Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: y4nXqtiXib+u8rSpCymxKjY7IgRTY9iSTS3/7SAdBV4=
Subject key identifier: 34:34:87:48:81:BF:97:5C:57:0D:AC:9E:8F:00:18:84:C5:A4:70:97
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019CBF97094B1C7393DC6299514C2EC97C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 179F
Signing time: Thu 05 Mar 2026 20:01:12 +0000
Manifest this update: Thu 05 Mar 2026 20:01:12 +0000
Manifest next update: Fri 06 Mar 2026 20:01:12 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: VH4MmYOyFLyEIWAJn3ucYRmdMd2Sfm/OjRoDW5VS1kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:97:09:4b:1c:73:93:dc:62:99:51:4c:2e:c9:7c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Mar 5 20:01:12 2026 GMT
Not After : Mar 6 20:01:12 2026 GMT
Subject: CN=3434874881bf975c570dac9e8f001884c5a47097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:25:80:0b:c8:d2:90:3b:56:01:33:44:75:
a0:06:6e:c1:56:7a:7a:05:f0:4c:2a:a6:57:d6:04:
c4:86:c4:88:4d:36:af:8f:04:f5:a6:29:45:96:74:
79:5c:94:a2:d4:8a:6e:23:76:be:49:54:9d:77:38:
26:24:8f:0c:af:b4:e7:ec:aa:aa:4c:c3:7d:98:42:
20:0d:73:3c:ab:0e:45:6a:fb:4a:5b:17:38:71:e4:
ff:a9:dd:53:59:cd:28:ae:8c:96:03:ac:0a:a8:54:
17:5e:0a:71:16:d4:0a:62:0d:77:18:04:6f:07:de:
5e:0c:4b:86:a7:30:67:4e:e2:91:c4:b5:72:3f:d1:
ff:f9:53:27:c3:55:f2:2d:e7:38:62:a6:64:20:32:
ef:f6:f0:b4:84:cf:68:f0:79:be:92:28:a7:b6:0c:
28:5a:47:55:41:da:30:02:c8:2a:ba:0d:38:10:ae:
60:1d:f7:ec:89:1b:b6:fc:be:1b:72:72:e4:63:cd:
99:c8:57:c6:29:e4:13:ce:b1:75:a9:a9:e1:47:57:
98:b0:c9:82:62:17:25:7f:05:9c:34:d3:f5:3f:05:
c3:a5:04:fc:80:ef:17:cc:2c:bf:f1:5e:a8:c1:08:
ab:52:3f:34:d0:76:0e:40:41:96:f2:6d:49:e0:b9:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:87:48:81:BF:97:5C:57:0D:AC:9E:8F:00:18:84:C5:A4:70:97
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d9:49:71:fd:05:25:e7:73:b6:19:fa:13:67:b8:b9:82:44:
42:2b:84:34:23:40:ce:e1:2f:bd:a5:5f:86:9d:a6:32:6c:53:
26:4b:eb:96:d0:42:fd:80:1f:3a:10:51:48:a2:6c:fe:41:23:
ef:2d:fb:d6:61:57:4a:d4:7b:03:f0:8d:88:5f:a6:09:38:4d:
86:a1:1f:f6:e9:3f:af:64:d8:bd:65:18:79:8a:bc:aa:43:66:
e3:47:cc:f0:1c:e7:e7:93:69:79:ce:93:ed:15:fe:1c:48:f5:
0a:30:c6:47:c8:02:df:04:81:9a:64:4e:8f:f5:3f:a2:f7:0c:
a6:86:6f:cd:2f:b9:27:c7:5c:8c:c8:de:55:57:d3:8a:20:41:
c6:20:42:62:dd:29:41:03:e0:5d:e5:a6:77:02:f5:2b:53:f5:
68:b6:bc:f0:b8:70:33:12:94:6d:b1:4a:33:49:03:32:24:a8:
1a:4b:5c:3d:3f:c0:e4:c9:f1:63:d4:9a:04:6d:c3:82:25:ad:
9a:00:e8:f9:c0:26:2a:7c:44:7e:a8:61:98:c2:17:80:9b:57:
f1:05:a3:c6:48:09:7f:b0:f9:25:b7:7b:cb:87:3f:47:ce:6f:
49:47:2a:f9:5c:72:e9:1d:79:f3:f8:c0:4b:75:d7:83:ce:9b:
19:26:91:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/lwlLHHOT3GKZUUwuyXwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDA3NTg4MjVkZDg5Y2ZlZTVmZGVjYzdkY2I2NTFmMGE1
ZDEwMTgwHhcNMjYwMzA1MjAwMTEyWhcNMjYwMzA2MjAwMTEyWjAzMTEwLwYDVQQD
EygzNDM0ODc0ODgxYmY5NzVjNTcwZGFjOWU4ZjAwMTg4NGM1YTQ3MDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GwlgAvI0pA7VgEzRHWgBm7BVnp6
BfBMKqZX1gTEhsSITTavjwT1pilFlnR5XJSi1IpuI3a+SVSddzgmJI8Mr7Tn7Kqq
TMN9mEIgDXM8qw5FavtKWxc4ceT/qd1TWc0oroyWA6wKqFQXXgpxFtQKYg13GARv
B95eDEuGpzBnTuKRxLVyP9H/+VMnw1XyLec4YqZkIDLv9vC0hM9o8Hm+kiintgwo
WkdVQdowAsgqug04EK5gHffsiRu2/L4bcnLkY82ZyFfGKeQTzrF1qanhR1eYsMmC
YhclfwWcNNP1PwXDpQT8gO8XzCy/8V6owQirUj800HYOQEGW8m1J4LmIRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ0h0iBv5dcVw2sno8AGITFpHCXMB8GA1UdIwQY
MBaAFJzQdYgl3YnP7l/ezH3LZR8KXRAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3Yjkt
YTU0ZjhlNDgxM2U3LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3YjktYTU0ZjhlNDgxM2U3
LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdlJcf0F
Jedzthn6E2e4uYJEQiuENCNAzuEvvaVfhp2mMmxTJkvrltBC/YAfOhBRSKJs/kEj
7y371mFXStR7A/CNiF+mCThNhqEf9uk/r2TYvWUYeYq8qkNm40fM8Bzn55Npec6T
7RX+HEj1CjDGR8gC3wSBmmROj/U/ovcMpoZvzS+5J8dcjMjeVVfTiiBBxiBCYt0p
QQPgXeWmdwL1K1P1aLa88LhwMxKUbbFKM0kDMiSoGktcPT/A5MnxY9SaBG3DgiWt
mgDo+cAmKnxEfqhhmMIXgJtX8QWjxkgJf7D5Jbd7y4c/R85vSUcq+Vxy6R158/jA
S3XXg86bGSaRkw==
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:54:54 2026 by rpki-client