Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: nXhQZ5nEmiO2zhSDSOZuKlMITHJOeUxzzrykJRWv+F4=
Subject key identifier: 88:C6:9B:89:E8:B1:1B:D4:A9:64:30:FF:04:8B:8A:62:68:6C:51:0F
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019D378947AC2CA780ED3B2D4F6EC1616F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0B3F
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: 1-w9hWaB0Y-QZTijfEO33ePRZy0.roa (hash: SgY+1sZqpVCfIbnHknsFg6v2g9JFPjHBp5HxZb7l6VM=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: B80+ENj+F65xqlziEfVtpA5oTqdHRnf4LOl0/ED/QjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:47:ac:2c:a7:80:ed:3b:2d:4f:6e:c1:61:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=88c69b89e8b11bd4a96430ff048b8a62686c510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:73:15:38:68:1b:f7:63:f4:30:af:62:a2:5a:
a4:49:99:33:a1:73:e4:69:65:09:37:f2:ce:f6:70:
8a:46:88:df:e6:3a:b3:56:d0:86:da:71:50:df:0c:
c9:1e:32:a1:33:b7:d5:df:92:7c:51:f4:da:07:fc:
ff:48:5f:40:62:bb:45:59:c5:e8:74:15:38:01:ff:
09:cf:45:9d:6b:de:c5:24:76:00:d2:0f:07:fb:3e:
23:ed:82:f8:53:62:2d:25:ee:ee:2e:a8:22:c2:e5:
38:76:13:b4:31:20:51:21:c5:1d:73:76:54:74:ea:
6c:9a:e8:c3:bf:c3:d7:60:65:64:a3:cb:a6:9d:29:
d3:d5:df:7f:28:89:9b:7a:19:f1:5a:63:e4:62:b0:
98:a9:ec:ad:1e:98:39:31:5f:69:86:c9:ee:bf:8a:
b5:c0:10:05:89:d1:ac:15:28:49:f2:88:5a:40:a5:
02:1c:3a:fd:71:92:d9:fc:82:02:b6:a2:ac:98:00:
f1:62:d1:4a:21:fe:fc:fc:49:e2:d9:fa:54:0a:b0:
b8:5a:62:a0:49:54:f8:53:5b:16:a8:59:68:32:e2:
42:f0:9c:76:98:f1:e6:e0:7b:7b:b4:90:b1:2e:b4:
ef:20:5d:c3:b0:92:6c:57:67:70:44:da:50:5b:c1:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:9B:89:E8:B1:1B:D4:A9:64:30:FF:04:8B:8A:62:68:6C:51:0F
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:58:29:32:c6:84:f9:3c:70:c2:1e:5c:b3:d1:db:b7:49:69:
2f:e2:f1:20:4a:00:6d:ff:e5:44:bf:33:8c:e6:38:97:07:85:
e7:ad:3f:39:0e:1a:e8:46:a3:30:11:85:14:5a:88:dc:45:92:
fb:9c:94:6c:6e:4f:92:44:89:c8:bd:45:47:12:a9:43:fa:9a:
45:71:94:39:e6:b8:bf:17:54:14:76:b4:4d:79:6f:d2:16:76:
83:4c:ff:03:71:6a:ec:97:cf:ee:ee:f2:4c:a7:52:a6:79:b1:
b6:65:2b:ee:5d:b4:ce:74:4a:2d:20:ca:ca:65:31:73:71:ea:
09:f0:ee:07:a4:94:75:5d:b6:3a:4c:de:a8:55:51:c4:81:1b:
34:54:a3:1f:61:23:c9:3b:3a:25:e0:bb:bb:51:3a:62:e1:d0:
4b:f6:8a:00:76:31:02:bb:5f:7b:9a:c9:f9:4f:4b:44:f4:6a:
aa:00:c9:15:c3:a1:4e:0e:af:42:84:d6:2f:fe:ae:5f:06:62:
b3:8d:47:f3:b4:48:50:fa:90:55:7e:27:a6:72:db:44:f2:41:
8f:b6:8e:16:13:89:1e:64:27:5c:60:f4:cb:bd:8b:10:68:86:
b4:ec:70:5e:a8:7f:d7:80:3b:55:13:3c:c4:48:b2:0f:d5:9a:
5d:62:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:06 2026 by rpki-client