Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: WxyrYXdSuO50Ynh2n/XY8bDQO6ZEFfJ7d1JnJaU7V1U=
Subject key identifier: BA:99:88:7C:15:D0:3C:28:07:EE:0F:50:6E:F8:6F:31:19:39:61:10
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019D37C0ECC61D711C67B6AD405CC34100A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 0577
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: 1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa (hash: V7/89jWIsWgE5VYj0PiaT+PidNKfZz1SVPLmNchZNk8=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: dzRBLnvrCOnYVaMykGMh7o/v0LGZin8SmwKPadO4Hog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ec:c6:1d:71:1c:67:b6:ad:40:5c:c3:41:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=ba99887c15d03c2807ee0f506ef86f3119396110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:55:89:1d:f0:49:a2:9f:6d:1d:96:82:75:
95:15:4f:77:24:23:26:3f:32:e8:7f:ab:01:10:f2:
22:f8:cd:9a:28:bb:c3:97:f6:0e:c2:6c:bf:2a:1b:
0d:b2:ca:29:bb:59:39:4a:c6:04:17:7e:1f:a6:3f:
ce:65:7c:f2:33:00:cd:e6:28:79:04:9a:04:8d:f7:
eb:3e:6a:54:7e:c4:1f:03:de:ab:3d:15:6d:75:01:
4f:8b:ec:95:11:05:3e:f8:59:33:5b:a5:2e:b0:11:
c6:74:d5:88:6f:bb:19:b1:6b:71:74:9e:08:b7:d6:
0d:ee:b4:97:ec:f4:4d:51:13:7d:88:e6:0b:28:18:
11:37:41:e1:4e:b1:a4:23:9f:ff:1c:f4:db:95:98:
d2:4d:9a:db:e3:68:56:ec:4f:f2:47:03:08:d5:eb:
e1:40:49:a2:61:40:72:5b:1f:b6:67:9d:c2:e5:a8:
65:43:44:40:ee:4a:a2:09:80:7f:14:3e:ae:32:5e:
30:44:f5:07:9b:12:66:e4:9d:41:e5:ca:10:0e:f3:
82:59:2b:14:37:08:cb:59:cc:7c:e0:c2:88:a0:60:
a8:0a:0e:e2:0b:21:61:38:0c:e2:98:26:71:0f:a0:
cc:d8:8f:0a:2f:ee:61:22:83:7d:bd:cd:09:44:a3:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:88:7C:15:D0:3C:28:07:EE:0F:50:6E:F8:6F:31:19:39:61:10
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:68:4b:6f:b9:ed:74:d9:25:b0:4f:f6:06:3c:b8:56:28:e7:
48:57:ac:12:bd:5e:02:22:07:fb:81:38:8b:a8:22:88:60:b6:
b5:2b:6d:52:3f:59:d3:66:0d:95:ae:f7:79:60:04:f6:33:2b:
81:a8:21:f7:44:00:f0:f3:47:b8:f0:97:98:1c:a2:81:2d:b4:
30:8d:e7:27:5c:8f:bc:dc:6d:f4:e3:d1:94:25:6a:a0:4c:34:
16:c2:b4:11:62:ae:e6:26:bd:75:cb:76:77:dd:2a:a1:b2:4e:
cf:b8:22:9e:63:fc:65:fa:e6:77:cf:a5:f5:b1:5b:c4:e4:10:
55:68:fc:23:ef:de:bb:d0:c2:80:52:6a:d8:33:8c:12:07:00:
65:5d:0c:1e:48:98:1e:02:09:4e:37:86:8d:45:f8:b3:0e:31:
90:35:2a:9d:56:a0:7b:f4:86:62:24:76:ba:e5:59:d2:91:63:
12:73:65:77:2e:f9:2b:f4:ba:89:a5:78:98:38:f5:4e:78:dc:
86:fd:e7:59:e0:2e:4c:c5:a0:da:37:b5:39:7b:20:84:7b:0c:
8c:0d:2c:3b:7a:a7:7e:54:0a:3a:5c:17:12:9a:e4:4d:30:8d:
f2:5a:06:f8:7c:4b:23:53:30:7b:c3:4f:eb:cb:66:00:66:62:
63:e6:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:10 2026 by rpki-client