Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: UGnQHKXKThtZuiVGiq/eozwysPlKXMV1YdNLmVsc7hk=
Subject key identifier: 43:99:09:F3:26:16:C7:93:10:2E:7B:7F:E5:6D:02:F3:A5:EF:9C:F5
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 019D3A1CAF494BADC99CC9130145F0C3DBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 0C
Signing time: Sun 29 Mar 2026 15:00:51 +0000
Manifest this update: Sun 29 Mar 2026 15:00:51 +0000
Manifest next update: Mon 30 Mar 2026 15:00:51 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: Z85JrYPAJu0ip83UUYTAu4J+VkIa12UrJTUYYSYZOFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:af:49:4b:ad:c9:9c:c9:13:01:45:f0:c3:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Mar 29 15:00:51 2026 GMT
Not After : Mar 30 15:00:51 2026 GMT
Subject: CN=439909f32616c793102e7b7fe56d02f3a5ef9cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:9d:7c:6b:46:fd:bd:a9:f4:49:9f:23:94:
22:42:51:1f:8a:79:d0:47:eb:7c:24:a3:e3:c5:97:
73:35:99:1e:8d:26:35:d2:79:3b:9a:31:40:b9:d2:
b9:1b:c0:a1:a0:a2:9f:b1:7b:95:13:23:ba:52:a9:
4e:2f:70:d2:9a:e3:64:af:6d:c7:b9:11:fd:2a:13:
6d:38:a6:01:41:28:35:75:94:b3:61:33:d9:c2:0c:
f1:01:1c:47:b2:d0:3a:29:c5:3f:41:59:27:4e:52:
d4:a6:64:cf:fb:2f:f1:19:7b:5a:01:9c:54:2e:82:
4b:68:f6:df:1c:c4:bf:87:77:4f:81:ac:15:97:71:
d2:d3:48:02:9d:ef:bf:c9:95:53:29:83:fe:4c:08:
e3:92:f1:2a:90:c8:88:7f:64:ef:96:bc:6b:40:3b:
98:77:e6:c6:f5:60:07:f6:7f:47:ff:b2:fd:63:60:
2a:b8:37:fc:d0:0c:41:66:a3:21:e5:0f:d7:e8:83:
9b:1d:dd:c5:98:7a:66:b9:4b:6c:c7:98:2b:a9:fc:
82:7a:3d:fa:4c:af:5d:01:ec:d1:5b:92:c8:cb:59:
68:1d:e3:34:cd:d0:a3:e1:f0:bb:89:a2:48:31:b7:
82:67:e5:07:ba:d8:6f:a7:a2:7b:a3:9f:a7:84:4f:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:09:F3:26:16:C7:93:10:2E:7B:7F:E5:6D:02:F3:A5:EF:9C:F5
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:98:33:47:63:1d:df:13:fc:19:f8:f3:71:a6:ad:9f:f4:70:
bd:18:57:63:0f:87:d0:eb:4b:e8:b7:ef:64:d9:45:23:cb:f1:
b0:84:a3:a2:c1:e5:dc:fb:86:3d:4e:5f:cc:0a:40:d9:a9:92:
0f:67:83:9f:12:b5:eb:32:81:31:7c:c1:97:0c:e6:47:2d:26:
bb:87:65:02:45:6e:68:a5:5a:b1:b0:ff:2e:69:20:68:93:b4:
c4:1b:de:77:35:c3:15:b0:47:f6:85:fc:a8:e2:fa:cb:70:5d:
1f:0b:17:22:6d:3a:db:66:8c:6d:9e:c3:37:fc:95:e8:15:5b:
9c:5b:10:29:3b:b7:2f:d6:aa:a7:0e:c4:25:69:02:2f:08:14:
57:2d:55:41:7f:43:e0:65:06:0a:48:d3:4e:6d:26:36:79:7a:
01:0b:ea:50:0c:1a:94:74:2c:86:0a:79:5e:cd:38:a0:e2:48:
9a:0a:57:7d:f2:ed:2e:cf:0c:d2:b4:38:f0:36:55:20:70:67:
22:51:d1:3a:c0:e4:62:02:1b:be:96:64:e7:6a:5c:a0:34:35:
4c:83:80:89:39:d9:6f:7d:a1:38:37:4b:2e:67:17:07:8c:92:
30:bb:2c:5c:e9:d6:36:71:94:7f:49:4a:33:d6:14:56:36:f6:
b7:83:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:19 2026 by rpki-client