Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: OAbSzCuY6lnY/xaAdmzJllGuM769OssLElj2DzT+4eQ=
Subject key identifier: B2:FB:08:73:69:7A:BD:5E:56:85:82:41:BF:B1:31:65:68:C5:82:F4
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019D3940960875EF0F04D983BD2872A18F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: /8wUf/y9lLomuUuSIfNdR8SCiW/Vf4gBeG9AMaNNt6k=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:96:08:75:ef:0f:04:d9:83:bd:28:72:a1:8f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=b2fb0873697abd5e56858241bfb1316568c582f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:3e:9f:9f:af:1c:45:65:96:9e:29:d8:2d:
09:41:ad:30:04:8d:ea:d7:2d:f4:21:60:72:f2:64:
bb:9a:37:87:f8:dc:c4:ef:c8:c1:11:c9:52:f5:7f:
21:12:63:fd:0b:6e:39:17:d9:67:9c:30:99:f9:bc:
3b:c7:ec:e1:d2:34:6b:4c:49:06:44:af:3d:98:14:
54:5e:08:9d:f9:93:2e:95:32:d8:48:08:37:1d:b0:
c7:fc:37:49:36:e8:94:81:83:fb:c8:5a:b8:75:22:
9c:60:85:17:28:1d:21:52:f7:3a:a5:83:25:1f:f3:
1b:fa:27:b1:7f:f4:16:f4:df:33:b5:eb:f2:85:b3:
25:51:75:d1:50:df:5c:e5:8d:7a:50:26:62:5f:90:
75:71:98:e0:a0:64:42:b7:54:6a:ef:b4:71:26:b7:
ba:23:20:88:47:09:c9:2d:94:7a:2f:8c:fd:9f:f4:
b2:1e:27:d3:f9:e7:4e:ca:5f:4f:25:a2:8a:e1:5e:
e3:af:97:39:03:6a:90:12:aa:c7:fe:45:27:0c:9c:
32:ac:c5:9d:d7:4f:fd:63:df:ba:3e:d1:64:fe:00:
92:c7:9c:28:ad:2d:39:e3:99:04:d1:53:a9:f6:53:
6e:03:98:89:31:51:8f:4b:40:24:ec:75:cb:a3:b8:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:08:73:69:7A:BD:5E:56:85:82:41:BF:B1:31:65:68:C5:82:F4
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e1:8a:67:88:a9:2a:dd:20:28:68:db:f8:43:1a:0d:f7:c1:
96:57:56:ee:58:72:71:6a:4f:70:b6:9a:47:4b:f6:0d:5d:ee:
72:ad:7a:e1:f8:e3:3d:69:0b:58:03:a0:71:c3:3b:ee:16:56:
36:ff:cc:77:2c:4c:ec:4f:3a:57:e4:4e:b4:a1:aa:37:6c:d8:
59:48:48:1c:bb:c8:ee:3c:16:c7:4e:8a:21:f6:7b:ab:da:f9:
b0:77:80:a0:9e:2d:01:8e:a9:74:d8:be:37:c4:db:39:ca:45:
bc:3a:85:9a:5a:12:1f:99:c4:11:7b:13:fa:2c:1a:48:20:27:
14:a1:53:55:a5:0e:c6:5a:a0:5d:38:40:08:a4:34:5c:55:58:
b7:6f:1e:1a:41:31:a1:9a:db:06:0c:d0:02:76:04:32:fe:6f:
5c:27:6c:c3:a9:e1:90:de:00:46:06:14:62:54:6f:d7:ea:39:
ee:6d:33:a5:55:31:ba:d0:d4:7c:bb:92:f7:e9:5f:6a:04:07:
a0:33:13:08:32:67:8b:f5:0a:f6:c8:a0:84:a0:75:4f:24:81:
ad:20:fe:4f:dd:21:47:71:c8:f8:79:01:ac:5a:a4:1c:56:f4:
b5:73:71:5d:5a:5d:a3:6d:aa:76:6f:d3:e3:c7:3d:df:06:7d:
dd:39:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:23 2026 by rpki-client