
cb:8d:a0:61:e3:73:a5:e6:9b:2c:46:26:b8:18:04:ec:d1:37:
7c:6b:7d:78:66:d1:b5:34:a0:26:d4:0f:e8:ab:37:22:b4:6b:
65:3e:21:91:51:d4:f4:ec:45:fe:cc:da:27:42:ff:b8:87:eb:
ce:ac:03:cb:c5:71:16:f3:3c:ac:d2:7e:3a:ef:f6:2a:62:f3:
41:bc:03:68:93:9c:a8:bb:df:de:57:ea:08:e1:5e:21:f3:89:
f3:65:aa:c2:11:ef:9a:19:12:92:74:cb:43:e4:94:df:4e:a3:
d6:d9:d7:c5:93:b7:5f:86:e2:29:42:04:90:8b:59:8b:21:c1:
4e:fd:a2:73:a2:72:d7:5e:bf:f1:41:55:d2:70:5c:b3:81:40:
09:c2:2b:3a:5f:ed:25:e8:fe:c3:54:4c:62:7b:21:fa:5d:24:
0e:37:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:39:32 2026 by rpki-client