Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: tXZMJWsMa6CZBjv91ligzxbyiKPLra0y+xh4SHCzr3U=
Subject key identifier: 8A:D0:9D:A1:B5:63:13:02:81:1C:17:7E:6C:C7:38:58:F6:3A:1A:5E
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019D38D3CD3BE539DC7F09779D3E3B671C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 1453
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: _ywMYxiU8NbIN1CGjVxjq4SDazI.roa (hash: epZRiBRCbCpE9Pbvl3sOJJDu8ewPmMS8D3a+HxpVf0g=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: /v7df+KvQN9m4tsmQWy3d+pguNTAmAptzXl+Ij3aYks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:3b:e5:39:dc:7f:09:77:9d:3e:3b:67:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=8ad09da1b5631302811c177e6cc73858f63a1a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:67:6c:50:a5:2d:f3:14:78:42:57:13:71:
cc:3c:12:57:d1:7c:97:d4:4d:b4:85:2f:b3:71:20:
e5:e3:a5:56:5a:f1:f4:3d:e7:33:df:b1:8f:63:74:
ec:82:b5:5f:59:04:fd:d0:5a:22:95:88:68:87:b6:
fa:d3:21:8f:81:7a:4d:b0:f8:0c:18:93:5d:72:52:
12:45:fb:a3:c2:05:78:b3:71:81:3a:a2:ad:af:92:
fa:aa:9c:48:da:15:ba:08:2b:dd:5e:99:8e:b5:07:
fd:85:e4:d6:9a:f2:0e:53:fa:87:87:10:90:41:26:
df:c0:53:58:cf:4a:3d:48:f4:c9:92:fc:bd:56:20:
3a:b3:5d:48:d5:e0:9f:db:ab:73:ab:4f:42:bc:2b:
b0:16:b6:00:f4:69:e1:01:d6:be:33:15:dc:1b:37:
69:2b:be:d0:80:04:12:66:48:10:56:fc:29:bc:ce:
27:96:a8:bb:3c:f4:a7:e5:e8:6f:2a:30:6e:5b:11:
db:72:39:16:b6:1d:c4:49:0a:f5:de:9f:30:c9:e9:
7a:97:07:4a:7a:b8:a5:9b:a1:3a:ab:c2:61:39:1c:
4f:06:fc:fa:85:ac:bb:03:6f:22:7f:d6:de:74:c2:
a2:47:4c:63:49:e8:04:ca:78:94:26:9a:8d:9f:a8:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:9D:A1:B5:63:13:02:81:1C:17:7E:6C:C7:38:58:F6:3A:1A:5E
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dd:d7:e3:38:75:6f:fc:94:da:cd:d1:0f:ad:10:67:be:c5:
34:17:26:d1:c6:12:49:27:6e:8e:77:80:a2:f8:a9:59:d7:ce:
b1:9d:0b:ba:2e:1e:27:2d:02:5b:3e:3a:89:34:b9:ce:65:0c:
c7:93:67:2c:1c:a2:39:05:5e:8e:0f:17:99:9e:77:c2:da:43:
c2:09:51:2f:b2:1e:23:19:5a:e5:a7:fa:5a:ba:df:e8:f8:94:
bc:02:1d:5e:d1:40:d7:30:e1:bd:c5:d5:6e:42:7a:b5:53:4f:
62:e3:09:db:49:1b:d5:1e:3a:8c:62:4a:ac:27:0e:a1:95:2e:
09:f2:56:da:2f:bd:5b:a6:0f:11:67:ff:ec:0f:e5:62:5f:cd:
82:34:6e:5b:1b:cd:e7:06:0d:22:85:9a:4d:56:a9:4f:44:b5:
cc:ca:e9:a3:e4:60:cc:4d:f7:90:b9:6a:87:ca:76:6b:1d:4f:
24:a5:2b:a5:b2:e0:38:be:e4:39:60:be:85:5a:50:ec:32:6f:
cf:9c:d2:4b:cb:fa:43:2e:97:fb:51:6b:06:7f:a2:36:12:fc:
c0:3b:32:7f:2b:81:0f:91:d4:70:61:2f:01:a1:1a:a6:cd:96:
0e:d7:5e:cb:48:d4:5e:12:47:3e:6f:62:2a:99:54:7e:69:3b:
39:8c:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:25 2026 by rpki-client