Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: 4endhv8ZaXj+VaO5zXa9yMyhjwo+k5J4P00gbJtFG9U=
Subject key identifier: F0:DA:32:AF:DC:ED:FA:21:C4:1B:84:7D:9C:36:EC:B4:45:B8:04:D1
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019EC5941B8D9416D288C560D4A327E9591E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1965
Signing time: Sun 14 Jun 2026 10:01:18 +0000
Manifest this update: Sun 14 Jun 2026 10:01:18 +0000
Manifest next update: Mon 15 Jun 2026 10:01:18 +0000
Files and hashes: 1: Fk_uxWdkQeYx2z70vxU8pKeQvYc.roa (hash: ktKC7e3hjBfZooC8pVGtH47x/POHGeRio9bH7/rdzsY=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: uUaSOeWaP6kTycwzXypzf269CAg5kNZJdkJXKXy6hXk=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=)
5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=)
6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
7: oJ2ks5YNwiHAq9WzT5_4e1nkYaE.roa (hash: bo5UpeN+wQ6nH/bLCuevf6K58UPiHvne75tCF8e9eKo=)
8: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 09:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:94:1b:8d:94:16:d2:88:c5:60:d4:a3:27:e9:59:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jun 14 10:01:18 2026 GMT
Not After : Jun 15 10:01:18 2026 GMT
Subject: CN=f0da32afdcedfa21c41b847d9c36ecb445b804d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:3f:cd:67:65:db:8c:de:df:f8:c5:7f:68:
25:e1:9b:87:81:46:11:01:a6:6d:a3:69:19:71:a6:
7a:08:9a:f2:5e:33:4d:6f:39:34:85:bc:e7:7d:fb:
4e:30:a0:56:a4:96:99:7c:03:b6:a1:f5:37:b4:39:
b4:f6:2f:13:84:b1:ed:b6:53:b4:1a:4f:2b:96:0c:
9e:4e:ba:0f:4f:91:67:d6:1c:49:bd:0a:7d:98:8a:
f7:65:4b:95:0f:f4:f7:f4:0d:77:5b:bc:f7:84:c1:
e7:4e:a0:d0:6a:a0:18:2a:41:72:be:2b:42:df:84:
20:ed:d9:05:25:5d:a3:ed:07:ef:27:12:56:93:ed:
47:ac:d2:99:1b:30:30:5f:1a:c3:d6:02:45:cd:9b:
87:c8:4e:d9:0d:a9:09:6f:e6:4b:52:e1:6c:9c:8c:
e6:73:dc:59:62:47:29:fa:35:8c:0f:46:1d:5a:e4:
5a:9c:c8:ac:58:ff:14:e2:d5:b0:8f:a0:58:34:e0:
98:38:50:84:a7:ee:1a:c9:69:08:96:d0:80:94:c7:
e0:6c:4b:9f:2a:07:dd:c5:8c:7b:d8:4e:96:f9:07:
e0:67:1b:f0:93:85:d9:10:c0:5c:2b:cb:9c:65:dc:
be:22:6c:7b:54:ca:43:56:26:d5:43:25:d6:d6:14:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:32:AF:DC:ED:FA:21:C4:1B:84:7D:9C:36:EC:B4:45:B8:04:D1
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:57:b7:ce:69:06:f1:50:81:5c:4a:5e:1c:b4:d9:8d:1b:2c:
a1:8d:8d:b2:4a:ff:1e:57:3a:98:c3:bf:27:c6:a8:50:d1:ab:
2d:de:a0:c1:92:3f:1e:6b:cc:1c:b8:fb:19:a6:4a:13:61:b2:
20:1b:ea:ae:d8:24:8c:a7:16:fc:55:04:2a:e0:67:2a:0d:98:
4e:92:62:e5:50:33:02:22:d6:0c:32:40:e1:9b:79:e5:67:2d:
e4:06:03:05:40:63:82:17:8d:45:e4:a3:28:e3:99:03:73:36:
0d:32:e5:43:88:80:27:12:19:cc:c5:ca:66:79:96:b1:3a:3c:
c4:89:91:5c:76:bb:c9:86:50:a4:08:fe:3c:f3:28:e7:c3:ab:
5f:c5:5d:64:9b:de:40:88:ad:9a:41:ad:ab:a3:3b:a2:a7:e0:
e0:f8:82:d8:83:ce:08:ce:bc:5c:80:5c:33:18:01:74:ae:4a:
04:92:fd:65:8d:ee:3d:82:9b:27:92:d7:71:b8:8b:86:e5:35:
db:0c:bc:94:aa:f3:ed:75:71:64:cb:d4:7d:8b:73:46:26:da:
3f:8b:04:b4:57:5a:20:81:eb:f8:f2:86:4b:33:2b:67:75:87:
5c:e2:ed:14:60:31:ac:b3:17:6c:74:c9:bf:c4:5f:0a:e5:31:
99:fb:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 18:46:49 2026 by rpki-client