Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: GwF/e+YRVxQ0KkEY4xcso2WX/fhaDZ+3Po8fWAVTEAw=
Subject key identifier: E4:45:26:20:2E:72:92:2B:FE:61:75:99:95:1C:71:78:17:BD:1F:DE
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 019D382E1A85E5A5657ED8DEA94914EADC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: 3UvocN8YemmoOwL53sgwSszmnzc.roa (hash: RJjvrheXtGevJ6D0OMvxOIdvCPxuFznkOJ4LPhI3QMA=)
2: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: FB3WUIFKdI7odDqz01/H4Tu+WSIxn6aqtY4HzozMbfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1a:85:e5:a5:65:7e:d8:de:a9:49:14:ea:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=e44526202e72922bfe617599951c717817bd1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:81:9d:08:44:2d:04:9c:a1:cf:20:e1:0b:
17:7e:2b:d0:f6:c5:8e:38:b7:b6:fe:9e:94:72:5e:
0f:ed:60:9f:0b:93:aa:ae:73:fb:20:9f:19:3a:99:
9b:d2:89:b9:d4:59:b5:b3:43:a9:1e:63:f4:e2:44:
be:6f:48:97:28:87:d0:81:c6:fd:19:c4:16:3d:73:
56:44:e2:37:92:39:76:62:1a:15:66:06:b4:59:a9:
1c:cb:5e:31:39:25:1e:1f:24:bb:05:bb:1d:f1:c8:
bb:41:90:a1:d4:e9:8c:99:d4:33:2e:8b:ef:66:ef:
f5:09:c7:23:91:a5:46:dc:f9:4e:ac:81:a1:34:bc:
5a:97:d6:cf:36:c1:ac:eb:bd:d2:1a:df:f7:1d:e6:
30:d1:1a:01:a6:bd:e5:42:ff:48:9a:71:e1:25:5a:
13:2f:6d:4c:6a:af:f3:6e:e8:de:49:c6:c3:43:aa:
b3:01:64:6b:fc:01:af:1d:8e:8d:67:06:da:3d:1f:
75:6c:9d:ea:be:96:1d:24:3c:a2:cd:b1:cc:76:91:
11:6d:0d:74:72:c9:e2:a6:f1:af:e1:77:6f:7c:f7:
2c:ee:2b:96:94:d0:96:97:c4:2f:a4:28:5f:27:87:
2a:e6:8e:59:93:c5:d6:60:bb:58:b9:e0:df:9d:7a:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:26:20:2E:72:92:2B:FE:61:75:99:95:1C:71:78:17:BD:1F:DE
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:53:b8:be:b3:42:0a:0f:d7:90:0e:bd:a9:0c:09:ad:8a:a0:
7c:08:94:7f:96:65:8d:53:47:0e:e8:07:fd:fc:70:5f:63:65:
1d:43:e1:f7:39:04:69:19:1f:73:29:68:55:78:f3:7e:86:e4:
78:c6:e4:21:94:ec:fc:37:de:a5:b7:c6:fa:8c:d7:a5:7f:92:
44:d7:9f:7e:c9:b3:48:37:3b:9a:48:5b:86:d8:c2:21:75:0b:
d5:9e:e2:d8:cc:26:a1:14:f6:6d:e8:eb:ed:d4:e7:38:c9:4f:
94:a3:93:6b:ad:7b:71:a8:95:28:32:3c:fc:35:1c:2c:68:d8:
a5:e9:69:57:0e:85:b0:cc:db:ed:fa:70:2f:9b:bd:c4:00:d5:
1b:40:45:92:c3:13:e7:7b:e4:a5:97:99:1e:ad:c7:4e:18:d7:
82:57:91:1b:ef:5f:a0:c0:25:d5:69:a0:14:83:a9:e5:ba:36:
12:69:2e:46:2c:56:6b:14:b2:90:bd:55:e8:c7:c7:21:03:44:
d4:05:e6:be:39:ce:cf:b3:41:97:da:04:b3:87:cc:b7:4a:3f:
a8:5e:0e:dc:97:23:6e:68:a7:ad:87:dc:e8:61:07:ff:20:a0:
ba:c8:14:53:eb:93:d7:87:b5:74:7d:f9:53:ea:4b:63:0e:f5:
35:7b:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:52 2026 by rpki-client