Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: +MN/VnEdB3x+EZO1uSOz3tlCpB/E19P7vdjM2YpWz9w=
Subject key identifier: 1D:55:31:99:BB:5D:C0:C4:AD:BE:C4:32:DF:92:70:F9:7A:E3:54:16
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019D37C10C5D2FE32F596833EDC7D8EE0923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 0754
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: fEeplWw_YpRC4Ay1QIQCqiNzEng.roa (hash: Twh3oQrfCjhr2qTmHSOUea5jfVO2MWIW03LajOLIrEA=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: J/vvFglcHVPmdW0DG8IOmctuIuBO25X8egHHglAP0HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0c:5d:2f:e3:2f:59:68:33:ed:c7:d8:ee:09:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=1d553199bb5dc0c4adbec432df9270f97ae35416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:d2:93:d6:9e:fc:7e:6e:8c:49:aa:c7:7d:
bf:04:cb:25:52:29:d8:52:9d:e5:3c:60:ab:db:9a:
a2:ad:0e:66:1c:00:c7:ef:62:b4:ec:c3:4d:dc:c3:
b4:76:13:3b:23:84:43:21:d5:e8:ed:ea:8f:85:45:
25:7b:ef:49:a8:9c:90:d6:3e:da:31:70:1f:c5:01:
fd:00:f6:38:99:04:47:b1:a3:26:05:cc:c4:ed:83:
91:54:07:c5:2a:0c:9f:1d:4f:11:bc:95:69:8a:0b:
0f:2f:04:2a:a3:6d:a8:25:85:2d:7f:05:72:0b:8f:
81:16:a1:0b:14:ac:b8:04:ef:35:07:88:9d:d2:60:
30:ea:4f:b4:cf:aa:10:30:1d:81:e4:f7:10:95:49:
35:3d:ed:9f:34:1b:bb:be:89:7b:cd:b1:c6:07:c3:
1c:d9:07:aa:22:c1:1b:57:49:14:12:75:ac:bb:55:
ba:04:3d:22:2c:28:40:10:87:eb:5d:5c:64:2a:95:
cd:c0:37:59:2b:67:35:8d:a1:a8:60:20:85:c5:2c:
cb:49:ac:47:88:1f:ed:5d:34:96:b7:7a:44:3d:f0:
97:12:36:9e:64:63:f5:74:16:96:ec:9a:ea:10:a1:
d2:97:2a:73:80:18:d4:30:f4:8d:58:b5:b0:3b:33:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:55:31:99:BB:5D:C0:C4:AD:BE:C4:32:DF:92:70:F9:7A:E3:54:16
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:14:17:1c:8e:d9:e5:e2:6e:bc:b8:aa:5e:c5:d1:24:76:
bd:ef:23:6f:5b:65:6f:44:8e:d2:33:e0:e7:8c:01:ec:11:2e:
16:d8:53:4b:36:78:3e:fb:2f:9a:20:40:05:1d:83:74:73:44:
e0:50:f2:82:87:16:2d:9c:36:21:f0:26:7e:0b:58:a6:8c:46:
b1:1e:bd:09:f9:27:d7:7f:0b:76:18:75:d4:83:cc:a3:22:a0:
ec:ea:63:c3:60:03:d3:53:84:a9:a1:ce:17:5a:58:4a:33:38:
26:e7:b9:a9:05:c5:3f:ec:9a:eb:7b:1d:6d:a6:6d:32:d7:b3:
53:eb:8e:b2:53:94:53:ed:02:02:95:0e:81:35:10:85:4a:6a:
bd:5b:c5:bb:1c:51:df:d3:5b:d7:3a:21:f3:dd:9b:64:6d:3c:
d8:97:4e:3b:64:6b:9d:d9:65:8e:45:f5:be:a9:e0:8d:99:c4:
5a:bb:6d:97:dd:d0:b3:a6:ab:2a:36:1c:76:43:29:9a:4c:6c:
2a:63:94:77:b7:50:5d:1b:c2:8b:cc:ca:d5:06:4e:d6:89:e8:
2c:38:50:88:72:16:a0:90:1b:83:11:1c:6f:40:42:df:9b:66:
44:87:43:88:55:94:c4:4e:cc:00:4f:b3:b5:e0:0e:73:15:4b:
66:e6:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:26 2026 by rpki-client