Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: XxonM6Rx7u8UQgco6SgiIPjBFt7LlseOoDMjX28I0Rg=
Subject key identifier: AF:CB:A3:0E:9C:A4:FC:6D:D3:3D:EE:AE:F7:F5:C6:18:1F:EE:99:39
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019D378976CEEBF27E5C26D5322D48A52AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 113D
Signing time: Sun 29 Mar 2026 03:00:48 +0000
Manifest this update: Sun 29 Mar 2026 03:00:48 +0000
Manifest next update: Mon 30 Mar 2026 03:00:48 +0000
Files and hashes: 1: ercPbtahy3f9eM5GSzohbTGgqsw.roa (hash: 6i0HSVm0VOwA3Kxo8s7D20nC5SFv01ATtGPCU/ddYG0=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: ChSdvGVBcXPYje2Ow0Ru+YQGcthrBlpbbc07lxyql3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:76:ce:eb:f2:7e:5c:26:d5:32:2d:48:a5:2a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Mar 29 03:00:48 2026 GMT
Not After : Mar 30 03:00:48 2026 GMT
Subject: CN=afcba30e9ca4fc6dd33deeaef7f5c6181fee9939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:39:7a:2c:0c:65:76:00:b1:9c:ff:53:9c:
bf:66:dd:01:dd:1a:50:01:19:99:d3:9c:1d:ee:54:
78:d7:2a:e0:ae:44:cb:92:2f:83:13:43:08:e5:ee:
e4:90:d3:5f:d5:f5:e6:73:66:94:f5:a5:40:50:d8:
5f:db:48:fb:5e:41:f1:42:bb:77:56:e8:5a:41:6f:
e7:35:21:ac:24:6f:42:34:f2:3c:85:44:19:e2:5f:
78:08:27:f6:d9:15:66:ea:96:2d:e9:ef:ca:21:be:
a2:d7:0a:47:ef:06:50:5f:26:9c:f9:36:e9:83:5c:
cc:51:37:b8:67:10:51:14:0c:d1:c3:7b:d9:cc:63:
77:bd:18:d8:a8:97:5e:67:a3:84:bb:be:c8:f4:c6:
e5:7f:7f:cd:56:42:5b:1c:be:da:06:fd:51:9c:4f:
d1:f2:62:39:63:57:ae:12:52:47:79:0b:7a:0b:94:
97:2a:79:69:3e:51:2e:f6:b4:0c:af:c6:52:e6:10:
b4:a1:57:47:5b:ce:fb:6b:f9:92:91:ca:5d:d1:04:
d8:0b:cb:99:0f:40:10:55:5e:74:34:9f:6f:16:09:
c9:1a:df:57:ae:1a:a7:59:9d:fe:d4:bd:54:cf:ec:
7f:79:e9:d5:1a:50:9d:02:07:73:89:9e:0c:c4:85:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:A3:0E:9C:A4:FC:6D:D3:3D:EE:AE:F7:F5:C6:18:1F:EE:99:39
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:f5:02:85:25:61:30:a8:9f:61:e4:92:96:b9:83:d2:d2:
c7:30:69:b8:bc:ae:b8:b2:30:33:d7:71:9b:04:cc:4a:d5:8a:
7d:5a:30:a0:73:b8:0b:75:71:89:37:dc:84:56:40:9d:3d:33:
0a:12:96:af:33:68:8d:ec:32:cc:d9:c4:63:c8:44:be:70:d0:
42:a0:36:06:14:f2:73:65:96:26:51:d2:6a:21:c6:44:b3:a7:
91:b1:84:77:25:06:f5:df:ef:5d:91:79:18:8b:2a:e2:4c:2f:
ba:83:a3:d8:68:74:66:b0:d1:1c:7e:04:d3:82:30:d8:31:21:
d0:c2:6e:21:71:64:d8:e3:33:fb:b1:93:45:ed:b7:34:75:ef:
9d:f3:23:41:c0:3a:d9:d1:c4:c9:8e:9e:ea:59:ad:ef:b4:21:
70:44:cb:62:51:26:f9:98:d2:6e:07:23:3a:06:e4:3a:bd:a9:
13:86:52:19:21:b2:d7:97:78:2d:b3:1c:4e:9c:0a:0f:49:8f:
55:bb:6d:a1:b3:12:7c:d8:61:85:65:20:65:a8:0a:ac:96:70:
aa:e3:84:68:41:24:20:21:6c:cd:b5:1a:7f:b0:e2:ee:a0:0d:
19:8d:8e:82:ab:96:30:cb:0d:81:24:b5:3c:e4:22:a0:36:60:
47:36:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:57 2026 by rpki-client