Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: /vs1S25xY5d3wZ3h9phyvktpNuJ9RuEdZY+/VfsDlZE=
Subject key identifier: 0C:10:00:57:BD:5D:93:D6:CA:93:A6:49:1B:C5:64:88:22:4D:BC:20
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019D37C11A1E81E3B90AE709952D0FFBC2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 1006
Signing time: Sun 29 Mar 2026 04:01:35 +0000
Manifest this update: Sun 29 Mar 2026 04:01:35 +0000
Manifest next update: Mon 30 Mar 2026 04:01:35 +0000
Files and hashes: 1: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: mKGyJE+7b5iv5yILcWGMEB5u1Pl664QgQ+9z8OaQWmA=)
2: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (hash: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1a:1e:81:e3:b9:0a:e7:09:95:2d:0f:fb:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Mar 29 04:01:35 2026 GMT
Not After : Mar 30 04:01:35 2026 GMT
Subject: CN=0c100057bd5d93d6ca93a6491bc56488224dbc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:af:90:d7:cb:7a:1d:76:5c:97:23:51:41:
2e:6b:36:8a:73:ef:94:49:62:24:a9:0d:7a:c6:17:
10:1a:7d:7e:59:21:6e:5c:06:94:0d:2d:f7:50:f1:
7d:7c:61:c8:96:a9:a3:34:ab:6c:88:38:1d:ce:65:
ca:99:1b:1b:96:b0:04:be:68:06:e6:07:17:85:dc:
19:0f:93:58:5b:95:31:71:f8:20:1d:37:8c:21:da:
a7:08:80:e1:58:61:48:92:4c:9e:67:66:d3:7e:69:
84:66:07:5e:0f:a4:73:61:0e:d3:59:31:a8:3c:c5:
09:84:1f:cb:ed:56:97:76:8b:2d:e4:06:24:c6:e5:
3e:6c:37:b2:21:0b:a5:9a:b2:22:00:4a:f5:0e:b6:
f0:9a:d3:68:ec:10:ab:5a:b3:6c:ec:f7:c2:c0:cc:
ba:d5:4b:be:13:a8:5f:e8:27:e1:39:14:f5:d2:20:
96:75:f3:e5:87:2c:5f:e3:d0:62:8d:cd:9a:eb:a5:
b7:b1:72:21:17:c8:4a:a9:6a:d1:31:38:61:e1:e9:
65:c7:37:da:9a:31:8d:a5:9e:f4:fd:0e:4c:22:dd:
c3:e5:94:dd:ec:f2:5c:a8:d4:41:e3:13:9f:e7:cc:
04:80:3c:54:29:b0:26:03:91:15:9f:d0:ec:02:c4:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:00:57:BD:5D:93:D6:CA:93:A6:49:1B:C5:64:88:22:4D:BC:20
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:86:a2:84:fc:b6:5e:b2:9c:64:69:bd:8c:3b:3a:28:94:3b:
ac:dc:e3:85:99:01:00:9f:3f:db:f6:7a:94:94:ca:fa:bb:54:
b4:8c:3e:2e:53:91:3b:bc:7e:08:61:80:8c:23:5c:a5:e5:12:
ed:6f:61:74:91:c5:48:90:21:ed:31:ae:99:50:52:38:db:ac:
20:80:e2:cd:11:48:b3:db:2e:88:58:2a:be:0b:0f:32:df:c3:
f8:72:c1:2a:cb:ae:90:69:26:1d:fc:97:63:0f:9b:a8:91:d0:
0e:84:cd:26:d8:8f:68:64:39:88:23:60:e1:39:fe:d0:cb:ae:
57:93:90:0f:53:b1:7a:7d:d0:f9:e0:b1:20:b2:6f:33:7e:1e:
78:e3:77:af:2c:90:a2:fc:c6:73:c8:93:e0:96:17:31:17:bc:
8f:1f:a7:87:8c:46:cf:7a:35:e4:ed:7b:cf:24:36:0b:71:46:
60:a2:5e:1d:97:6a:d7:e4:a5:6d:1d:50:26:f4:45:9c:1a:ed:
93:8b:e0:ab:0b:3b:bb:41:1a:d5:86:7a:79:aa:a6:1d:b8:f3:
67:db:eb:80:f7:c3:a1:a9:09:4a:0e:3b:1b:5f:fe:85:ad:52:
53:e6:85:60:5a:4f:79:f2:15:16:83:69:f7:ab:ad:9f:7e:54:
85:f3:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:31 2026 by rpki-client