Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: +RuBqhbkyCOfDeHYsJoKt0GICjBLby3uQcuKJjAaJsg=
Subject key identifier: 54:45:5A:A7:4A:C0:F5:B1:11:68:BE:8A:08:6B:EA:6A:19:17:01:CB
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019D394160663695EDF7DC6D775823E8BD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0B5F
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: mntIFvJVojUzLhljgNQXqm/kUxs6R7vLS0JA7O+bbPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:60:66:36:95:ed:f7:dc:6d:77:58:23:e8:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=54455aa74ac0f5b11168be8a086bea6a191701cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:85:ad:64:ee:a5:28:71:cf:9b:d8:cf:a9:
86:d3:52:23:b6:3e:6a:50:e8:10:e8:c3:ed:31:fb:
ea:a9:d8:56:e1:43:c5:49:1d:01:f8:7a:e2:8c:f7:
72:ef:fa:9b:9d:ce:8f:9f:5a:90:94:10:2d:9b:83:
6f:36:08:b7:f4:a7:ae:b9:e1:dd:36:60:7f:6d:98:
09:d6:74:82:a0:84:eb:65:36:8b:76:a0:9a:e9:0d:
88:f1:dd:e7:17:2a:dd:cf:9c:ca:77:43:31:b6:c0:
04:31:52:89:69:98:29:b0:a6:b4:a8:5f:b6:0b:0a:
c9:17:aa:fe:4f:e3:5e:d4:fb:6f:88:28:f2:1f:56:
b1:8a:94:7b:fb:6a:52:8e:50:6c:a5:fc:46:08:46:
e6:5b:00:07:bc:98:30:82:7b:dc:3b:2f:c2:82:ff:
2d:36:07:fa:a4:98:e6:59:37:cb:d6:82:03:f2:59:
ec:d7:bd:52:a0:c0:e7:78:86:32:9d:79:0e:1b:d5:
b5:83:53:31:68:22:65:78:d4:7d:60:44:fb:ae:64:
cb:e7:16:17:52:cd:fe:47:8e:df:4e:18:f8:af:e2:
06:f1:dd:23:e9:e0:30:df:d4:d6:8f:87:a2:cc:96:
ed:de:34:47:26:08:ef:2c:ff:76:91:f9:51:39:87:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:5A:A7:4A:C0:F5:B1:11:68:BE:8A:08:6B:EA:6A:19:17:01:CB
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3d:42:23:a3:a7:f6:e3:dd:34:37:a9:cc:42:09:9a:f8:b1:
16:5a:cd:78:1d:e7:4f:c7:35:e0:6c:ee:6d:e8:80:64:a9:3f:
02:30:92:c9:20:0d:bb:1b:d4:d2:e8:0d:d3:6f:ff:b8:95:9a:
91:8f:54:15:a8:17:2a:ff:f8:89:65:fa:05:d9:31:96:17:fb:
f3:a9:bf:97:ee:2d:15:d6:cb:d3:3a:30:22:85:65:0b:07:6a:
99:25:bc:92:59:8d:51:22:ea:8c:c5:88:23:b9:65:d3:f5:4e:
35:36:f8:36:cd:6f:64:83:55:3b:7d:9f:41:df:4e:af:6f:8f:
28:c4:4d:69:09:5c:e4:32:17:aa:f9:a4:e7:2a:1d:60:34:48:
72:90:40:6a:2b:02:82:88:6e:c0:86:6f:7b:87:7c:76:e5:85:
94:f9:c9:9e:c0:3b:3b:ce:f6:b7:db:3e:13:52:6f:5e:c0:99:
aa:42:9f:0a:74:3f:3d:98:be:46:b6:33:31:93:c8:03:83:76:
fe:9e:48:8d:0d:ba:c2:51:00:19:77:3a:77:0f:34:2a:3c:0e:
14:a0:66:e8:b8:3b:c9:16:07:a0:c6:9f:4d:8a:29:ea:c7:ac:
8d:34:db:5d:fe:23:74:2c:f2:2f:88:8d:e5:41:f1:6b:ca:19:
fb:14:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:30 2026 by rpki-client