Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: 6mL7UNa8pf5TaIfQBOWRrQOsPboENJD95YEe5iVx0i8=
Subject key identifier: 85:47:BF:F5:5E:03:1A:15:1A:FD:2E:87:BA:42:73:E5:A9:C4:D2:99
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019D37C04924B17EF43EB1DF9B6E359BAA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: 9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa (hash: wE6I1csBO6GEmAQaIzNTh2tvdzqwUCjixq3m2Z3pzSw=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: 0cE8r11WGhSWz/kD8OT4aZE1xgTyFNLIj6s+zKLmZys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:49:24:b1:7e:f4:3e:b1:df:9b:6e:35:9b:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=8547bff55e031a151afd2e87ba4273e5a9c4d299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:fc:1d:85:43:e0:d7:ec:ea:5f:f6:ce:73:
fa:b8:06:87:dc:94:a9:dd:0b:1f:39:cc:50:6f:ef:
37:f1:b9:1c:e2:23:45:91:8f:26:d6:20:b4:f2:65:
10:21:6e:ed:50:60:cb:9c:21:fa:49:29:52:f9:94:
5c:f1:ad:e9:98:d0:cb:11:fb:8a:cf:db:d3:ff:76:
7a:86:60:ed:a5:9b:ce:ee:67:b7:19:c1:54:30:b5:
2d:45:9d:c8:f6:8c:f7:96:61:d0:25:ee:4c:77:9b:
b8:05:83:5d:ed:45:dc:c6:3a:d5:6e:ab:ad:9c:bb:
48:69:8e:2a:ea:2a:32:45:14:cd:06:ec:e9:ac:2c:
36:69:bd:e6:42:91:c1:d5:78:1c:63:5b:fa:31:93:
e0:10:2d:b1:d2:ac:7a:5a:f2:f6:a1:5b:a4:cd:95:
4a:32:bd:66:67:05:45:94:68:d9:e3:cd:fe:f5:f1:
db:7a:5b:3a:70:af:a8:8c:ff:47:c9:e7:54:d6:2c:
61:3d:83:db:67:c7:c3:e7:f4:67:a6:bf:ce:25:a0:
fe:13:e6:fb:fe:3f:b3:a3:f6:4c:7b:f5:ef:43:bd:
e4:cc:52:31:43:a1:7c:d4:76:87:5e:76:84:e4:2d:
e8:f8:b9:70:31:95:6f:3a:41:9d:a9:ce:c9:1e:02:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:47:BF:F5:5E:03:1A:15:1A:FD:2E:87:BA:42:73:E5:A9:C4:D2:99
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3a:30:2b:09:17:8a:2a:ba:0b:be:b0:d0:20:bd:2d:b6:09:
5e:5b:03:9e:42:81:76:ab:20:7f:85:65:ab:24:12:08:74:92:
7e:57:7e:16:8d:97:94:56:1c:88:23:c8:1a:91:cf:62:3b:36:
2a:1c:6d:12:c8:e6:02:51:06:b0:49:3d:7d:8a:35:82:ce:70:
d8:21:67:9a:b6:29:45:43:0a:5a:9a:8a:98:4b:87:27:60:76:
78:c4:7a:9a:b6:05:56:9f:db:04:ea:b4:49:be:74:ce:d9:28:
f9:cc:69:f3:a0:03:69:62:86:f2:78:10:85:f8:0d:3d:77:f0:
35:3c:74:19:b5:1c:09:0f:a1:55:8d:12:ef:53:2f:c0:43:28:
3b:5a:db:d7:ad:32:49:43:d9:8c:53:8f:62:89:bd:61:c2:3d:
b0:c3:a0:1e:7d:61:55:0b:e0:ef:fe:3e:de:91:98:9d:71:27:
5f:1e:f9:4a:ae:ca:d7:cc:7e:cf:0b:82:d2:b2:0f:90:31:8d:
3a:4a:37:dd:a8:a9:bc:69:bd:12:c9:2c:a5:c2:7c:ae:5f:07:
7e:f0:38:15:a5:60:0e:69:34:cd:e0:ec:0f:08:1a:c7:2a:a9:
44:56:ad:ba:17:dc:ea:f0:77:81:fe:bb:56:5f:d1:61:2b:ac:
80:0a:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:19 2026 by rpki-client