Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: MYpjFgap69hQP9XwTQ5znFzM5u1Lzv1c/LxuQPODqhU=
Subject key identifier: 25:A9:BD:E9:6D:F8:D1:E6:5A:13:DB:7E:83:35:53:3F:0C:28:81:0B
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 019D389C153392592C073A2918D1D95DBB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0E80
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: UyjG7mUKw_csY7SyBZFvUhkSaPc.roa (hash: n9HYRjqT7Yx/CpHx7zXXC15FE0G/joD1gI9dynyvC54=)
2: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: RcMYUUR7qf/D5+JcQXqBdbTw67VNUxlTsva8MB3Fpdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:33:92:59:2c:07:3a:29:18:d1:d9:5d:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=25a9bde96df8d1e65a13db7e8335533f0c28810b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:cd:5f:6d:9c:74:bd:a2:fc:a0:ab:e9:a2:
d9:30:1c:c8:37:4f:e4:70:9a:9e:b0:89:5d:64:da:
28:de:82:89:fc:40:73:62:45:68:a0:0e:a7:61:17:
ce:c3:e9:82:34:e1:cc:51:b0:1e:2c:10:52:48:87:
9a:ef:0a:7c:aa:2c:57:9c:86:98:ea:81:9c:48:95:
c6:df:09:47:55:22:56:f8:48:85:37:0d:e0:4f:d1:
3a:d5:e0:b2:6b:5a:4d:2d:bd:dd:8c:eb:48:31:1e:
64:e8:fe:f2:ca:b1:b5:ef:a4:d2:06:81:53:aa:41:
85:d9:b5:67:1f:e0:8f:50:d9:5b:b8:f6:eb:35:dd:
fc:92:2f:4b:c0:f5:62:3b:5a:17:58:b4:16:23:cf:
ae:b6:54:c1:6a:ae:15:52:5d:62:cf:29:17:64:69:
aa:96:7f:11:a3:e4:03:1a:1c:83:0d:75:3d:dc:88:
45:b5:eb:84:88:39:18:7c:ae:8a:a8:4a:c2:af:12:
97:e7:25:11:5d:9e:6e:61:00:49:fd:eb:ee:d6:3b:
39:db:bd:78:ab:87:78:7a:55:05:41:35:72:ee:b1:
11:6a:fb:15:57:99:6e:2b:5a:25:c6:58:d9:ab:b5:
a6:00:db:31:a5:1c:d5:b1:55:35:8b:e7:b9:8e:0d:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:BD:E9:6D:F8:D1:E6:5A:13:DB:7E:83:35:53:3F:0C:28:81:0B
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:7a:11:2b:dd:75:e7:ef:f6:3b:c7:14:b2:ba:59:e1:03:
2e:8d:2a:06:a1:ae:ca:62:a8:ec:5f:46:99:f3:62:ac:09:90:
ee:ac:a3:11:b1:42:de:af:b6:94:ab:6b:97:97:b8:1d:d7:71:
68:40:4c:db:41:81:9f:7f:9f:6d:22:46:47:d7:a4:14:1c:99:
b5:19:6d:d8:c1:ec:3e:19:9d:f6:2b:4d:9c:ee:1f:10:57:b4:
83:2e:d6:7e:b8:58:0b:7c:79:40:2e:d9:70:46:ee:51:df:84:
8d:01:57:0c:4f:d6:97:5d:be:55:ed:8c:8d:b6:67:46:ea:bd:
46:e8:cc:f4:c8:eb:6c:4c:2b:35:29:0d:d7:95:10:18:dc:6d:
de:32:0a:39:8f:eb:0b:dd:c5:79:83:8b:e5:10:ac:be:ee:b1:
25:99:18:0a:05:9d:76:a8:6d:51:44:c4:70:2d:5b:af:5e:af:
f4:e3:99:48:1c:c3:59:0a:b0:dd:e5:82:bd:ac:13:38:c8:1a:
a5:a4:eb:d0:37:6b:92:b5:cf:7d:a4:5e:8e:55:f7:9c:a8:08:
10:09:ac:46:f0:5b:4f:d1:d9:29:c4:16:cd:12:9b:2c:47:2d:
e6:77:ae:14:cd:0a:38:ad:ee:b4:18:81:59:1b:72:40:50:9e:
f3:79:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:40 2026 by rpki-client