Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: 8RROEqhlOBOxDHLw2H5UTRd284/niyzznUnEYAt8xV4=
Subject key identifier: 91:09:D1:B3:60:6B:4F:80:C1:4C:50:1F:BC:5A:2A:44:64:E8:A4:49
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 019D39780287886CB58405B40E0110330371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0C7C
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: InPFMpdJAXXO_yXbxGZuHeN8kBs.roa (hash: vCdlR4+URzLW/X9eKQ1ExsBHfsRxyqUAmI7ldq8lqGc=)
2: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: T3o+Kw230xAi1xKWonoZp68QV+gdsjf9ax6EhRzrMQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:02:87:88:6c:b5:84:05:b4:0e:01:10:33:03:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=9109d1b3606b4f80c14c501fbc5a2a4464e8a449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:9e:4c:3c:dc:ef:68:7b:e1:ab:bb:ed:77:
31:7c:82:ac:33:20:c9:93:46:b0:f1:b5:a2:46:59:
fa:7e:23:19:87:fc:69:63:be:df:a1:79:dc:64:80:
79:9f:fe:d7:e5:2e:19:92:99:b0:28:53:79:4b:e0:
3b:5b:5b:9b:55:b5:53:1e:05:66:54:b7:ad:dc:1d:
9d:3a:cb:85:4c:5b:14:c2:31:88:73:b0:49:23:b0:
b7:19:93:35:c5:52:4a:ab:88:62:98:04:98:73:43:
b5:87:f7:0c:f0:21:da:86:68:58:53:8b:67:f4:d6:
04:fe:b5:7c:45:99:1f:69:4e:94:33:86:33:4f:18:
cf:3f:c3:f3:54:73:30:93:ec:0a:05:57:1f:a8:67:
07:5e:0f:f7:a1:98:a1:59:01:99:c8:ed:99:fe:98:
72:db:c1:30:fe:e9:99:34:38:8e:37:bb:b0:1a:70:
3f:fd:57:b2:84:02:89:19:c3:ac:56:9f:00:c1:59:
20:a8:da:78:1f:6c:01:7b:df:73:ba:e2:3f:19:b5:
62:87:29:41:1d:d8:9f:3d:8b:99:f3:79:df:bc:4b:
03:1a:9d:f9:63:a7:38:22:57:d6:9e:70:9a:db:b1:
71:08:f1:4f:19:fc:19:1f:24:22:9c:26:b6:50:7c:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:D1:B3:60:6B:4F:80:C1:4C:50:1F:BC:5A:2A:44:64:E8:A4:49
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c3:c3:ee:52:80:b6:a2:df:ae:15:3d:53:ce:e1:29:7d:72:
29:07:01:92:e9:66:23:1d:48:8d:a7:ad:ca:1c:75:97:a8:63:
8d:8a:85:71:5b:83:e8:02:12:b2:e2:13:fe:72:52:53:d5:c6:
1e:99:ca:b1:8c:01:7b:bf:e8:a7:ac:5d:1a:b7:ed:3e:30:98:
4b:74:9e:6a:bb:85:84:5f:a6:a7:2d:72:d3:86:33:08:89:74:
f9:1a:19:2b:1f:e7:e9:1f:6e:6b:63:c3:2d:4f:bf:c1:94:1b:
2e:ee:d2:74:8c:8b:51:3f:b4:8f:0b:87:8e:a2:9f:15:e9:82:
1c:d6:db:2d:bf:8b:c7:b4:a7:93:85:53:7e:9c:7d:3b:b9:e5:
f4:0b:f5:99:a3:6b:47:71:3c:07:0f:38:3d:c9:19:db:00:da:
73:23:02:51:b0:98:49:0a:f8:47:4b:04:77:a4:19:3f:44:c7:
de:1b:3d:cd:3d:3b:c0:a7:fe:47:33:87:4a:fd:c7:b3:f5:ec:
07:25:94:2c:f6:f4:50:d7:39:5d:0f:df:cd:54:e8:c4:21:22:
a9:66:0a:89:24:d2:24:37:4b:8e:98:52:bc:4b:c6:2c:c6:b5:
8b:03:94:c4:22:bc:ef:5f:0b:3c:bc:9b:a8:ea:a7:ca:5b:20:
66:5e:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:33 2026 by rpki-client