Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: qpC3m5hzBIjBF2w9O5X5rV2k2rBglfJH51+G9iWgkzU=
Subject key identifier: 7E:15:7B:CA:91:4A:C0:8F:4F:DF:67:5C:06:F4:25:9B:5E:9D:98:E4
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019D3AC1D267B92B41599AD3998F71A41738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 077C
Signing time: Sun 29 Mar 2026 18:01:13 +0000
Manifest this update: Sun 29 Mar 2026 18:01:13 +0000
Manifest next update: Mon 30 Mar 2026 18:01:13 +0000
Files and hashes: 1: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (hash: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI=)
2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: LXKdYLvANnJigS5HPBlEmA2UrNSXUyeRvfE/8CRDqjY=)
3: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (hash: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY=)
4: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (hash: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:d2:67:b9:2b:41:59:9a:d3:99:8f:71:a4:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Mar 29 18:01:13 2026 GMT
Not After : Mar 30 18:01:13 2026 GMT
Subject: CN=7e157bca914ac08f4fdf675c06f4259b5e9d98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:db:21:97:d8:ba:e8:13:61:c8:b1:e8:00:74:
d0:73:e3:11:4a:0e:54:73:ad:a3:4b:c9:e3:ae:e4:
47:d1:8f:f0:4e:08:44:2f:bc:73:72:7b:56:3c:30:
12:ac:14:a8:9f:af:ce:7f:a9:fc:0e:6c:62:ed:8d:
f3:7b:f1:82:c1:b1:5d:d7:8c:78:90:24:cf:53:c5:
0c:70:4c:d3:6d:97:76:07:8e:2e:02:fd:a6:a8:30:
4b:ad:26:c7:84:3c:39:6d:e1:32:09:36:e8:36:a5:
65:0f:f9:7d:da:c3:f4:45:b7:a1:91:85:8d:df:d6:
e3:02:fd:96:98:5e:0a:d4:be:0c:ca:ff:45:cd:ab:
01:fa:03:29:ea:39:a7:00:5b:65:57:ad:ca:65:b5:
c9:ff:26:ec:5b:59:de:2f:24:bf:5c:94:27:2b:1b:
27:f8:82:93:03:4c:ae:54:27:97:f2:d6:af:b9:39:
ec:1b:4f:dd:bc:a7:fe:2d:02:09:b8:6e:4e:1f:d1:
b3:f9:92:62:28:07:8b:40:ad:3a:c8:9b:08:6c:9b:
87:2a:92:4f:ee:8a:d9:77:dd:e0:cf:e5:05:b5:a7:
ab:7f:d1:16:dd:b4:62:60:37:ca:19:ff:ec:49:ca:
f1:17:38:0f:e9:45:84:f5:73:32:22:a8:39:64:01:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:7B:CA:91:4A:C0:8F:4F:DF:67:5C:06:F4:25:9B:5E:9D:98:E4
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f4:a7:60:f5:07:06:4a:65:91:77:cd:dd:dc:5c:3c:7c:0f:
1b:d7:53:21:2d:36:de:c5:55:c2:f1:9c:70:80:92:f5:15:f2:
5e:d5:81:8f:8b:5a:95:50:f4:0f:aa:4e:ab:59:15:7b:a3:47:
04:8d:85:99:e0:1e:01:b2:27:01:23:0b:ca:c8:01:ef:bd:5d:
81:bc:91:a0:96:b3:2a:15:b7:de:35:d3:a4:d3:f1:5d:15:59:
21:c1:0d:85:86:43:20:76:03:8d:00:57:ee:06:f5:c8:87:be:
16:81:dc:29:c8:41:f5:ff:bd:72:b1:91:73:25:7a:6d:5c:5a:
ea:df:4d:ab:de:db:ab:29:48:24:b4:78:d3:e6:af:c5:5c:1d:
cc:80:67:c7:9b:25:e8:3c:ca:98:65:6d:33:26:f4:3a:cc:8e:
1c:53:84:05:61:c8:61:a4:07:6e:59:ef:32:81:6b:bf:f5:d7:
29:00:05:87:96:65:41:8e:c4:bd:4c:00:95:89:18:dc:f3:e7:
a0:3c:ac:08:79:06:71:47:cb:c1:fe:97:07:00:e4:1d:44:06:
ef:0e:8f:1b:2b:a2:23:77:d2:d4:83:be:0c:16:b3:75:a1:6c:
73:08:c4:4a:80:ea:df:0f:19:0d:b5:ef:0f:da:0c:39:40:d8:
b7:d4:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:54 2026 by rpki-client