Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: j6Yv+3tP31dlaCnYliNkYwk6mT7Z/ddmxXBaJ3PHBv0=
Subject key identifier: 2C:86:4C:4F:2B:6F:1D:97:25:C8:4B:C2:63:6A:FA:A9:4F:33:B8:63
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019CC9AC97CB53183789E08E5F19AA414A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 030D
Signing time: Sat 07 Mar 2026 19:00:57 +0000
Manifest this update: Sat 07 Mar 2026 19:00:57 +0000
Manifest next update: Sun 08 Mar 2026 19:00:57 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: r8NWZIVi9OD2TGFHFNFcP97dFNI2wHrl5JSEm7Anc6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:97:cb:53:18:37:89:e0:8e:5f:19:aa:41:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Mar 7 19:00:57 2026 GMT
Not After : Mar 8 19:00:57 2026 GMT
Subject: CN=2c864c4f2b6f1d9725c84bc2636afaa94f33b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:9e:43:cf:2e:3a:50:fd:a7:08:73:f4:09:
95:36:35:00:4a:ba:36:e9:05:26:72:4b:3f:0f:df:
35:e7:e9:d0:05:59:64:52:19:f5:f0:c8:c3:4a:55:
bb:d8:53:99:64:56:e5:29:40:39:7b:6d:47:02:d6:
d3:36:b3:c6:ca:ce:00:aa:24:58:5e:03:05:6a:e5:
b5:00:8c:c4:ec:57:5c:9d:cd:02:ff:e0:e9:e3:b1:
a4:ff:97:a4:8e:55:bd:30:29:d1:dc:ff:49:48:a0:
ed:85:8a:77:bc:ff:c6:72:92:26:52:1e:ef:64:66:
c6:91:b4:e0:fd:d6:86:49:7b:22:62:e3:e4:cf:ec:
ab:1a:7c:12:b2:3f:32:ae:6d:0d:ee:7b:c9:51:fd:
fe:d0:d3:73:c4:44:af:da:45:47:70:35:23:98:11:
d5:46:13:68:5a:1d:3c:3d:1c:8f:63:08:ae:3b:2a:
ac:f0:f3:7a:c5:47:46:42:a5:45:f7:3a:3b:dd:50:
07:3f:f5:f0:38:d1:32:09:11:4e:1c:7b:1f:36:2e:
fb:4c:87:f2:48:e3:1a:35:45:00:68:55:0a:84:d7:
76:5a:11:40:8b:0e:25:83:f1:e5:7f:1b:88:48:ca:
83:87:b3:81:bc:47:f8:2d:38:43:93:c0:90:8b:97:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:4C:4F:2B:6F:1D:97:25:C8:4B:C2:63:6A:FA:A9:4F:33:B8:63
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:7a:5b:08:7f:44:17:05:7d:44:5d:25:23:6b:ea:7d:54:
6a:51:25:3d:29:b7:d9:d0:27:e0:4d:12:c7:6f:98:82:6f:15:
c1:f8:dd:9c:37:ee:b2:e0:50:8f:6b:7b:85:b9:15:b0:1b:a6:
0a:ad:10:99:02:78:eb:b1:bb:aa:52:6b:17:9c:dd:41:06:2c:
c8:2a:44:d7:53:1e:7b:b7:81:6b:62:c2:05:a5:53:08:70:20:
be:4c:8d:ce:ab:c5:57:ab:3b:3a:7c:7d:3b:04:bc:01:9f:19:
b9:ab:ca:86:51:72:1a:cd:58:ff:e0:66:8c:dd:aa:27:e3:7a:
c5:c8:10:0b:bb:01:f7:d6:5b:90:88:1e:4a:19:51:84:57:c6:
9e:8c:45:0a:ce:75:75:bc:d8:60:16:e7:b8:39:b6:f4:c4:f7:
1e:0a:f8:99:62:df:0a:8e:cb:0f:9d:af:12:46:b9:1d:e9:15:
0c:5b:f5:41:01:9e:27:f6:ec:1f:40:c5:d4:83:1a:ce:bc:fe:
04:fd:64:76:d3:b0:3e:5c:32:17:9b:d5:60:2e:f2:73:56:9a:
43:ae:11:b8:0c:71:5d:54:bb:02:69:65:7d:28:5a:c4:d6:53:
4a:08:9f:c8:c8:33:9d:ab:a4:6a:12:66:bb:db:10:1e:bf:5c:
79:b9:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:46:30 2026 by rpki-client