Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: AI5kw7iLs54Vh+SIdEwbIwyie5R4O7ts8dsUnmnxLfY=
Subject key identifier: 5D:4D:7F:61:AD:A1:16:FA:14:2D:78:12:21:21:96:C1:22:C5:29:B1
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019CE44791A01EA4A4C3DB4831CC731FF5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 11FB
Signing time: Thu 12 Mar 2026 23:00:21 +0000
Manifest this update: Thu 12 Mar 2026 23:00:21 +0000
Manifest next update: Fri 13 Mar 2026 23:00:21 +0000
Files and hashes: 1: PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa (hash: IqN6OL+5nEUWmHYyOF1lygpuFBpPS3oI5vZnXBqF7kc=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: FhY39c25D7m6E6Mm2m0KKQF3elD89ZRIQrHUCGXLAUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:91:a0:1e:a4:a4:c3:db:48:31:cc:73:1f:f5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Mar 12 23:00:21 2026 GMT
Not After : Mar 13 23:00:21 2026 GMT
Subject: CN=5d4d7f61ada116fa142d7812212196c122c529b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:ff:1d:a5:ad:17:ac:55:42:09:99:0b:65:
a3:b3:3a:78:3f:cf:26:c3:03:bb:3d:ba:12:55:12:
8a:3b:46:e4:72:d0:c0:90:22:68:d5:5f:2c:a7:1e:
52:f5:be:a4:cc:c7:f9:2a:4f:94:12:e9:e2:16:ad:
87:70:94:27:07:fe:32:b2:db:96:02:a4:16:4b:75:
38:70:49:87:d6:95:9b:42:a7:f4:f9:b2:56:8e:bb:
47:fa:8e:62:bf:1a:3a:ac:9a:16:b7:d3:14:ec:b5:
a4:8b:83:e4:58:40:a7:61:ed:04:71:bd:fa:e8:6f:
8a:ea:e5:29:24:e3:1c:c1:d8:2e:0b:b3:bf:db:2d:
2f:22:1b:fb:4a:8a:69:bb:4b:39:0a:3f:f3:7e:ad:
ec:b3:7c:56:df:35:74:88:4b:c0:8a:45:39:ee:95:
24:09:79:fc:f1:a1:83:51:85:4d:d4:1f:ca:1d:6b:
ff:06:42:73:39:8c:09:c5:e4:4b:d4:01:25:a6:0e:
99:82:12:30:02:96:11:3e:8f:e5:f7:99:2b:93:56:
4b:2c:4d:f9:1f:99:f8:32:50:8e:86:a2:f4:af:3f:
46:f7:eb:f9:b2:fa:3d:4a:b2:0c:ff:a1:eb:60:88:
07:f1:96:11:eb:cd:b1:37:5d:b6:81:fa:65:56:6f:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:7F:61:AD:A1:16:FA:14:2D:78:12:21:21:96:C1:22:C5:29:B1
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:a7:f9:4f:0b:98:46:eb:d4:2a:83:c7:84:46:44:87:45:
c3:3b:f7:83:83:ad:c6:89:0d:98:46:b5:59:9e:30:85:e0:a1:
e3:bf:a0:14:72:6c:16:6f:11:99:92:84:f0:86:81:ae:04:a2:
46:60:af:29:0b:d5:2e:e6:c9:39:2a:a3:29:20:b7:a4:c0:5d:
0d:2e:92:f7:1c:16:65:ac:1c:fb:f5:84:6d:18:e7:be:56:27:
2f:0e:e9:9e:62:fb:86:ff:be:4c:cf:fc:11:02:cb:a9:5c:88:
6a:0b:5d:3a:a3:17:5f:27:0e:3a:f1:07:d0:0e:48:6f:9d:7c:
ba:e2:ff:7e:7b:ab:19:96:db:ce:53:86:d5:bd:68:e1:81:ed:
5a:29:6a:e4:0d:99:f8:fa:79:12:af:47:42:d9:a8:e9:65:d3:
78:ae:7b:dc:3a:99:41:33:77:c2:f0:e0:f9:f5:ec:b4:9d:b1:
a6:53:f2:7a:99:2e:03:c9:3a:f6:50:aa:17:d7:66:b0:5e:39:
43:77:41:1a:68:7e:4e:67:ac:33:77:fa:47:4a:86:70:b6:2b:
da:be:7c:39:44:50:d5:dd:6f:2b:16:08:54:a6:dd:f3:ff:aa:
83:ce:33:c8:05:5a:a4:51:c8:af:01:fa:76:9c:95:44:70:06:
1c:a3:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:31 2026 by rpki-client