Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: 8Ym4qqi6ExIXsSQ7IOEGjUNW64IX/jGGG0aG5ZOc5DQ=
Subject key identifier: CE:9C:E4:2F:01:B6:DE:B9:58:86:C1:33:7D:29:A9:8E:CC:47:88:0A
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019D39AE7C86DCD23A708D5FA7C54DA8D28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 086B
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: ZYVu/qHggmnBscOUmVgYNFYZCcRQA/X2eAf2xccIODI=)
2: cGNM2kUYGwh1pqp3KDfnuGuO-40.roa (hash: RBzO91NF0DSPBv6o+tDtIFzqxm7krs8U6K6aFGD7SjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7c:86:dc:d2:3a:70:8d:5f:a7:c5:4d:a8:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=ce9ce42f01b6deb95886c1337d29a98ecc47880a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:2f:de:6c:3d:54:7e:9c:d4:73:c3:94:14:
d9:f6:42:4f:87:13:80:08:47:81:5e:30:79:2b:c4:
e5:da:bc:61:50:d3:ea:85:4f:75:2a:71:56:48:ae:
33:6c:08:ff:e1:6c:53:d1:a1:80:00:ce:64:dd:30:
95:89:5c:ca:86:2a:22:b2:63:56:8d:d9:6d:42:cc:
bc:7c:9b:30:e3:77:9c:cf:4b:ad:8c:38:28:2a:ba:
02:af:59:03:f1:e4:86:41:42:b9:36:84:69:f2:e9:
00:f0:84:ab:b9:af:54:0b:a6:fb:13:fe:9f:e2:ce:
48:b4:5b:0b:41:ca:27:98:6a:5f:dd:e3:cf:84:bb:
02:36:d9:36:2f:bb:4a:9a:ff:47:6b:e7:d4:84:d8:
95:2f:f1:6e:2d:9a:ce:04:bc:47:27:38:99:10:da:
8c:62:59:61:58:68:d6:e8:fa:a8:66:16:65:1e:8e:
cb:6a:a8:d9:b7:d2:de:37:dd:20:e1:59:8a:15:77:
fe:63:03:ad:bb:d8:2c:18:8b:52:c9:27:96:cc:71:
33:12:79:b3:87:59:02:c3:06:e8:f2:db:b6:43:5c:
45:40:db:ec:ad:68:27:d7:7c:24:1d:75:b0:c0:dd:
be:25:e2:0d:08:23:63:33:a6:d4:02:0e:da:be:69:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:E4:2F:01:B6:DE:B9:58:86:C1:33:7D:29:A9:8E:CC:47:88:0A
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:75:9b:7e:1f:10:ed:72:b1:fd:00:bf:93:03:34:c1:b0:8c:
d8:1a:a0:77:cc:f3:3e:bc:3a:2a:8a:ef:b5:09:30:5d:da:45:
a5:a6:80:36:1c:5f:2c:7c:e4:1c:bf:ae:be:03:07:a2:55:5c:
45:2b:f5:f7:91:aa:e5:3f:39:de:5e:39:dc:3f:82:fe:41:b6:
21:4d:ff:3d:b7:6a:0f:25:74:cb:1e:2b:55:5e:48:64:aa:5c:
c9:60:77:cb:a0:fc:3b:58:73:a5:40:3e:ef:59:d9:d0:b4:1b:
31:63:43:ec:32:59:d5:60:89:ee:bf:da:eb:1e:3d:66:cb:4c:
f3:51:9a:9b:e6:42:71:f4:af:18:f3:4f:e0:ab:77:81:3b:6c:
51:f6:fa:36:2b:42:e4:30:b1:d5:27:49:53:06:0b:2e:be:16:
5c:f7:8a:2c:11:6d:26:2e:3b:a8:33:6a:44:ac:d2:7e:a7:a7:
58:93:8b:56:14:a3:90:6f:45:be:cc:6b:da:4d:b9:41:e2:44:
99:73:63:60:17:b1:57:e3:bf:2f:51:13:9c:f8:27:2d:b1:51:
f4:3a:a6:92:20:64:cf:dd:37:a0:97:55:d9:45:bd:d1:4d:de:
25:a5:76:51:9a:b6:ec:c2:35:49:f9:ab:23:19:f9:eb:92:35:
ca:00:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:21 2026 by rpki-client