Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: A3Y20GAGHOoJFqol/M9br2a000fdrm80phVx+ygGTgI=
Subject key identifier: BC:89:6A:15:19:9E:3F:BC:26:92:48:F5:36:A0:CD:A6:0F:E9:2A:01
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 019D382E7F488751C150C4C49E534FDB4DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: 9mN_oHf4GD05-BUH6BsB01tvt3Y.roa (hash: ZuxdvlwmVs1w0KroWX43G/v/gBodCt7QRPbyICFM9A0=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: 72YhTbRaeQtjmSVV3vQ2GqoDitBRoxazrCsYrtkIPAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7f:48:87:51:c1:50:c4:c4:9e:53:4f:db:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=bc896a15199e3fbc269248f536a0cda60fe92a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:3c:32:67:5f:8b:6e:d8:d1:ba:4c:e9:cc:
67:c7:e4:a0:15:b5:59:ba:54:25:eb:f3:71:a9:ea:
c8:eb:c4:06:d3:c3:30:71:8c:50:bc:f7:1b:99:1c:
cc:7e:4e:5c:8f:de:99:69:a4:9f:0d:ef:de:e1:92:
c1:70:4c:ba:d8:29:a5:0a:b1:7d:fe:71:02:dc:03:
19:39:fc:f7:5b:e0:a4:bb:72:9b:37:a7:84:3f:8f:
45:04:e6:6b:43:e4:a3:ba:6d:e9:d7:a8:56:63:bd:
59:88:12:bb:a2:6e:6e:d6:97:76:9f:ed:43:89:3d:
60:2f:74:c9:fb:ad:33:1d:3e:2d:5b:d0:a1:83:c2:
2b:6c:80:7d:79:9e:25:ea:a6:5b:2f:83:39:b0:bd:
6d:8e:e1:21:4c:40:f0:bd:35:fd:e1:37:96:a1:7f:
bf:ae:72:46:4d:65:2d:18:b9:2c:a1:5f:a1:89:ca:
8e:f5:75:52:0f:38:1e:74:41:42:11:45:f6:7b:b6:
41:68:ee:1f:6d:49:d4:4e:6c:9a:f7:61:da:cc:01:
f2:7f:77:b5:d1:b4:1b:4e:c9:09:8a:24:b5:0c:87:
6d:8d:26:47:38:8a:8b:b0:d8:71:37:87:1e:05:07:
9f:b2:e9:ca:88:1f:99:fb:98:9c:64:5b:07:34:17:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:6A:15:19:9E:3F:BC:26:92:48:F5:36:A0:CD:A6:0F:E9:2A:01
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e8:5e:a1:0a:64:a1:0b:84:37:58:ce:39:d6:2d:f8:fd:cd:
bd:81:e8:be:6b:25:3f:9a:7e:c2:46:dc:bd:6f:0a:e4:4d:49:
42:cf:a3:e9:51:80:6b:fe:ec:3a:34:72:fe:e5:b5:b1:53:e3:
6c:f0:16:b7:f0:e8:f1:09:35:67:34:dc:8b:d8:1f:d7:93:b7:
fd:18:de:8c:37:a6:0a:ce:9f:ef:be:91:b7:42:d1:a4:19:14:
cf:7c:ae:cf:c1:ec:3e:7f:0b:a8:2a:35:77:95:cd:38:46:86:
ba:47:60:fa:9f:1c:1f:1b:a9:7d:2d:26:5c:69:e4:50:84:95:
76:93:e7:77:67:fc:f4:77:12:54:ef:31:d3:c0:05:d0:78:4b:
83:c3:ac:b3:c4:29:fc:97:d6:f1:c1:67:dd:00:f9:fd:4e:de:
ca:5b:8b:a0:f1:71:7f:4d:c9:90:1b:65:86:8e:cf:5c:6f:9c:
a8:93:b4:4e:1a:1b:e9:62:3c:fd:f8:cd:37:7c:c8:2e:94:f0:
34:e1:da:73:da:21:32:64:21:07:72:67:8e:f1:0c:f0:ba:e1:
b3:52:48:eb:bc:87:d7:43:6b:f7:cf:9f:64:1d:21:13:52:3c:
2d:6f:c5:7f:45:ca:1f:41:52:a8:3d:7d:fe:36:a3:17:35:e7:
e9:ba:1a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:55 2026 by rpki-client