Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
File: nRNTyAuINe6erTfvfp9kIQp3O_s.mft (raw, json)
Hash identifier: Su1NDuiTiCCCACBBxnp9AxnH1mJfIjkVFUebP7QYegE=
Subject key identifier: 28:0B:18:88:30:96:68:24:3B:8C:05:BB:A3:00:70:F3:24:FD:8B:86
Authority key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
Certificate issuer: /CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Certificate serial: 019CECDD812A0DCF000C680E2370D2CA4E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
Manifest number: 0171
Signing time: Sat 14 Mar 2026 15:01:05 +0000
Manifest this update: Sat 14 Mar 2026 15:01:05 +0000
Manifest next update: Sun 15 Mar 2026 15:01:05 +0000
Files and hashes: 1: aN1c9Sw0mZJOwIEAY7wKPyQLEEw.roa (hash: 26mq/JieiE08d31P7dbCMptw/12YVOE7/U8mBDr4f0o=)
2: nRNTyAuINe6erTfvfp9kIQp3O_s.crl (hash: ajn3ekaGQjue5ucNnjwEMLF9bExJEdfOOfOUkppy3qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:81:2a:0d:cf:00:0c:68:0e:23:70:d2:ca:4e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Validity
Not Before: Mar 14 15:01:05 2026 GMT
Not After : Mar 15 15:01:05 2026 GMT
Subject: CN=280b1888309668243b8c05bba30070f324fd8b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:8b:9e:c8:c5:fc:91:f5:f1:16:cd:70:ea:
e2:19:ad:01:65:24:c7:00:d8:72:12:80:ad:a4:e8:
e2:87:b0:9a:a8:f2:e2:a9:97:fe:b7:c4:2f:6d:d6:
70:4c:fc:99:b1:be:68:75:3d:af:b7:a5:f5:60:89:
96:27:e3:e5:8b:44:35:5a:d0:76:c1:dd:d3:0f:01:
62:1e:97:94:c5:8d:ec:f1:e9:2c:9f:f8:5f:fd:7b:
60:c9:93:43:73:3e:88:a8:d8:3f:ae:2c:42:a3:06:
f8:ce:d1:b0:e6:ef:e8:0d:96:c9:7b:2a:e8:e8:a7:
ca:63:7f:64:2a:73:36:b9:c4:07:a6:c8:d8:aa:b1:
b8:1e:2f:a6:1e:ff:88:fb:20:47:8e:08:0d:3b:1c:
5d:29:d5:40:50:f4:86:83:8d:87:85:54:86:94:25:
f2:f5:7d:8c:47:3f:52:e3:08:4b:05:63:b6:c7:67:
c7:db:39:66:ee:e5:fb:ee:52:8d:5d:91:c8:f1:9c:
68:80:72:ef:5a:28:19:f1:ff:e7:fd:8b:56:03:c3:
43:ee:6b:94:e1:bc:01:10:6c:28:8c:d8:b6:98:26:
66:90:a2:79:0a:d8:1f:42:33:13:db:f7:6a:e9:d4:
ab:02:db:a0:cf:8c:aa:b9:8e:a5:1d:38:07:74:7b:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:18:88:30:96:68:24:3B:8C:05:BB:A3:00:70:F3:24:FD:8B:86
X509v3 Authority Key Identifier:
keyid:9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:6f:af:df:d7:16:0a:b2:62:8c:59:0e:58:ca:8a:bd:9e:
61:2d:24:b8:06:41:c2:9a:39:2c:e4:ca:38:38:e9:26:3a:45:
70:92:d2:4c:7f:be:9d:fb:19:bf:3f:28:64:f9:ac:21:6a:ea:
f9:81:c7:32:b5:b9:c6:c7:e3:77:66:f3:12:d3:21:1a:e4:84:
18:91:52:3e:e1:18:4a:f1:b7:1c:6e:7c:03:38:fe:bb:78:9e:
4c:e0:fb:ad:6e:10:a7:56:1f:ae:bb:5e:fd:ca:29:d3:10:06:
8c:07:c9:6b:40:77:51:2b:92:e4:e1:71:e8:c4:99:91:4d:aa:
f8:c7:6d:75:ae:2f:f4:7e:dd:57:df:d3:7a:78:6a:62:df:2e:
f8:f7:14:20:97:df:6d:5e:b9:74:1d:59:13:ad:29:32:f5:f0:
97:22:ab:9f:87:30:a2:5b:71:01:37:2f:e3:da:1b:cc:9b:86:
40:1c:c0:08:a3:36:d8:de:60:72:06:ff:55:64:14:ab:ac:75:
3e:93:7d:b2:3f:ad:2c:d2:81:d9:80:af:cb:33:db:16:1b:58:
a6:bc:77:c6:ec:ac:34:64:69:87:87:ed:67:3e:1b:76:8a:84:
6b:ad:8c:5b:5b:a6:ad:0e:6b:f0:9f:9c:23:d2:6d:96:13:d7:
cf:c1:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:00:16 2026 by rpki-client