Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: +Cgxzx7VgJZXrPut6fxwDvRwn86MJXzHtGgQtBsEEzU=
Subject key identifier: C3:CA:81:82:7D:D5:B0:0D:05:9F:0B:EF:A1:92:35:25:A1:60:D5:68
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 019D389BE3184078B82D2E002219B9201F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: HYaYWiPUwPT0J3PigGh4W9Dq_LE.roa (hash: p4mpafcbeyykks8+AH1sHGrQUM/Z36qBp4nJtDWe3lI=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: ++4T50zYROaHbyaMc78XD5nC0Zd83EOUWfKOJsQgNoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e3:18:40:78:b8:2d:2e:00:22:19:b9:20:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=c3ca81827dd5b00d059f0befa1923525a160d568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:27:d6:c1:00:3b:13:21:a5:cf:a1:46:c9:
04:fb:a9:12:40:cd:3e:da:af:87:3a:31:2f:21:20:
1b:1c:2b:4e:cf:c1:22:54:6a:be:b8:67:a2:56:79:
76:54:4d:75:24:ad:10:7c:06:06:8b:d7:ce:0d:d5:
b3:77:ea:c1:60:01:87:28:8e:a6:63:aa:95:c2:66:
b2:b0:68:13:2c:74:30:ce:fc:33:0f:25:8e:21:d5:
48:e2:0d:7a:2c:7d:1a:c9:8c:b6:53:9b:47:07:76:
78:74:ff:95:6b:e4:05:9b:8a:f1:f2:67:c6:25:19:
2c:86:3e:0f:7c:03:f4:19:02:7a:88:99:de:8a:eb:
d9:3f:68:13:34:0f:9d:49:1d:be:81:c9:ff:3f:ca:
2c:8f:6a:2e:f5:1c:7b:ca:83:29:50:03:84:0b:af:
5f:7f:8e:52:a1:96:2b:f5:a4:3f:fe:59:06:af:51:
bf:b3:73:9f:8f:34:1e:dd:21:54:4b:8f:25:bb:f2:
16:1b:dc:17:de:3d:4b:14:3f:dc:c7:70:b9:64:f9:
62:9f:b1:fe:89:71:f9:f5:08:e2:2a:6b:d2:f0:1f:
ce:32:9c:6f:d3:16:07:51:3e:0a:09:bd:df:d2:87:
ad:b0:63:9d:6e:0f:8f:6b:5a:d7:dc:ad:c9:3e:32:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:81:82:7D:D5:B0:0D:05:9F:0B:EF:A1:92:35:25:A1:60:D5:68
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:30:6c:cf:90:8a:36:ac:59:1f:ba:49:3a:a1:9c:a5:1d:
ca:0d:8e:9f:0b:b0:35:81:a7:be:19:04:b5:98:dd:a5:c0:6d:
12:92:21:ba:08:e0:f6:24:2a:35:ba:8d:c4:f3:c5:d3:b3:c8:
12:cf:0e:04:99:94:27:80:4f:63:71:2b:e9:ce:dc:1f:58:44:
60:e9:3c:bf:d8:b2:61:1c:5e:f4:60:ec:4c:2e:ff:2b:20:37:
7b:81:96:42:2b:c9:6e:85:ed:2c:5c:e5:1d:9a:7e:29:9e:39:
0d:42:62:f9:4d:d9:0a:41:35:bc:66:96:91:fb:c9:a8:3c:f5:
32:86:97:4c:72:70:91:23:10:40:18:dc:60:82:75:1a:04:ff:
58:b3:64:bd:3d:c3:ac:62:3e:84:55:5c:00:65:79:cf:f7:95:
bf:86:43:57:61:6f:97:5b:32:01:41:35:b1:40:1d:65:f8:6b:
18:67:22:51:40:2f:d5:e7:75:8a:ec:87:5b:c3:04:28:28:c7:
d2:7c:6d:e1:79:e6:fc:73:e3:ba:7a:23:16:c1:18:13:fa:26:
2c:d7:4c:66:08:a2:be:15:e3:03:cf:77:55:ee:92:8c:f3:3e:
33:ae:0d:5d:e0:f3:11:8c:9a:25:1b:cc:9c:ec:a9:72:53:3e:
df:7a:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:46 2026 by rpki-client