Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: y/q3fSBRuuwL9S9LFiqL75RV8otU8BJSzR4s+aZ6euc=
Subject key identifier: FA:30:9D:AF:3B:D4:FF:25:DA:47:9F:6F:FA:4E:DB:C3:10:0B:3C:42
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019D26CD64B6BA4F73084FCCE4FD9E52992D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
2: 4_3T9oqdjGNdYvgcmhfdmg2_xFk.roa (hash: C4ZhYpcFum0fbS3tRySUhTlzAuq5N1/9WgaAqXp5T1k=)
3: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: M/r1UoaB/PD4KxKx7jTbZV0HQ+aDAK1ImBEGRxEq9KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:64:b6:ba:4f:73:08:4f:cc:e4:fd:9e:52:99:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=fa309daf3bd4ff25da479f6ffa4edbc3100b3c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e9:4d:98:e0:e2:e7:1d:aa:77:3a:03:c0:6b:
02:d7:a1:d3:b2:89:ac:d6:e1:a4:38:8a:43:89:fd:
11:59:c0:7d:de:3f:8b:d2:75:fb:d9:4f:8c:bf:e6:
09:34:c6:97:ef:cb:29:bb:7f:c1:43:b7:f8:af:4d:
91:6d:09:4e:10:92:78:ca:1c:a9:32:1d:7f:2a:ba:
31:99:a6:20:cd:d7:fc:ae:3d:1d:c8:db:9f:74:78:
17:dd:1a:77:13:3a:5e:ef:ee:4e:6d:fb:36:ae:8d:
8c:ae:c9:92:bc:bd:9c:c2:4e:e7:54:03:4e:7e:24:
12:96:90:4f:c1:01:ca:75:23:41:7c:c9:e7:f7:51:
3d:dd:b9:cc:46:6a:87:b8:fc:e4:b9:ef:fe:b1:96:
27:6d:e1:7b:c8:66:aa:23:26:9f:73:09:f6:58:46:
8b:1e:fc:54:0f:f1:b4:ad:55:01:af:16:ca:d6:83:
8e:e7:b5:91:37:0a:18:83:78:2c:b0:2b:94:2a:8b:
d6:c1:46:1f:87:c8:e4:fa:a6:8e:23:1e:a2:4e:eb:
50:ca:e2:96:38:38:9a:ff:ca:f9:cc:e1:ba:d2:8d:
1c:43:af:34:56:2d:35:8a:b9:37:52:3f:98:e9:46:
1a:bb:c7:99:09:5f:7a:e5:2d:0f:b7:ba:a7:33:ca:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:9D:AF:3B:D4:FF:25:DA:47:9F:6F:FA:4E:DB:C3:10:0B:3C:42
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1d:fb:bd:d6:37:fb:8a:38:e4:02:8a:46:8b:21:34:0c:53:
50:38:88:c9:fd:74:cc:18:30:02:7e:34:f9:68:1d:d9:72:80:
f6:52:6c:59:1c:47:8f:f9:66:68:78:f7:cd:0f:69:b8:88:b5:
fa:26:0a:80:6b:9f:9e:fc:8b:42:9c:33:6e:6a:0d:59:4e:fc:
e0:f4:64:ee:f1:65:3c:32:83:25:0e:2c:fc:4f:e6:ac:2f:bf:
53:02:ec:ca:5f:0a:d0:c8:30:03:16:3f:cf:83:75:e3:bd:5e:
0a:0d:ce:5a:b0:4a:72:95:3b:51:b7:8b:d8:33:63:0b:4a:6f:
e9:4c:ae:1b:49:c2:07:22:4d:e5:77:f0:1b:e9:44:6f:6a:d9:
d6:ef:20:57:4b:9e:43:75:7f:1e:c1:7c:d4:d3:5f:7a:2f:bb:
a9:ea:29:d1:a4:f8:3d:5c:8a:19:5d:52:7a:87:61:ae:21:d3:
e0:39:c6:61:18:77:3b:9f:bb:e9:86:ab:03:c1:6e:77:25:5a:
6d:fe:52:58:af:87:37:30:38:52:8d:b1:29:fe:b1:7d:01:3c:
26:19:5c:97:62:5f:dc:9a:60:cb:1f:49:fa:fb:9f:2e:20:7c:
c1:06:c8:c6:ba:bd:6a:dc:5b:eb:26:a7:f9:e5:43:63:fc:03:
29:1d:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:40 2026 by rpki-client