Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: 1i4193yyValWsn53+XBBcVXR0yXt25tuD6m95vWGuQI=
Subject key identifier: 8E:A5:ED:55:C8:43:9C:1B:8A:4A:25:7B:89:81:8A:1B:90:54:C8:26
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 019D389C25279AD5546F91F176272D5CCB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 16AC
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: RiT1T6npNSXEXd8fhbHiM4637q0.roa (hash: NHkdWxbHLzyfPJ1mnvKUICI3ejIRSL1dMC4QU4Yd+Ig=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: brJDEHV3Rmoeu6R0aA+jF63WfiTlwRD5Mi+uFKGwHRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:25:27:9a:d5:54:6f:91:f1:76:27:2d:5c:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=8ea5ed55c8439c1b8a4a257b89818a1b9054c826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:a4:3f:06:b8:83:dd:b0:4c:e5:e2:cb:87:
40:e4:7d:da:1e:88:55:96:9f:16:30:88:e9:bb:9e:
da:c3:a7:2f:bb:67:0a:d1:35:8e:79:ed:36:0d:c3:
b6:e0:a5:5f:1a:6d:bf:73:db:8c:32:95:8d:53:72:
d3:f8:44:21:7c:09:d8:c2:92:3e:1b:d4:5e:55:88:
72:c8:01:13:ba:ed:b3:b9:3e:51:bd:48:80:d5:4c:
6b:9c:1c:df:11:38:62:f7:d9:e1:36:97:ea:16:bb:
96:96:dd:28:3e:fe:88:20:15:54:f5:35:05:cb:1d:
30:bd:be:ee:04:82:e6:b4:4f:f4:69:2b:c9:c1:3a:
e6:8d:9c:40:99:17:ce:a9:39:2c:e2:5f:99:9e:90:
e9:9b:04:d5:91:d1:67:dc:33:be:41:40:d1:e4:f1:
ef:87:7d:82:2b:c7:9b:e5:a7:8f:ca:1e:3e:02:c3:
3a:8c:db:b0:f4:5a:05:f7:8a:fe:d9:fc:c1:2a:98:
19:6d:d7:34:05:69:9c:03:51:25:9a:18:b3:1a:9a:
83:d0:7a:e9:f5:b7:3a:7e:a5:84:31:77:90:65:ef:
35:e7:4a:fa:b0:6c:7f:7e:06:37:c5:51:ff:8c:86:
05:8a:d7:a2:33:90:ac:d9:c9:8a:89:3f:48:ea:05:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:ED:55:C8:43:9C:1B:8A:4A:25:7B:89:81:8A:1B:90:54:C8:26
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bf:15:b8:a6:5f:2b:99:92:9b:13:76:d1:6c:d9:9e:5b:07:
cc:5d:68:30:28:c5:6b:99:e0:82:5e:38:5f:ba:e3:9b:5a:7f:
9b:a9:32:fa:f3:5c:14:76:5d:01:cb:7b:fd:f5:3f:b8:33:75:
8b:15:9b:88:23:ed:f8:50:d4:0b:f7:a2:44:a4:9a:47:9c:07:
51:46:26:12:09:47:f9:d4:3a:5a:e0:8e:31:08:13:1e:08:75:
01:99:37:94:9e:3e:f3:e0:57:ec:a6:3b:75:92:05:c8:5b:96:
c2:57:81:cb:0b:9b:97:67:7c:c3:13:81:19:fe:e8:81:d5:73:
2e:6a:8a:7b:17:7f:3d:6a:14:1e:b9:2a:80:17:a5:c6:35:ad:
17:1f:d6:5b:4c:e5:92:71:54:4b:83:cc:45:30:25:6b:32:6b:
d9:93:8e:e5:aa:29:25:57:9e:ad:40:2f:96:10:2b:ca:8b:c5:
c9:69:26:c6:b6:bf:ca:3c:a8:04:97:f8:41:5a:3e:53:df:fe:
9a:d8:61:f2:23:fe:90:13:3d:ce:fd:48:c3:e8:1f:6f:d9:31:
51:6c:47:ab:1b:0b:6c:5c:6d:b5:d2:7d:9c:69:ec:d3:6d:86:
33:8f:54:db:d9:b6:1c:ca:0c:94:e8:0d:0a:1e:e7:e7:4e:0a:
63:d7:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:02 2026 by rpki-client