Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: h/xqJ9rgEAFabeH8mnruIoBqoH9EU+NvxwsmjIFUXWM=
Subject key identifier: C0:22:21:5C:64:F9:DB:54:11:F2:5B:DD:68:FE:CB:39:C2:15:6D:40
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019D34BF541CF6AB9655AD9758328F9A7E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 084B
Signing time: Sat 28 Mar 2026 14:00:47 +0000
Manifest this update: Sat 28 Mar 2026 14:00:47 +0000
Manifest next update: Sun 29 Mar 2026 14:00:47 +0000
Files and hashes: 1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: nXyYzf7Kq8RQcqJQV2x3KnrvKasMKc1Qs9u0nwm0GD8=)
3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:54:1c:f6:ab:96:55:ad:97:58:32:8f:9a:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Mar 28 14:00:47 2026 GMT
Not After : Mar 29 14:00:47 2026 GMT
Subject: CN=c022215c64f9db5411f25bdd68fecb39c2156d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:80:2e:18:f3:58:55:8f:93:a0:cf:42:c1:
eb:07:48:90:35:99:e4:9b:12:12:d2:1e:da:6c:2b:
c0:b9:6f:06:8a:d2:eb:df:1c:5b:8f:b8:0d:18:97:
5a:9f:0c:83:53:89:41:09:b9:f8:47:fe:b7:28:96:
71:69:55:c4:13:6e:0f:92:0f:c4:90:8c:ae:29:67:
32:aa:78:0b:2d:61:55:65:e0:65:be:b0:e2:9e:e7:
c1:68:9f:03:40:e4:ec:0f:60:f3:13:d8:59:5f:ea:
0b:8c:39:ec:be:2c:78:67:d8:3d:1d:d4:ca:ca:17:
a5:7d:3b:93:0c:cd:94:84:e0:cb:e5:84:3c:84:b6:
a1:15:c5:c6:fa:16:bd:4b:bd:c5:70:8a:14:7c:49:
a3:9f:c9:e8:6b:24:3e:8c:4e:4a:f2:09:98:b9:0d:
eb:39:6f:96:0c:c5:9c:55:ef:52:0b:a2:aa:64:dc:
20:24:9e:56:a7:6c:6b:10:c6:8e:cf:a5:fb:4c:83:
78:da:ff:93:16:6c:bf:cd:93:4f:d0:38:16:2d:fd:
17:d7:ca:7b:c8:0f:40:74:1d:3a:9f:90:8f:37:e3:
0d:23:ec:ec:27:1c:99:c7:bb:f9:21:c9:50:ad:65:
25:17:02:2a:ba:c0:5a:0d:eb:cb:3f:d2:65:63:51:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:21:5C:64:F9:DB:54:11:F2:5B:DD:68:FE:CB:39:C2:15:6D:40
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:e0:b3:56:c5:10:bc:17:e3:bf:f3:5d:d3:8d:fa:d5:ef:
b4:79:c0:0a:9a:1d:69:5b:02:ed:05:73:d5:8a:19:ce:2e:36:
28:56:34:3e:d5:df:cd:60:e5:e5:c3:d9:4a:1a:84:1f:f1:21:
af:9b:d3:81:1f:e0:d2:1f:9a:2c:07:ee:fd:b9:e6:c8:ec:c4:
26:54:c5:0c:fa:a3:ae:46:ea:e3:99:14:01:d6:aa:78:51:d1:
08:73:f2:a5:e9:83:15:46:cc:e9:2c:6d:9d:32:93:ae:ad:da:
5f:69:00:6e:32:80:b1:cc:1d:b9:73:05:ef:70:dc:6d:b2:89:
5c:ae:8a:6d:bb:c9:a5:18:d2:d3:89:dc:33:9a:68:b8:c6:8d:
78:65:75:db:64:69:94:83:6a:11:b3:50:1b:1d:b3:39:bf:8c:
4f:13:7c:9b:81:20:44:f2:e5:49:59:7d:09:6d:4d:77:40:b7:
a8:83:a4:81:26:81:4f:32:29:81:f3:7b:54:47:71:84:14:85:
64:7b:17:07:df:2e:b1:db:35:b7:2e:9c:7e:3c:c9:11:5c:d8:
45:bf:14:59:cd:bf:67:cf:ea:83:a0:da:16:04:cc:b0:ca:33:
a8:25:ac:f0:43:7c:34:10:6b:46:5b:19:93:99:02:d8:09:a0:
9e:85:a4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:32:53 2026 by rpki-client