Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: IcCZW98+GmqWTPIN/CWwuQUrYtwlM3aVXXx8888jW/A=
Subject key identifier: 3E:86:41:AD:84:1B:15:8D:2D:37:2B:D6:D6:0A:34:67:FD:C1:39:98
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 019D284D2C44438F6B72C3B33F2CC70A0850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 1608
Signing time: Thu 26 Mar 2026 04:00:39 +0000
Manifest this update: Thu 26 Mar 2026 04:00:39 +0000
Manifest next update: Fri 27 Mar 2026 04:00:39 +0000
Files and hashes: 1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: MV7T5eeG90kWUEyRxz1rKZnRlUzyMaoCO83QCwpZ70g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2c:44:43:8f:6b:72:c3:b3:3f:2c:c7:0a:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Mar 26 04:00:39 2026 GMT
Not After : Mar 27 04:00:39 2026 GMT
Subject: CN=3e8641ad841b158d2d372bd6d60a3467fdc13998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:54:1a:eb:29:40:48:d2:d6:52:6c:fc:a4:
7c:eb:8f:c8:86:5a:c0:f6:e0:7a:c9:b9:1a:78:ee:
07:77:49:9a:df:12:c7:a2:e6:76:a3:1f:83:a3:3d:
88:80:85:67:57:58:0a:d8:37:73:a9:5a:c9:f1:a7:
62:33:25:6e:12:37:41:75:84:01:5a:40:2b:3b:ba:
c8:0e:b9:fc:77:28:f0:f6:92:d5:41:c6:c4:42:85:
20:19:0d:07:15:d8:58:6a:2a:14:d8:e5:5e:64:dc:
cd:9f:c7:a7:ae:1a:3f:d9:ac:a2:06:d9:d3:07:02:
a9:b9:e6:ab:a4:f1:20:3e:7f:5f:fa:7c:49:e4:96:
23:cb:86:3c:8e:9c:d8:6f:fe:68:0a:d8:96:99:52:
97:93:3f:74:e5:c5:ea:38:f9:45:27:84:9d:89:3f:
47:54:30:b4:f8:d5:7f:01:f7:79:49:f0:91:0e:41:
2c:ee:d0:44:61:43:90:4c:e8:ce:67:5d:71:62:a7:
38:fa:48:65:48:21:4b:32:60:67:ad:a8:79:5f:e7:
cc:4d:45:45:de:11:18:f4:a9:4e:db:20:bc:a2:9b:
4f:4d:ab:5a:24:c0:1c:09:14:a8:34:a2:98:bd:57:
a7:85:33:a6:91:05:42:48:3a:ba:d3:c1:66:a6:29:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:41:AD:84:1B:15:8D:2D:37:2B:D6:D6:0A:34:67:FD:C1:39:98
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:16:72:32:92:0e:28:07:71:84:34:5f:34:2d:4c:18:b1:a0:
5d:19:d2:c1:de:ba:f7:50:05:c8:ac:e6:c7:93:b1:4f:14:fb:
e6:94:8c:0c:4a:c5:9b:a0:d9:a2:37:d0:03:95:53:ff:ec:27:
e1:9e:ed:51:20:c9:f9:df:ba:25:4b:5f:16:c6:cb:41:36:0f:
e5:69:02:de:83:a8:5e:cc:e2:2f:44:37:5a:e0:10:62:88:a2:
04:32:46:ff:27:4d:63:d4:10:7b:45:b7:2f:be:da:28:88:f8:
6f:7c:47:1c:b7:1e:4c:4a:4e:41:3b:eb:d6:c9:4b:38:6e:30:
f4:f3:55:99:ac:c6:ca:61:a8:c6:9b:7f:62:8f:e2:21:7c:de:
dd:f2:32:58:06:6e:7d:c5:36:a1:1a:a2:e2:cf:48:56:8c:03:
ae:42:eb:b6:48:fe:1b:db:8b:27:ea:15:f8:77:2b:8e:dc:e3:
56:a6:49:c0:8c:1e:c0:09:4f:4d:0b:d5:29:80:99:60:fe:31:
1f:55:21:85:15:9e:85:78:2f:60:7c:fe:78:80:d1:be:32:96:
72:09:97:9c:2a:6d:60:f1:8a:aa:af:62:75:53:ed:19:8e:5b:
84:00:f7:ab:89:85:b4:b1:3f:23:18:62:64:5e:ac:42:3a:ed:
69:25:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:42 2026 by rpki-client