Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: barOLB2aJByM8ck0Nt/tBfpLG5nHpDMyiF6IFmxoAIo=
Subject key identifier: 84:A3:62:42:30:75:F7:92:44:4D:B4:1A:94:1E:53:E1:59:C3:2B:09
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019D371B9FDB816ED877A2653DB445A76140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 7EC9e3Q1syHtJogPn6wqrfKHckzJDAXFmOHgEUs9zE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9f:db:81:6e:d8:77:a2:65:3d:b4:45:a7:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=84a362423075f792444db41a941e53e159c32b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:08:d3:f1:71:1d:92:be:f2:bb:8f:ec:c3:
83:91:e0:e6:25:bf:93:58:21:a2:39:11:a3:48:a0:
2a:91:76:37:dd:2b:95:d1:f1:23:ec:e3:cd:fa:cb:
14:de:74:19:26:d1:60:26:ce:9b:e9:93:af:3c:6d:
b4:6d:e2:53:19:a6:fa:60:30:15:f9:05:95:13:40:
b2:7e:5c:c6:54:6e:44:28:62:13:7d:5f:86:c5:fa:
b2:7f:1a:f5:e3:de:d5:2b:47:e8:86:13:58:cc:af:
e5:f3:20:b3:61:cd:cf:a1:b5:b2:05:2e:5f:1a:ea:
84:77:0c:f5:8f:ef:8c:ce:a6:57:cd:6b:ea:e6:f6:
e3:8a:04:ac:3f:e0:43:f5:ad:eb:c3:85:6f:41:39:
a8:e7:f1:3e:5f:3c:d2:77:35:25:2c:12:8d:d3:6c:
15:5b:c2:e5:7e:32:b2:7c:12:df:e1:c4:65:60:56:
53:d9:25:fb:b5:60:cd:b3:ab:17:c6:64:e9:57:a2:
40:cd:77:81:6b:b2:9e:89:45:12:06:1c:a9:6f:3f:
3f:f3:15:24:26:b3:e2:16:fc:01:19:4c:d6:30:46:
56:85:cb:a2:6d:ec:20:47:3a:88:bb:de:a7:51:45:
95:0d:70:17:a6:34:ec:6b:5c:ba:81:81:fd:54:55:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:62:42:30:75:F7:92:44:4D:B4:1A:94:1E:53:E1:59:C3:2B:09
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:41:5d:d1:33:6d:97:04:f2:18:e8:6f:ea:3d:96:e0:e5:
40:7b:2c:e9:71:24:6e:91:7f:33:2d:05:ab:40:80:29:39:f7:
da:87:98:7f:32:12:e1:3c:30:52:34:24:74:db:a5:fa:e0:a4:
6d:90:f8:85:10:dc:f8:62:b9:96:34:b9:f3:ba:6f:eb:fd:c5:
e8:d4:47:72:6a:62:e1:77:11:21:73:0a:ce:2f:d8:75:50:75:
4d:4d:22:a9:2d:a0:da:89:ad:cd:e5:3a:39:fb:f3:0f:e2:28:
2c:98:2f:c8:6d:16:72:26:e1:4b:1e:db:26:e8:20:90:9a:db:
53:e0:45:04:ad:b4:b8:ef:23:9d:db:54:70:90:9a:2e:cd:88:
65:1a:8a:a7:3a:cf:9f:39:f0:6a:d2:12:1f:a3:03:92:44:6c:
22:84:d1:97:31:e6:79:74:4e:e0:2d:dd:f4:bf:72:9a:1c:63:
37:a5:97:e7:f8:ac:ab:58:37:dc:65:28:c9:38:e2:68:0b:25:
9e:e7:f1:30:47:e0:3f:91:e6:8d:21:7e:ed:33:0a:15:0f:b9:
2c:13:99:3c:cc:3a:9f:19:9b:12:f4:94:af:9f:bd:0d:f7:28:
d2:5a:0f:d9:af:c6:29:8f:8b:c2:18:3c:fb:a4:f5:86:b6:49:
e6:f4:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client