Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: 8IvO3dWZW18I9oi26a8q2BfXImy4Pd0QYtruMpCuEb0=
Subject key identifier: 62:A7:8E:B4:F3:6F:1A:6E:48:3F:2E:4B:15:53:4A:98:71:01:28:26
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019D3C78D51E1B951FE49494A4C179324AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 084F
Signing time: Mon 30 Mar 2026 02:00:44 +0000
Manifest this update: Mon 30 Mar 2026 02:00:44 +0000
Manifest next update: Tue 31 Mar 2026 02:00:44 +0000
Files and hashes: 1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: 1kxro5LFU5DH9Y7c4Y4JNYzBc+N/SI6l40egmxLXaHg=)
3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:78:d5:1e:1b:95:1f:e4:94:94:a4:c1:79:32:4a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Mar 30 02:00:44 2026 GMT
Not After : Mar 31 02:00:44 2026 GMT
Subject: CN=62a78eb4f36f1a6e483f2e4b15534a9871012826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:b9:79:cc:8f:0f:00:b9:47:9d:a4:68:6b:
a0:d3:2d:d9:c4:39:4e:13:b0:27:de:d9:b5:98:8f:
e2:e5:58:ca:65:fb:8e:dd:37:a0:32:ac:93:cc:50:
20:cb:27:b4:83:08:6f:53:54:b3:c9:99:ea:6f:21:
5e:90:9f:a2:09:87:fa:4e:9b:b6:39:36:e1:d3:b4:
46:f0:6b:f6:e8:71:61:39:39:84:77:70:77:d0:52:
1c:cb:df:4c:9a:fa:e0:f3:bb:28:a3:c8:4b:94:62:
ff:bb:3c:f1:87:f9:79:ca:83:70:12:d4:01:b5:22:
aa:8f:5d:eb:4b:18:5b:4f:5b:69:85:d0:dc:03:ed:
54:71:27:0a:50:32:fc:3e:37:45:f7:22:83:85:2a:
43:d9:d1:d8:f1:61:60:24:9a:b1:12:0b:d4:c3:21:
0d:d2:d6:95:27:e2:be:d3:ed:66:54:d2:be:0d:85:
b8:ba:e1:1c:ff:42:fe:11:98:ee:a6:8f:f0:39:c1:
53:38:49:ff:4d:fa:55:fb:27:96:09:ca:43:8d:0d:
6a:30:8e:45:29:1c:59:5d:98:9d:53:a6:7f:2d:9f:
a2:81:d3:2a:19:41:1a:b2:95:28:ee:24:0e:c0:ef:
ad:69:92:20:e6:d2:82:4d:5d:34:50:f0:88:a2:c3:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:8E:B4:F3:6F:1A:6E:48:3F:2E:4B:15:53:4A:98:71:01:28:26
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:91:12:0c:69:d2:b8:aa:49:a4:1d:ec:73:90:74:b7:9b:ce:
cf:ae:36:16:86:cd:f6:e0:33:32:ae:53:04:aa:63:5f:25:ee:
5e:72:78:e9:10:79:9c:6d:20:80:f7:8f:2f:bc:08:51:75:ba:
c4:24:05:27:ca:29:07:bf:6c:48:0e:68:cc:8f:ad:66:d5:84:
90:da:21:51:d2:01:82:76:92:f0:fd:00:32:a9:bf:40:08:90:
99:28:28:54:4d:d9:8b:7e:fd:e1:18:69:42:03:61:7b:b9:d9:
71:7c:2e:cf:6e:1e:7d:14:04:5d:83:ae:76:fd:3d:d9:62:c1:
06:42:ca:79:f3:4a:d8:c5:c6:75:17:14:9a:6d:37:6d:08:c4:
45:2b:af:fe:f8:cd:d2:08:d1:c1:90:5a:4c:74:2c:6c:93:dc:
6d:12:72:4c:35:11:18:81:8e:fd:e7:5e:d6:28:8f:5e:a0:d8:
8d:d5:77:71:f0:4c:1d:3b:b6:5e:00:cf:f0:6c:93:12:d2:12:
5b:75:f3:70:5f:17:d5:61:0d:5e:7d:2e:e0:16:26:d3:1e:2f:
5b:76:18:fa:08:ed:14:73:4d:db:19:a9:dd:80:52:a6:d8:65:
f9:aa:b7:c6:d6:d9:8f:e5:65:6a:27:4c:ec:c2:37:2a:e0:3a:
37:f6:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:52:35 2026 by rpki-client