Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: mCo6DScSK6yYgYWq1Vg8zgvBnezvw+M8NJ8IFyOVyrc=
Subject key identifier: 31:FD:12:94:70:C0:EB:27:43:56:2A:45:72:61:B1:67:29:17:59:C9
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 019CECA62F72B147D8E95F343799B8422957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 046E
Signing time: Sat 14 Mar 2026 14:00:39 +0000
Manifest this update: Sat 14 Mar 2026 14:00:39 +0000
Manifest next update: Sun 15 Mar 2026 14:00:39 +0000
Files and hashes: 1: m8AA96uOHjGk-TGHS6ELVd8Zd-8.roa (hash: KzO3KLMfqTnrwpPiduDo1bAht73kSS22uwNrZN+bB0Q=)
2: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: ESLnUXg83VsB/3Oi2WyTCzXTODfBI7sPa4rmclqaXQI=)
3: tYiu9GmgmRQE0mtTTEACFf7CReM.roa (hash: kV8oONMqJV8h3wORb9Oq/koiMMhAYOJ2nauWTTLAmn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:2f:72:b1:47:d8:e9:5f:34:37:99:b8:42:29:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Mar 14 14:00:39 2026 GMT
Not After : Mar 15 14:00:39 2026 GMT
Subject: CN=31fd129470c0eb2743562a457261b167291759c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:bb:c6:de:45:77:e7:e8:2f:9c:c2:1b:17:
f6:2d:1b:76:04:95:76:92:68:9b:8f:7b:43:e9:95:
7c:08:1e:f7:c8:46:72:bd:99:18:da:7d:c4:f0:25:
39:e8:df:26:f8:bb:79:42:18:dd:77:13:64:27:0d:
af:4d:b9:bd:e2:f6:32:44:6d:b4:4f:da:ac:1f:98:
53:02:54:73:19:75:70:6b:f8:48:83:40:79:83:c0:
be:ae:b5:0f:44:c0:8e:10:4d:72:59:65:c2:98:c3:
67:5c:77:b8:f2:9d:db:d2:d7:a2:11:3a:05:39:4c:
ee:0b:70:ee:eb:dd:9b:87:c2:1b:dd:b0:f2:02:9c:
30:b1:ff:29:0c:27:f5:3d:21:08:b9:2c:7c:fa:f4:
7f:31:60:2b:e0:1a:0b:43:a2:01:5b:f8:96:22:59:
c0:bd:d6:75:ea:69:b6:3b:4a:de:2c:f6:ee:6f:31:
c3:5f:17:c9:0e:fc:e6:04:24:e9:15:77:f4:e4:94:
c2:76:32:96:ff:8f:51:fb:14:75:51:6f:97:bd:49:
ca:a1:1d:5a:2c:fa:65:02:0c:a2:bb:bd:25:fa:77:
3e:a1:b4:5d:bb:3b:06:cd:73:52:22:64:72:c9:44:
74:55:18:0a:ae:7a:d2:26:56:1f:18:e8:a2:4b:ab:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:12:94:70:C0:EB:27:43:56:2A:45:72:61:B1:67:29:17:59:C9
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:89:08:8d:8f:ed:db:56:02:18:cf:9b:a8:5f:20:7d:ae:83:
fa:33:0e:3f:76:13:27:a6:b2:6b:85:8c:1e:4a:cc:32:e2:28:
2e:2f:29:9c:4d:01:fc:66:cb:ea:d3:a7:82:da:a8:91:b4:e3:
66:d2:06:98:18:42:47:48:97:5c:10:65:81:a2:83:69:72:36:
11:42:6a:f3:7c:0e:cd:cb:c5:94:b4:d8:25:e3:d5:1c:e2:32:
ab:2a:5d:84:cd:98:39:fd:8a:12:5f:7d:97:29:13:bb:23:82:
9d:e3:70:c4:2f:c8:27:da:be:79:f6:6f:48:12:62:0c:28:84:
bd:8a:e0:5a:13:b7:06:f9:a6:ea:ab:18:53:e0:57:b3:67:cf:
68:e8:7a:0e:e8:63:27:85:d9:07:60:56:fd:75:86:69:fa:e8:
8b:6f:cb:58:f4:9b:24:13:ca:02:8b:8b:b1:2b:81:79:86:5a:
28:4f:ea:f2:2e:2e:62:9a:26:e1:86:85:2d:3e:33:9e:56:7a:
d2:86:72:21:46:c6:12:37:91:20:14:e0:65:bd:e9:07:98:8c:
22:ba:c5:6e:79:69:12:72:8d:1b:ba:14:c8:87:22:6f:0a:6b:
3b:a6:7b:0a:67:c4:17:3b:0a:44:9a:98:5c:e1:bf:fa:bd:a7:
2c:59:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:20:47 2026 by rpki-client