Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: VirLbQblKT3JA2oc/9ezYyu1QhCD+sGP+xtU1/dsFSg=
Subject key identifier: AF:65:D6:78:2E:A3:EF:85:DB:F6:84:52:4C:A5:C6:B9:6C:E8:B5:7F
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 019D3909B330FAEF843A3BB7D6E7B3FABF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 1368
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: Z9ek+Cw6TR87dZTPxDQx2byYUdokvKJ405ZaW01RWYo=)
2: yH0aijgaGO1sOyv5Jg6D95KfZ58.roa (hash: fSdLoz8/XDItScytuLveTLBHygsoLoVUMSB0Zg60LLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b3:30:fa:ef:84:3a:3b:b7:d6:e7:b3:fa:bf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=af65d6782ea3ef85dbf684524ca5c6b96ce8b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:81:d9:9c:6c:17:f2:8d:a2:25:a2:13:0f:
f5:53:e1:57:8a:06:35:f6:6a:f8:f8:b9:57:83:59:
d9:13:86:cd:40:6a:93:a1:67:19:e3:c6:31:db:9a:
1e:ca:e2:aa:e1:df:45:69:be:8b:7f:eb:af:88:7f:
f3:6e:f0:3d:55:b3:21:e8:e2:85:25:2c:ca:e3:70:
e1:eb:1c:41:df:33:c2:18:cc:b6:dc:08:1d:84:ca:
ef:37:95:36:e6:fd:a4:c4:20:2d:de:1e:0c:3f:1e:
61:72:eb:3a:b5:f7:bb:21:c4:db:c3:fd:dc:44:77:
55:28:f0:b1:fc:d5:59:e9:05:04:d6:8e:31:4b:46:
39:c8:31:88:83:ce:67:24:28:85:7d:9b:78:64:0f:
0d:fd:e3:7e:bb:f9:a1:67:ff:db:99:9c:ef:07:13:
22:0b:f8:e4:7e:ef:09:92:8b:95:ea:79:02:25:2c:
d8:b1:cf:d8:45:e3:57:2e:d8:be:6d:20:0c:2b:44:
98:84:22:6b:76:57:95:e9:2e:8a:ef:12:0c:ea:2b:
33:2c:72:2c:04:a7:1a:58:75:e8:e2:09:b0:f8:3f:
6b:7a:2b:b5:99:85:48:fc:cc:cb:bc:94:55:aa:44:
c8:55:d2:ac:66:6e:69:31:f9:e8:c1:63:68:63:80:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:D6:78:2E:A3:EF:85:DB:F6:84:52:4C:A5:C6:B9:6C:E8:B5:7F
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:ca:a5:00:7e:c1:ea:a2:23:e8:e5:25:cc:41:1b:c5:b9:
d6:bf:ce:45:2e:2a:96:e8:e2:c4:3a:c2:f1:37:5d:c0:ad:51:
f0:f3:cc:48:cd:80:2e:a7:35:3e:64:d5:21:c1:26:b9:6f:33:
b8:87:09:cc:d4:5d:e2:95:80:39:e1:50:1d:9d:11:47:73:bb:
ff:31:ad:db:42:29:0e:15:4f:98:31:02:ce:59:a5:13:71:68:
cd:d4:29:60:f1:ba:48:33:92:6c:6a:5f:6d:8d:4a:ad:64:3e:
37:82:c5:32:f5:d7:f9:00:2a:4b:ff:0c:43:7a:ed:fc:1e:f2:
98:01:50:71:74:5b:22:3a:c4:a7:be:01:8c:f9:90:80:1f:a0:
32:4b:bb:41:ba:f6:10:73:a6:13:4c:54:96:39:f4:44:a0:72:
48:62:c4:81:5d:00:27:4c:1c:93:78:be:d1:1c:04:2a:05:f3:
e9:a5:f4:f9:f6:9d:31:82:b6:f6:fd:85:5c:a7:1a:f1:9d:b3:
26:ac:46:08:7a:25:d4:e5:e6:6a:1a:2c:6f:ce:e1:92:30:c7:
0e:72:f9:3e:65:02:2a:5b:13:5e:02:b7:38:28:93:e0:c7:a9:
4b:9d:2b:ab:73:0a:26:bf:7e:1e:52:c0:5a:52:98:be:e9:1c:
c0:9c:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:00 2026 by rpki-client