Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: 3YNyI/EsIjqFe92ncrfV5E1TQxO1SbJPb4aPMgmN/9g=
Subject key identifier: 3B:05:F4:F0:E3:2A:A6:BE:7E:6C:CC:5C:9B:4F:E8:DC:69:C8:EC:53
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 019D3A8AE643975C8E7D7B60E08550F0D5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 17:01:14 +0000
Manifest this update: Sun 29 Mar 2026 17:01:14 +0000
Manifest next update: Mon 30 Mar 2026 17:01:14 +0000
Files and hashes: 1: a_g1TDCKs0djGqyHBT2iLxMGygA.roa (hash: 3E0lz2si/4Jtpa0xKFZpZcmoUUdUfMhPP/gPs109DNA=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 1BB2E24W56mdEQvuOn5xQH+02lJJnPK3WDrdKgfqvL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:e6:43:97:5c:8e:7d:7b:60:e0:85:50:f0:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Mar 29 17:01:14 2026 GMT
Not After : Mar 30 17:01:14 2026 GMT
Subject: CN=3b05f4f0e32aa6be7e6ccc5c9b4fe8dc69c8ec53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:1b:a4:71:9a:0f:81:d1:4c:1c:21:5c:b0:
1d:92:81:e2:66:19:78:60:b5:07:1c:1a:94:70:a4:
84:ef:23:85:55:74:c0:b7:ac:b6:f5:ed:de:3c:e5:
ee:5f:49:a9:1a:89:5c:16:ec:e1:cd:df:7b:82:f9:
73:63:3b:4d:fb:9f:a9:a9:07:a6:f3:a5:57:be:65:
d6:85:fb:6f:fb:8d:69:02:ee:d8:c5:09:be:d0:f9:
14:a5:5c:a9:6f:59:c5:54:36:3d:42:6d:4f:44:66:
68:37:64:3b:f3:e0:3c:ca:78:c5:e6:39:3f:0b:27:
74:1d:b7:19:e9:95:52:87:ae:d1:f4:0a:cd:d4:ed:
09:77:01:68:69:53:fa:a9:0c:c6:67:bf:8b:d3:2b:
a6:6e:97:5a:04:49:ac:88:6e:4a:a6:7c:41:e7:68:
ed:02:21:3e:dc:27:d8:91:69:29:63:4f:20:6d:b4:
52:cb:34:9c:91:ad:90:3e:c7:60:4e:f0:d8:5b:e7:
e5:5a:b5:d5:64:a7:ee:85:12:3e:09:fb:0c:40:48:
e2:3a:ea:5a:91:b6:3d:26:cf:37:1c:a2:4d:77:01:
07:ac:dc:16:24:a5:fe:cf:12:3d:8c:8e:49:bc:22:
a5:61:15:e2:df:8a:2d:f9:07:46:2e:4b:0f:b3:a3:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:F4:F0:E3:2A:A6:BE:7E:6C:CC:5C:9B:4F:E8:DC:69:C8:EC:53
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:21:e0:93:f0:7b:c1:b8:bd:84:71:c7:9b:67:9e:9e:18:67:
be:aa:44:cf:ef:43:b5:b1:9f:03:12:85:3d:48:7f:87:d4:ce:
10:8c:7c:62:a5:dd:d3:e1:75:f4:5c:69:29:5a:83:6e:e4:30:
cf:74:d8:28:51:09:44:2d:16:8f:01:3b:c2:72:23:05:75:24:
36:55:c0:63:a2:c4:30:a6:b9:09:69:9e:b4:27:af:d0:2c:18:
a8:3e:d4:60:97:c7:7a:b9:e2:a6:47:36:b5:05:55:cd:ba:d6:
5c:6f:f5:9d:0c:f2:69:f2:bb:b6:7d:23:80:89:d7:22:ee:73:
e7:3d:03:15:21:27:f0:da:c6:59:18:f9:56:d3:95:38:50:18:
57:6d:58:32:75:64:ea:db:2a:e5:5c:21:f1:11:7f:0b:a8:e5:
05:71:a0:85:9f:ed:52:87:c1:86:56:54:c7:77:63:91:6d:8e:
c5:a7:9c:14:5a:d3:d3:d5:12:e9:f5:9c:16:7b:79:7f:81:e0:
9d:a9:af:38:b9:7b:8f:2e:f9:9d:c8:cb:ed:9e:ce:b5:21:64:
2c:11:c6:23:1d:92:43:ab:24:18:e3:28:b3:41:cb:d3:96:06:
55:57:c6:31:cb:00:64:b7:af:36:cd:39:73:4c:13:95:79:51:
d9:92:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:15 2026 by rpki-client