Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: VNgfan46vc87wl5in7mTjT3Lokilekl0uorjjYrdQgo=
Subject key identifier: 2D:9B:58:68:4B:87:ED:92:17:63:EA:E4:A1:83:EF:6F:CB:03:33:88
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019D37530002EBB0017628C1649A1F99008A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 03B4
Signing time: Sun 29 Mar 2026 02:01:19 +0000
Manifest this update: Sun 29 Mar 2026 02:01:19 +0000
Manifest next update: Mon 30 Mar 2026 02:01:19 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: BrKaJ/hMYPWMgUNjde1DwXxeSuXqe7XGkbFDoom7pcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:00:02:eb:b0:01:76:28:c1:64:9a:1f:99:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Mar 29 02:01:19 2026 GMT
Not After : Mar 30 02:01:19 2026 GMT
Subject: CN=2d9b58684b87ed921763eae4a183ef6fcb033388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:a7:91:0a:b2:86:2e:39:dc:85:7e:30:82:
ea:a7:1a:13:f4:b1:fb:31:b0:59:1b:0d:cf:d0:bb:
8e:e8:89:37:ed:f8:99:f4:c0:cb:b0:bf:66:60:d7:
51:93:7a:5a:17:4e:b8:dd:89:8b:8e:26:12:c0:52:
5c:e2:62:dd:9b:a1:46:a1:aa:1d:8c:ec:da:11:56:
11:5f:7d:9c:3b:2e:f8:c0:54:10:ff:e4:0a:ab:60:
7a:c6:37:05:62:4f:0a:83:75:05:39:16:31:29:f2:
14:d8:3f:57:07:7a:b9:71:e1:08:35:9f:19:36:90:
eb:f0:ba:11:39:17:62:b9:bc:af:ed:05:e9:96:bc:
39:87:c4:b4:62:f3:f7:8b:39:31:02:35:11:18:28:
4e:9d:4d:e7:a5:86:97:8c:58:37:7e:01:f0:76:b4:
2d:b7:95:35:bf:e7:48:92:95:6a:4c:c0:e4:e6:1d:
3e:61:2a:63:21:6a:29:19:4a:1f:15:1f:3c:c1:33:
47:45:1e:7d:f6:7d:59:5f:7c:55:4c:37:f6:db:d2:
6a:90:05:07:3f:7c:05:67:d5:64:49:00:8d:fd:34:
07:04:1a:99:4c:94:02:b7:d6:65:2e:1b:ed:51:f4:
16:09:3d:f2:f0:37:16:cd:cb:10:a0:9a:21:7f:c9:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:58:68:4B:87:ED:92:17:63:EA:E4:A1:83:EF:6F:CB:03:33:88
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cd:cb:32:7d:29:a5:7e:02:eb:97:4a:0c:71:63:f5:a4:1f:
a2:c2:86:65:f3:fe:7e:88:10:3a:9d:65:c0:58:d5:ae:cc:a2:
b6:33:98:25:ed:ba:12:04:6a:69:4b:20:18:b3:cf:88:63:2c:
e9:fa:51:80:b3:ff:55:b1:83:45:3c:0c:2b:88:bd:95:66:52:
11:99:2d:ce:e9:f1:b4:73:71:71:e5:90:f1:ab:6f:ef:7c:08:
47:c2:b2:9d:b1:de:6f:6f:e8:33:04:58:84:00:53:46:54:0e:
0f:81:6d:35:4b:5d:64:d4:f7:0b:8e:43:6b:1c:30:78:6c:90:
6c:94:18:04:b6:5e:93:1d:7f:ad:d3:6b:37:4a:43:70:67:31:
5f:98:48:97:3a:43:7c:80:2a:fc:a9:c5:fd:da:bf:ee:18:77:
b9:04:a2:e7:ca:f0:99:63:05:58:9e:14:98:da:4b:95:0d:55:
7c:a1:7e:eb:bb:6c:a0:d5:62:70:34:01:af:8f:12:dc:a1:30:
43:eb:62:39:25:ed:72:eb:b4:5f:f7:bd:41:70:3a:2a:fb:2f:
46:37:df:75:a0:0b:6e:a4:5d:f9:85:f4:9f:72:3b:4c:2d:87:
ee:d1:b2:47:10:9f:0d:ad:b9:86:4c:d0:f0:bb:77:fb:47:cb:
cf:b0:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:02 2026 by rpki-client