Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: nf549WEO8hp9eTVkuwIz9kihn58MZ28LG919EXnosUM=
Subject key identifier: F6:1B:ED:B8:D0:70:9A:1F:B3:7A:D4:EC:24:1A:78:A2:0C:D6:0B:C1
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 019D38D3327DA20A1032F5A56304E8BEE59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 141F
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: oPqvP0HqC3JLyUGzmfL2RqFLeOGw7jhcHFPJdsZ8EcU=)
2: zUQMp2BeSBKunWgSe9fmXZ9CuM0.roa (hash: GLAv3FngiNtDzlOEO79T42UrwsCvy0RXElAoeNFPOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:32:7d:a2:0a:10:32:f5:a5:63:04:e8:be:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=f61bedb8d0709a1fb37ad4ec241a78a20cd60bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:6e:06:8d:ed:df:f9:f5:fb:ad:ec:3e:e7:
fa:6f:f5:2f:26:3a:9c:c3:33:85:b7:8f:67:f5:a2:
06:6e:5b:3d:24:a7:59:54:0a:ea:6e:5f:31:a3:05:
7d:26:21:7e:a7:f1:d8:e7:32:2a:df:c7:3a:d9:19:
7c:74:49:fa:3d:4c:a9:31:e6:b0:aa:ca:10:67:97:
4e:25:8b:2a:ff:5b:c4:aa:76:92:32:80:d3:12:a9:
cc:bc:9d:a4:06:80:40:26:04:74:c8:4d:1d:67:49:
3b:f4:08:fb:fc:e9:fc:8a:06:be:2d:e9:29:95:e5:
b4:bf:ab:22:e2:da:69:66:88:c6:f8:43:ee:ea:94:
f2:f4:06:97:94:c7:cc:91:63:4c:66:3f:4c:1b:05:
e4:8f:75:48:32:9d:f5:f9:a9:d8:61:cf:f4:db:4a:
ae:bf:47:59:46:ed:85:39:f0:cc:bf:b0:06:b4:94:
31:73:a4:8c:27:24:60:96:f1:8f:ef:f6:09:26:b9:
15:a7:9d:6f:25:1f:87:d3:6b:c7:c6:9f:91:00:45:
82:8e:a3:27:e1:b3:66:7c:c6:63:f5:e7:de:58:0f:
d7:c9:db:fa:94:0c:43:f7:48:06:e1:ab:d5:c9:96:
98:78:ed:11:e1:f0:7c:f0:b3:d4:d6:60:3e:fd:f6:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:ED:B8:D0:70:9A:1F:B3:7A:D4:EC:24:1A:78:A2:0C:D6:0B:C1
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:b8:8e:63:41:08:c9:b3:39:a1:41:3e:f1:65:53:f7:a4:
c0:05:e5:fb:cc:95:55:82:9b:89:86:79:02:97:73:c3:25:db:
c3:0c:35:3d:86:17:b1:ee:dd:91:c7:d9:ac:ea:4a:bb:1d:11:
8f:ae:06:94:53:40:51:f9:24:58:46:c9:35:07:2f:88:8c:22:
6a:26:9a:81:72:4b:e0:6c:9f:1d:06:16:bb:91:9c:d9:8d:75:
22:a0:cc:0f:48:e1:57:26:79:b9:0b:b4:71:5f:c0:37:00:1a:
65:72:69:e8:56:90:a1:64:57:6d:8a:49:65:24:60:80:19:11:
d8:57:21:54:b4:31:d4:3d:30:5b:29:35:27:98:24:94:30:be:
61:ad:8b:61:5b:0c:ca:53:6e:ad:5b:4d:bf:2d:0c:f4:6c:36:
29:3c:16:8a:41:1d:97:9c:58:7e:f1:84:71:a4:42:3e:76:cc:
c2:4e:13:30:49:de:86:39:a2:af:7d:c7:4e:0e:81:ef:51:92:
e9:2b:a8:54:72:34:25:ed:99:c5:cf:c3:c1:82:83:de:ba:bd:
51:52:8b:7a:f3:60:55:43:eb:7d:89:e9:a7:5d:8f:dd:89:e1:
e6:cd:61:4f:95:99:dd:ab:d8:02:e5:f6:b5:74:41:b8:a1:52:
1e:0e:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:48 2026 by rpki-client