Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: cwpT1sBccSPRcQ7gS+688QMiOvFXCPwwmg0XKkgA2lo=
Subject key identifier: BA:95:E4:B7:4B:83:17:E4:EB:14:9B:45:54:E8:CF:3C:14:ED:91:E8
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 019D39AF5DB79F62F5B39840DE687EC61D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 1611
Signing time: Sun 29 Mar 2026 13:01:27 +0000
Manifest this update: Sun 29 Mar 2026 13:01:27 +0000
Manifest next update: Mon 30 Mar 2026 13:01:27 +0000
Files and hashes: 1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: SEJ5FPAaWWAr6QDGSuQLaXjU5BtYwYCggg4qmsKoxzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:5d:b7:9f:62:f5:b3:98:40:de:68:7e:c6:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Mar 29 13:01:27 2026 GMT
Not After : Mar 30 13:01:27 2026 GMT
Subject: CN=ba95e4b74b8317e4eb149b4554e8cf3c14ed91e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:82:a1:ba:6a:59:d2:9f:67:65:91:1f:68:
e4:65:1a:0f:e6:8e:ab:ec:77:ac:65:c3:cd:15:01:
cc:47:03:e7:e0:f3:e9:85:d7:6a:98:33:ba:d8:da:
dd:eb:3b:21:8d:dc:0f:66:e2:5a:87:d2:c0:c6:61:
d7:fa:9a:29:60:85:b3:d2:ef:27:64:c0:c7:af:b3:
11:cc:9f:50:2e:d8:a1:ec:bc:1b:fe:48:20:97:16:
47:a3:47:67:83:26:a7:65:7f:54:1d:8c:21:04:6e:
56:a9:62:8a:7e:24:1b:b8:a7:57:5d:71:33:93:43:
da:ff:5b:82:03:cb:7f:0b:cc:4d:71:23:57:b9:61:
96:5a:ad:dc:cf:c9:d5:c4:9c:fd:be:69:6e:40:8f:
87:e1:d5:4a:68:f3:28:23:c2:3e:94:12:91:dd:38:
36:de:67:f0:e6:15:ae:a9:72:81:d8:7d:50:35:69:
23:de:96:42:3f:57:5d:93:a4:61:75:74:e4:7d:d3:
91:33:12:48:72:26:ef:50:8f:00:86:14:81:ac:e8:
ca:45:1b:da:09:87:93:9a:61:4e:e3:2f:1e:7b:13:
fb:9c:0e:bf:94:da:11:a6:c3:22:35:57:78:90:d7:
a8:b5:f2:c8:9e:3c:f4:70:02:c2:03:cd:59:73:1f:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:E4:B7:4B:83:17:E4:EB:14:9B:45:54:E8:CF:3C:14:ED:91:E8
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:11:70:ed:3f:6a:39:8e:fe:bc:63:f7:f3:43:1a:da:68:
6e:4b:04:12:0e:24:e0:f1:c0:69:c4:b7:94:c8:08:38:e7:2b:
d5:51:cf:8c:f9:0e:f7:64:71:95:20:be:64:fa:f9:b2:81:a9:
81:d9:7e:b2:06:91:81:fb:90:40:48:f6:20:9d:5e:62:07:c0:
eb:cd:f1:ff:89:e2:31:fb:6c:f5:63:93:94:58:6e:21:ab:45:
26:c9:5d:ba:4b:77:75:b3:7a:9c:57:86:bc:3a:1b:fb:e2:ce:
68:a7:33:0f:ba:15:36:1a:e7:ed:3e:eb:8e:54:44:b6:bf:ed:
bd:b2:70:1b:ae:42:d5:0d:37:b7:ea:fe:af:c7:a9:8e:d2:b1:
d2:d7:5b:56:91:f4:78:d3:35:0d:5d:9b:8d:fd:aa:f4:94:9d:
90:3b:5b:09:91:04:c2:36:e8:cd:b5:96:94:13:ca:0e:9d:e4:
c3:16:60:bd:eb:28:35:cd:5b:f3:a4:20:d8:2d:b4:04:fa:12:
a4:a5:4c:64:b3:6d:f7:3f:9f:27:26:a4:8d:db:d7:0d:dd:50:
bb:a8:f9:47:a6:fe:f4:f5:eb:ed:f3:c0:ee:40:36:64:46:65:
cc:aa:f9:3a:06:ee:74:06:b4:2c:ef:91:6c:0f:b7:cb:0c:df:
a0:92:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:41 2026 by rpki-client