Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: GrTbh8yzmArhQ25gkFY+3q9tx5uxX+m4JA5M5nec2is=
Subject key identifier: 33:10:0A:A5:D0:4E:91:0D:34:48:36:81:3C:DB:AE:3A:31:CB:A0:7F
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019D382DEB20D2AE8D08FD15BF0DBFA8716D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0F21
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa (hash: PwX6Qj+/Hw67w92aS4xQ86nPtQ/6Nm2w8w8MnwiNUKI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: PRmR3PDhXlO2Q/sRV5BrAEy/74Er4v9beD3Lzp46Gyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:eb:20:d2:ae:8d:08:fd:15:bf:0d:bf:a8:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=33100aa5d04e910d344836813cdbae3a31cba07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:5c:87:53:fc:4a:06:8b:64:57:b6:c3:64:
8b:09:bd:ba:6e:40:9f:34:86:e7:8a:15:e4:5f:ad:
68:e8:8d:b2:de:c4:1e:f8:94:e6:1b:df:c1:3f:bc:
a1:55:da:6e:48:f9:d6:2c:9b:d7:af:5b:d3:b5:3c:
f7:87:36:60:81:1d:46:e8:ce:04:41:6b:1b:d8:ee:
78:1a:6e:95:43:9e:f2:e7:4a:14:ec:4c:23:92:40:
9d:a6:a5:7a:a6:0a:2f:d2:c7:ed:0f:f9:cb:a1:f3:
bb:fd:86:be:d3:b3:54:e5:1e:07:2f:06:b9:99:44:
b4:1d:3e:5c:20:d4:85:2e:68:cb:6f:55:5d:24:b3:
80:82:6b:8f:a1:13:bf:d0:1e:48:4e:12:5a:e1:23:
22:fd:75:08:c7:e1:ba:48:3d:14:20:07:d8:aa:a0:
4e:4d:21:0a:e2:cc:74:71:d6:cd:59:b7:9e:a8:dc:
27:ae:1e:fc:9c:b7:3f:db:2f:c7:0f:1f:d6:22:89:
db:fe:fb:95:22:80:b4:91:1b:ec:96:3b:e2:45:63:
4c:b3:81:f4:7e:54:43:ce:cd:ed:e3:3a:e3:b6:f2:
53:41:9f:24:4b:a1:33:cd:ef:01:02:48:f3:09:52:
72:d6:df:06:94:22:35:11:e7:63:f6:0c:cf:ec:25:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:0A:A5:D0:4E:91:0D:34:48:36:81:3C:DB:AE:3A:31:CB:A0:7F
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:b3:41:96:52:8e:af:fc:04:ee:01:bc:2b:ea:03:c6:84:
6e:d3:d9:b3:f4:3e:3a:4b:52:ee:8e:98:77:c1:65:7b:6f:e7:
96:4b:25:16:cd:96:dc:54:e1:ca:33:b7:72:74:b0:1d:a0:66:
e2:a6:c7:d7:ca:2a:62:4a:d4:f4:94:d7:d5:47:3a:c0:72:6c:
cb:2d:e1:c6:cb:95:25:4e:f2:57:0f:6a:7e:5e:73:6d:50:ef:
d7:6e:2d:4c:f8:a8:9a:b5:21:14:70:65:ad:4c:70:9b:ec:5f:
0b:68:c9:ba:7d:1b:ea:37:e6:c0:0e:6f:1d:38:56:8b:7f:cd:
69:fd:6f:5e:8e:8b:eb:44:4e:8e:a7:36:79:73:1e:7e:9f:ef:
db:a9:66:b1:8e:42:92:05:f2:dd:ab:a3:18:e2:0a:4a:61:c1:
f2:14:82:6d:cd:a8:73:dc:81:97:c4:40:1b:d2:8d:a9:f1:01:
ab:46:a7:ac:97:80:4e:d6:3b:8e:34:a1:a2:82:57:ea:60:7c:
b3:7c:9d:71:79:7a:f9:8f:d2:a6:f0:1c:5c:77:5d:4d:b6:b7:
a8:16:c9:1d:f4:af:71:6d:b5:fc:1f:f3:7b:71:ad:81:98:15:
27:f0:30:69:84:64:c8:27:43:4f:01:fa:1b:66:14:c7:2d:cd:
99:08:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:29 2026 by rpki-client