Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: aHG69rZ2U7c7E9SC4uEzzGw3ij0mQFyT7b+Y2ztntKU=
Subject key identifier: C2:47:DE:14:DE:68:45:3D:35:2A:F9:EF:25:7C:C7:4E:E1:C7:49:75
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019D382DEF7BEA46A1B796179F6923B72DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0F1E
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (hash: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: vo4wfLfxna/fbP9H1aPOo13BfhFHTKEJyXJn3+7VzlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ef:7b:ea:46:a1:b7:96:17:9f:69:23:b7:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=c247de14de68453d352af9ef257cc74ee1c74975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:aa:95:59:09:48:e1:0d:a4:17:03:2c:90:
78:be:27:d0:d9:1e:9d:2f:94:c2:78:45:ed:06:cf:
09:dc:c4:d7:83:13:e7:2c:5e:e2:2e:3b:de:fd:bc:
81:75:ce:c6:cb:75:e6:a6:61:da:40:61:fb:8e:83:
f0:2c:48:b9:02:c6:75:42:cb:6e:1a:4b:cf:2f:44:
4f:ef:2f:36:f2:50:b8:6b:46:4f:2c:19:32:d2:18:
93:82:ab:a3:99:0d:7a:43:33:a9:e0:c2:f7:6f:8a:
f8:0b:83:74:a4:f6:ae:8b:22:b8:2a:28:f7:8f:a5:
ed:df:46:61:38:de:a5:31:0c:c6:e7:30:a1:5f:fb:
ae:cd:38:ad:89:f5:e2:52:bc:ea:28:3f:a1:8a:3d:
e6:b2:58:42:09:aa:e8:e6:35:41:07:ac:42:09:e3:
c8:6b:15:1e:5e:9f:eb:05:01:36:df:af:0b:56:6f:
ab:ec:63:7c:61:99:ad:3b:09:7d:f5:b5:5c:e4:5e:
fd:39:dc:b5:2a:0c:1d:bb:35:6e:8c:66:07:51:14:
4d:38:7f:f0:39:3e:41:43:24:37:fa:4e:d1:d4:c0:
ba:89:a1:be:40:54:3a:e0:aa:fb:14:72:95:96:92:
41:d8:41:82:9e:95:5e:ce:d4:a0:eb:e3:1e:06:f1:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:DE:14:DE:68:45:3D:35:2A:F9:EF:25:7C:C7:4E:E1:C7:49:75
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4b:14:c7:85:fc:98:87:57:a7:e2:de:8b:66:05:4b:ef:23:
ec:13:9f:a3:95:6c:93:0a:b7:54:55:cd:f1:d2:36:62:01:54:
65:2c:2b:46:b0:6d:1f:22:1e:b5:d3:c0:cb:44:6e:c3:1d:17:
2f:79:0c:52:5f:eb:60:7c:1c:1a:58:82:3c:74:13:b0:44:66:
cd:29:c9:58:bc:f5:c7:ee:00:03:ae:b7:dd:28:5f:59:bb:31:
69:6c:a5:a2:15:7f:85:4b:33:94:76:cd:b3:23:8d:e4:8c:55:
4e:db:7c:79:01:f1:68:b4:81:e2:7b:7e:c3:9e:8f:c4:d4:25:
e5:c0:a8:4c:28:b6:29:a6:4e:0e:ea:11:5e:59:90:7b:76:2c:
59:28:cf:0d:0a:7b:1f:dd:3f:42:ae:44:1a:9b:5a:57:9b:f0:
a3:a6:21:23:99:c8:0a:b1:c9:b8:56:12:25:8d:e2:8c:2e:71:
6e:e5:6a:96:9a:9c:95:f3:dd:b7:13:36:b8:3a:1b:d2:38:ad:
e6:5b:d3:73:64:42:3f:33:61:95:b9:39:53:10:e4:a4:d7:53:
ad:f4:0b:56:f2:01:0f:9b:c4:0e:39:c1:b6:57:a7:f4:88:50:
d7:22:63:e1:d1:e0:38:fb:6a:f3:e1:aa:02:fc:1f:53:11:5b:
ff:78:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:49 2026 by rpki-client