Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
File: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft (raw, json)
Hash identifier: uoB91icd357o2/0WZIJLojG0W0vYN9s4AlEWE/s0Xsg=
Subject key identifier: 5C:FD:60:13:15:8D:0C:5B:BE:F1:AB:A9:3E:84:BC:0C:78:89:35:AB
Authority key identifier: 9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
Certificate issuer: /CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Certificate serial: 019D37C08DF187D0F944931BA092D0015ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
Manifest number: 01AD
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl (hash: txk/oV5BxMh9RbsfKK9irzsUsYHWiY0IlS6h0oY4zxs=)
2: pnGOn8liKT666FoyADjTDFWrQPM.roa (hash: sCPE61kJy1tWNU9B8wscAHYWozWTd1ojRy1LFF5QEjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8d:f1:87:d0:f9:44:93:1b:a0:92:d0:01:5a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=5cfd6013158d0c5bbef1aba93e84bc0c788935ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:b9:5a:ab:8f:39:e1:5b:da:02:ce:70:42:
5a:3e:5f:c8:10:54:98:b3:cd:03:20:86:6a:b3:49:
e6:53:1b:8c:17:88:fb:b0:10:b6:ec:63:d1:5a:dc:
f7:d9:ed:13:ca:f7:d7:67:bd:21:c5:f7:c6:04:50:
03:3e:22:98:62:3a:c2:d7:60:76:61:a9:bf:f8:7d:
b6:56:3e:85:08:19:c1:be:09:79:3f:41:29:5d:96:
a8:d0:f6:aa:cd:98:a8:a8:8f:b2:ed:ae:4f:4a:e1:
f3:c1:a4:7c:c9:92:e8:ba:d1:03:cf:a7:db:81:14:
b8:46:fc:1e:18:d2:9d:3c:65:5f:9a:cd:11:c1:cc:
5f:46:c7:b9:15:85:ff:f2:19:1a:dd:a8:3b:54:54:
d9:90:b0:71:84:52:8a:f5:f4:8f:17:b5:51:b2:71:
79:e8:d3:f9:f4:48:07:e4:39:da:3e:34:49:1c:84:
08:4a:e4:13:47:ee:5a:99:bb:98:d4:85:e6:40:7c:
ba:94:77:0f:fc:df:44:84:b5:53:b2:0d:49:b1:48:
50:ad:08:09:21:fa:65:cc:ea:a3:c1:83:34:a8:97:
31:a9:8a:e7:bc:81:42:3f:dc:d9:60:ce:e4:c8:7e:
2e:df:fa:15:01:83:0f:ab:a6:4e:ef:9d:c7:96:64:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:60:13:15:8D:0C:5B:BE:F1:AB:A9:3E:84:BC:0C:78:89:35:AB
X509v3 Authority Key Identifier:
keyid:9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0b:77:8b:60:5e:69:a6:4d:79:97:6d:a7:7f:de:29:bb:8c:
1a:a0:cf:c0:ea:0b:57:6e:fa:88:b9:30:c2:7b:06:92:63:7f:
00:ab:0b:58:8a:49:e0:61:fe:32:a2:11:d2:1f:6c:ee:5b:7f:
9f:98:11:3f:8e:2a:34:a9:8e:61:80:a8:dd:84:fb:14:91:81:
97:6e:fc:90:32:37:16:88:2e:8f:7d:e2:a1:3d:92:a1:51:fc:
09:81:a6:91:19:08:57:17:60:3c:f3:e4:ef:76:24:fe:c6:00:
8c:57:db:6c:8e:dd:06:11:a8:aa:27:c5:83:d0:dd:8f:e6:4c:
0f:31:db:1c:6c:16:60:fa:95:37:76:6c:bd:0c:e3:8b:2f:d1:
83:f5:56:9f:5c:29:5e:8a:22:2d:90:b7:12:9d:c5:32:ae:b5:
3f:df:cc:45:f8:69:ec:b7:d2:35:47:54:1d:aa:ee:2b:e9:f8:
19:b6:0d:49:c0:67:87:50:ea:a0:95:17:9c:ce:2a:95:28:9a:
11:c6:86:2e:c1:5f:6c:02:95:cc:08:f1:b7:74:d3:b5:64:a6:
c0:63:c2:ce:b2:7b:08:b2:2f:2d:ad:89:8c:b4:ba:0e:80:cf:
a7:38:29:d9:f8:1f:35:d9:16:85:a2:6f:29:f1:4c:a1:64:ce:
89:74:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client