Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: e3FOcc79/Tqp8Dyz03ivWCnfQj/ESSSKQsk0Kt6eCYo=
Subject key identifier: EF:5F:6C:C2:CB:7C:66:D9:C9:C4:F5:7B:46:3C:C2:CB:94:13:5A:1F
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019D258436280DA5D32D012D1939D2C53D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 1449
Signing time: Wed 25 Mar 2026 15:01:54 +0000
Manifest this update: Wed 25 Mar 2026 15:01:54 +0000
Manifest next update: Thu 26 Mar 2026 15:01:54 +0000
Files and hashes: 1: _ywMYxiU8NbIN1CGjVxjq4SDazI.roa (hash: epZRiBRCbCpE9Pbvl3sOJJDu8ewPmMS8D3a+HxpVf0g=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: UTYgYQhU2V5KOt1k7/HYnM9JRKXz5jWrR0oEzDKesnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:36:28:0d:a5:d3:2d:01:2d:19:39:d2:c5:3d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Mar 25 15:01:54 2026 GMT
Not After : Mar 26 15:01:54 2026 GMT
Subject: CN=ef5f6cc2cb7c66d9c9c4f57b463cc2cb94135a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:94:6d:57:8b:2d:e1:af:73:73:e6:10:15:
13:e5:ff:75:14:a2:15:51:71:f9:45:c6:65:71:56:
d0:73:13:b6:0e:cf:75:44:23:04:08:17:05:0a:74:
19:1c:26:e4:97:1c:38:aa:b9:06:5b:37:a0:e6:b8:
ff:81:b9:0a:72:44:5d:b5:50:e6:63:d9:b5:92:26:
cc:37:94:33:4e:8d:7b:db:b9:8e:d6:c8:77:ce:9b:
46:7a:75:73:cb:ae:e2:de:b2:e1:4c:38:20:40:eb:
ba:47:11:0e:87:e0:7f:d5:cd:6d:13:9e:14:6a:92:
68:64:23:d1:bc:99:68:99:54:79:1d:bd:db:ce:94:
86:36:51:85:c9:9f:aa:3e:84:76:f9:33:f1:81:c0:
a3:8c:d6:70:39:7b:c1:4c:64:fc:84:ca:bd:5b:40:
d3:16:d1:e3:db:31:be:b4:7d:bb:21:ea:bc:75:d4:
77:df:9c:98:7c:32:10:d1:04:02:60:b2:06:aa:8f:
e8:17:9d:b6:c8:82:6f:ae:a2:75:dc:8d:d3:a0:21:
a6:26:9f:1c:b0:86:31:be:0b:2d:a9:13:eb:ee:b1:
8e:7d:6e:5e:41:b3:db:b2:36:bd:8c:d5:25:2a:57:
79:81:9d:54:b9:ea:84:3f:07:aa:a2:35:03:72:0e:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:6C:C2:CB:7C:66:D9:C9:C4:F5:7B:46:3C:C2:CB:94:13:5A:1F
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c5:a6:7a:ff:60:43:30:71:a8:ad:8e:b7:d3:b4:9c:ab:ba:
80:af:f8:d8:56:68:14:a1:10:67:57:8f:bb:7e:a3:6e:df:1a:
6b:31:94:8e:2f:64:7e:99:e9:f0:d2:10:f3:21:43:c3:a4:9e:
03:8f:cb:b9:4a:0b:bc:90:07:3e:f4:89:0a:fc:21:9e:00:7a:
6d:8c:80:25:af:66:ef:03:80:fd:82:55:2d:4d:46:3d:44:18:
0f:46:1e:c5:fa:37:85:41:d4:3c:82:c6:cc:5c:29:03:61:04:
14:80:6b:a4:0c:b9:d0:07:f5:db:c1:f1:11:71:42:67:1f:af:
bc:15:f6:9a:46:e0:9d:e8:0f:a6:f8:cc:5e:a8:d8:5c:c6:d0:
6a:1e:34:26:d7:2c:4c:ae:19:77:94:0a:9d:8a:ee:90:48:d0:
63:fd:fb:e5:93:0e:39:54:90:e6:34:f5:ee:4a:67:9b:0f:03:
f6:ae:24:15:5a:cb:c8:6d:f5:c1:70:2b:c7:59:83:6f:19:46:
3d:8c:51:59:fd:08:5f:3a:c9:5e:dc:7a:b0:92:a1:6d:c3:f6:
02:99:85:1f:ef:75:2a:f1:35:1b:53:fa:d9:2b:fa:4e:0c:4b:
cc:9b:fc:5a:a9:14:1a:f3:87:b5:99:b8:af:5a:82:15:3b:74:
d2:a9:d7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhDYoDaXTLQEtGTnSxT12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi
ZjcwMTYwHhcNMjYwMzI1MTUwMTU0WhcNMjYwMzI2MTUwMTU0WjAzMTEwLwYDVQQD
EyhlZjVmNmNjMmNiN2M2NmQ5YzljNGY1N2I0NjNjYzJjYjk0MTM1YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D2UbVeLLeGvc3PmEBUT5f91FKIV
UXH5RcZlcVbQcxO2Ds91RCMECBcFCnQZHCbklxw4qrkGWzeg5rj/gbkKckRdtVDm
Y9m1kibMN5QzTo1727mO1sh3zptGenVzy67i3rLhTDggQOu6RxEOh+B/1c1tE54U
apJoZCPRvJlomVR5Hb3bzpSGNlGFyZ+qPoR2+TPxgcCjjNZwOXvBTGT8hMq9W0DT
FtHj2zG+tH27Ieq8ddR335yYfDIQ0QQCYLIGqo/oF522yIJvrqJ13I3ToCGmJp8c
sIYxvgstqRPr7rGOfW5eQbPbsja9jNUlKld5gZ1UueqEPweqojUDcg73UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9fbMLLfGbZycT1e0Y8wsuUE1ofMB8GA1UdIwQY
MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt
MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4
LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMWmev9g
QzBxqK2Ot9O0nKu6gK/42FZoFKEQZ1ePu36jbt8aazGUji9kfpnp8NIQ8yFDw6Se
A4/LuUoLvJAHPvSJCvwhngB6bYyAJa9m7wOA/YJVLU1GPUQYD0Yexfo3hUHUPILG
zFwpA2EEFIBrpAy50Af128HxEXFCZx+vvBX2mkbgnegPpvjMXqjYXMbQah40Jtcs
TK4Zd5QKnYrukEjQY/375ZMOOVSQ5jT17kpnmw8D9q4kFVrLyG31wXArx1mDbxlG
PYxRWf0IXzrJXtx6sJKhbcP2ApmFH+91KvE1G1P62Sv6TgxLzJv8WqkUGvOHtZm4
r1qCFTt00qnXMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:34 2026 by rpki-client