Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: k79vwf0X3OMT2O43CoZQd3gyNFdUk2DsGfMiIwMNe9E=
Subject key identifier: 2A:33:65:DA:73:1B:C9:C0:56:36:49:9A:97:F7:D9:89:7F:7E:EE:57
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 019D39E5C7F37346E201C72D5889B934346B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0C2A
Signing time: Sun 29 Mar 2026 14:00:53 +0000
Manifest this update: Sun 29 Mar 2026 14:00:53 +0000
Manifest next update: Mon 30 Mar 2026 14:00:53 +0000
Files and hashes: 1: 8RN053bCakTRVXui6gfU_pQN-CU.roa (hash: /BriY1IgAGYn1GmZT5ixDLcg1lGG6kDvV6LZLM2uCJQ=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: 8qlsbBmlxV+gsMkJ42XmYBXG2EdR2zigchCXwgvH+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c7:f3:73:46:e2:01:c7:2d:58:89:b9:34:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Mar 29 14:00:53 2026 GMT
Not After : Mar 30 14:00:53 2026 GMT
Subject: CN=2a3365da731bc9c05636499a97f7d9897f7eee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:41:d3:98:77:b8:e1:30:b2:c0:13:0b:1e:
77:24:e0:ff:a0:22:06:42:07:88:7e:75:cb:49:81:
b4:9f:15:8c:5e:5d:19:72:b9:39:d3:dc:2c:b0:39:
2a:4b:76:fa:a4:27:b1:dc:06:d4:64:c8:db:75:1b:
39:db:67:24:a6:7a:4e:0f:c6:b7:41:8a:6e:55:67:
0f:38:34:84:08:98:1c:74:66:a3:a7:c5:ea:24:b6:
86:78:42:31:b0:a9:d2:83:5d:fb:ef:80:ad:60:dc:
cd:9b:92:24:f0:e6:39:85:62:68:7c:0b:de:52:44:
e7:ea:b9:37:eb:b7:fb:8d:50:fc:64:74:96:e6:f4:
0a:b2:cb:2a:7e:2a:83:eb:18:29:1a:0e:20:05:25:
43:45:5b:7f:54:7d:ae:17:bb:0f:f4:b7:e9:b9:b7:
41:a5:a9:7c:0b:86:d1:e4:90:4d:63:bb:31:8a:08:
b5:1a:c6:12:c1:b3:c7:51:ce:65:85:04:c7:d7:1e:
21:a9:70:60:05:3f:9c:96:87:5f:e5:5b:22:e4:92:
4c:74:34:38:29:2f:5d:12:b2:e8:72:a5:44:05:f0:
04:ea:2c:6c:d0:64:cc:f9:06:63:bb:8a:fa:01:ef:
0b:00:e2:14:93:48:b1:00:72:6d:2e:5f:4f:91:05:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:65:DA:73:1B:C9:C0:56:36:49:9A:97:F7:D9:89:7F:7E:EE:57
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9d:fd:6c:6d:c8:ad:ef:0c:96:05:fe:25:33:f4:c2:48:18:
33:e8:b1:d4:d5:a6:c4:f2:88:a6:fd:13:b6:28:2a:63:fb:64:
c4:0a:04:ff:de:72:53:fb:dc:3f:b0:a0:7a:95:e1:0a:4e:03:
31:68:9f:27:4b:13:67:20:1c:51:be:1a:0d:2f:a7:ea:f7:71:
6b:b8:46:40:cb:05:43:80:20:97:51:b9:2f:20:c8:fb:ee:d6:
e2:5b:ad:d4:82:06:cf:2e:1b:c0:ea:e4:eb:3f:18:0c:c1:2c:
ea:ae:fb:df:d6:69:48:90:49:f0:a7:df:22:8a:14:04:5e:10:
36:8b:04:d2:d6:de:7f:fd:b5:6e:d4:07:d3:32:47:9d:cc:39:
68:8a:d8:4d:6e:04:cf:26:09:0f:40:a2:0d:08:d4:88:00:91:
1a:c4:b2:6c:58:db:d7:a8:9c:69:bb:5f:52:63:90:04:52:06:
0c:08:6d:fa:2b:cf:19:ad:7f:55:a6:ce:27:6e:07:86:1a:9e:
80:4f:66:7c:1a:82:ee:f4:a9:8d:32:90:87:97:1b:d2:cc:36:
59:b8:13:76:09:de:c7:08:04:97:da:f0:cc:a0:78:fc:af:b5:
6b:12:2a:17:a8:85:e5:5b:36:e9:b0:54:30:6b:d8:2d:27:d9:
fd:80:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:15 2026 by rpki-client