Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier: kbkOtnOq20ItBoEf/2QS9afjLFj98sg0ZeSzW/mebrY=
Subject key identifier: 95:B0:19:8D:81:52:2E:C6:ED:F8:60:0F:62:47:5D:8B:6C:26:67:E1
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 019D37F77AD501580AD3035D594C0A07DD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number: 0B10
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa (hash: 9sKjJMjkVL/S9kl3FSQOk76oCUEVM9PGOrM1vKQrGA0=)
2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: rs9E2vd1geeCHfWts00vzot5GTe7ccRtuVTtGmDLHpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7a:d5:01:58:0a:d3:03:5d:59:4c:0a:07:dd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=95b0198d81522ec6edf8600f62475d8b6c2667e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:c2:f2:1d:8c:a8:2f:87:40:e4:97:ae:ce:
a3:2b:ac:fa:c1:70:b2:14:f8:fa:ed:d1:8b:78:df:
19:c8:37:71:48:6a:e1:76:0b:fc:4d:48:e5:0b:79:
38:c9:7d:c0:e4:c8:c9:13:52:9d:22:aa:38:19:48:
71:eb:cc:a8:e6:ab:d6:f1:84:b5:c0:03:04:33:be:
3f:62:de:ab:bf:45:9d:16:dd:2f:ef:83:ea:4a:c6:
a6:0d:cb:6f:8c:68:12:72:b4:6a:6b:e4:d3:34:32:
c0:fc:30:74:5e:55:70:b9:69:62:af:a6:0b:bf:f9:
6d:e9:08:cb:6c:9c:17:89:7e:23:5f:9a:27:98:06:
58:e8:f7:60:40:97:88:be:0f:8f:36:31:94:79:11:
51:0d:34:7e:32:b0:48:97:e4:75:70:f6:2c:3e:d3:
64:d3:04:b2:44:f1:c4:16:ce:aa:e7:22:0a:94:4e:
e0:17:d6:37:34:0c:3c:ef:b1:40:c2:43:9b:33:88:
f6:52:15:bd:cf:98:b6:66:67:00:9c:23:e2:78:29:
19:c6:b7:b0:15:71:09:7e:60:68:c9:06:be:f1:27:
9e:af:7b:b2:a4:ee:6b:04:69:cc:d6:2e:23:c1:2d:
ce:0e:ca:1d:3c:38:f8:95:c1:22:a2:48:18:d9:7c:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:19:8D:81:52:2E:C6:ED:F8:60:0F:62:47:5D:8B:6C:26:67:E1
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:54:6e:60:a6:41:82:9b:65:0a:e0:5c:a8:2a:6b:4b:88:db:
86:e0:d8:26:52:67:17:2f:a5:5c:28:2c:1e:3d:d5:2a:e6:bf:
bf:28:5e:5d:e6:e7:33:cb:27:cc:e0:bd:f8:82:12:da:11:5a:
e5:73:ef:0d:6a:af:e2:07:2e:95:be:5f:4f:60:ee:2c:0f:2b:
02:81:cd:40:d5:ec:52:ae:94:a7:26:4a:1b:23:17:2f:44:94:
67:d5:9c:cb:c2:23:29:db:b6:7a:35:32:20:bf:99:06:e4:c6:
cc:dc:d1:33:9a:04:7d:f7:45:ba:17:23:cf:c8:db:af:a0:dc:
63:70:9f:75:41:cf:4a:1b:99:b2:c9:4c:dc:76:1c:8d:bf:ed:
a4:35:81:36:df:cf:56:f9:1b:34:ff:79:e1:6f:95:89:2e:15:
a5:c8:c0:ae:74:d2:78:91:53:2c:27:40:db:fd:2b:20:03:03:
90:14:1d:96:1a:1c:bf:a0:17:ff:bf:75:19:ad:bf:1b:c2:eb:
46:01:c1:b7:37:7b:69:92:74:41:58:70:cd:70:e1:db:9e:87:
55:6a:c3:49:78:d5:c4:a1:51:24:f7:36:57:70:4b:3e:d0:75:
b0:78:69:ae:4c:e4:a8:6d:0a:c1:8c:2a:7e:2e:b0:cb:ec:d5:
f1:3e:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:24 2026 by rpki-client