Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: iBFubAZK1EX/KBHDDEQD/dJkVVJQJeM92CzWpqjFYOE=
Subject key identifier: 6F:A5:70:CA:10:FD:14:D4:7A:AA:C9:C2:4F:01:64:92:14:41:DC:3C
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 019CE749F28236AB70091EAFFFA362110ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 15D1
Signing time: Fri 13 Mar 2026 13:01:48 +0000
Manifest this update: Fri 13 Mar 2026 13:01:48 +0000
Manifest next update: Sat 14 Mar 2026 13:01:48 +0000
Files and hashes: 1: Va166GUo1j4Km5QFOFbKHDg4EtA.roa (hash: PmLYcUxAZSKvXj0b7u2OqGgQG9jf6q/8giX/ZnIzXjk=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: 294IrW6rURBPJJF31D8bCsDnFmIkobntez7Pw9v5mBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:f2:82:36:ab:70:09:1e:af:ff:a3:62:11:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Mar 13 13:01:48 2026 GMT
Not After : Mar 14 13:01:48 2026 GMT
Subject: CN=6fa570ca10fd14d47aaac9c24f0164921441dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:fa:6b:5f:08:9a:40:dd:a9:05:7b:6b:b8:
ba:40:2f:4c:63:2d:00:43:c5:f9:d8:2e:45:40:d0:
5d:5e:01:b3:5b:87:1e:e1:85:7f:86:39:7d:ef:f4:
8a:8c:40:d5:7c:f0:01:56:68:00:20:00:c1:96:d7:
86:c0:5d:37:4d:26:36:2e:91:1a:7b:3a:f7:7e:f3:
cd:74:d7:40:f2:4e:0b:f2:28:e5:0d:f3:68:49:e9:
77:6d:71:8f:4e:ce:6d:00:fc:ac:39:00:7c:54:b0:
5a:8d:0b:a0:b6:94:4d:a1:b1:90:ef:97:f6:bd:27:
21:b8:8b:ab:ab:b0:45:b8:41:32:8e:2f:83:38:9d:
3a:ce:24:c4:e8:dd:bd:39:58:28:f6:8b:c7:cb:9b:
4a:ec:51:33:a1:ba:6c:38:36:64:7b:e4:ea:56:d9:
b0:e7:97:e7:c0:44:29:48:37:80:23:f3:70:be:18:
31:d6:90:88:13:37:68:e8:44:dd:41:33:fc:92:57:
a3:c3:4a:c6:0e:33:c2:b4:68:02:13:11:37:70:27:
a1:7e:8a:c7:08:a7:80:15:6d:d9:f1:e6:09:f6:e8:
de:9e:db:96:e7:25:db:a3:d0:6e:ff:8d:5a:92:e1:
64:11:7b:54:61:3e:55:fb:1e:f8:f3:a0:bd:8a:02:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A5:70:CA:10:FD:14:D4:7A:AA:C9:C2:4F:01:64:92:14:41:DC:3C
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b5:b9:7a:e5:c7:01:55:ff:df:5c:10:e5:6b:67:1e:07:e4:
6d:72:a0:06:27:70:a5:47:4c:b4:49:36:cc:54:94:a6:40:e3:
b1:f2:4e:cd:0e:79:e1:a0:5a:19:29:c0:93:c7:b9:a7:4c:8b:
af:53:67:e6:e5:d1:87:ea:d0:cc:70:91:a3:b0:0f:1c:cb:75:
88:76:7f:4a:9c:95:14:9b:02:49:35:d0:26:3e:50:6c:31:3d:
31:80:72:91:93:df:1d:70:44:83:15:be:03:b1:7b:ee:4a:16:
f3:6b:7c:d7:7c:5c:1f:fb:38:a2:c4:2e:28:5d:a0:4a:0a:fd:
62:bc:42:fc:18:71:c7:f0:f6:7b:cb:41:b6:63:54:32:07:23:
f8:b2:68:6e:23:a6:4f:1a:fd:f8:28:3f:f9:75:2e:f1:08:a6:
3c:ad:ea:4a:72:c0:17:41:28:ce:aa:e9:eb:3a:f1:8f:f9:91:
0d:c8:5c:23:e5:b5:8e:54:79:45:8d:62:81:2b:0f:c4:54:6b:
19:fb:8e:19:06:71:80:d7:d9:07:72:fe:b7:2f:46:fb:0d:9b:
f2:24:2c:50:74:56:4c:b6:75:d3:65:52:7f:2f:7c:89:c6:6a:
09:66:a6:e8:ac:85:26:21:1e:b7:af:f2:2f:5d:50:4c:46:e2:
7b:2c:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:54:29 2026 by rpki-client