Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier: lRqtPSDqqyxmN0F6RqZPy8KocZK4kgHdxA95LsxtEdg=
Subject key identifier: 65:F9:24:43:AE:9C:03:B9:D1:95:8D:42:76:B2:18:75:DE:F5:C6:9C
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 019D29610C1574EEFA29DF31A6A3ABBFD851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number: 17E4
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: Ty0AHGlJ9RoCTN7szHoodFNrVgY.roa (hash: CDSZ7X9fhOdv3vxjKS4CoPN0JEb8cRxrZ3+xOxMLrhk=)
2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: UbyNd9rb5X5TbBbyhkddZKJxFosEn7qud/4PjlyIJ8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0c:15:74:ee:fa:29:df:31:a6:a3:ab:bf:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=65f92443ae9c03b9d1958d4276b21875def5c69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:5c:a7:8c:28:4b:8c:19:97:61:fb:3d:8e:
19:b8:ec:77:fe:d5:6d:f4:b1:89:00:35:8b:bd:e2:
cf:5b:db:0e:b3:29:9c:13:33:b0:f7:ba:71:ae:e9:
e8:d7:83:37:53:3c:68:8e:0c:45:8c:57:5d:b7:11:
cd:07:a4:2c:14:0d:12:29:7d:91:bb:49:16:56:72:
b4:6c:0b:a7:f9:b0:b0:48:28:cd:2f:15:b5:a6:8b:
ea:c0:a3:df:6f:16:5f:ae:83:e4:f6:5b:ac:df:2c:
cb:e1:ca:31:b2:f0:84:00:d8:86:2c:f7:9f:c6:4d:
1b:53:83:e4:8a:c8:11:54:13:f4:ff:05:6f:11:f2:
2c:c3:e8:b2:cc:13:0b:cc:73:07:8d:1a:f6:73:96:
28:69:49:68:2d:68:4e:a5:20:00:5e:bd:a2:a8:2e:
0d:d2:f5:ec:dd:ad:29:ce:f0:5f:d5:b6:9c:1e:46:
03:c7:c2:2b:46:8e:82:3a:e1:d3:ea:3f:d4:d7:5a:
d7:49:b0:20:b0:1f:e1:c8:b9:fb:76:ac:a9:64:61:
74:85:41:3b:f0:5f:26:7e:66:de:bc:8c:a1:e6:a1:
68:de:1a:e5:f1:8e:c5:d0:90:fe:ef:a6:b3:6a:ac:
78:e7:54:00:d7:f4:f9:b6:09:ef:e7:a6:45:61:fa:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F9:24:43:AE:9C:03:B9:D1:95:8D:42:76:B2:18:75:DE:F5:C6:9C
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d4:fc:00:f3:e8:fc:5e:e9:24:55:4e:cd:5d:19:4b:6b:39:
8d:40:65:75:d1:1d:1f:62:de:ef:d3:f6:a0:ed:ac:75:0d:d5:
b6:1e:8a:7b:17:0c:fe:6f:46:7f:be:b1:cf:60:79:70:91:a1:
97:f4:1a:73:a5:e3:96:ba:50:57:5e:87:67:a2:41:d4:1f:9f:
aa:80:7f:c6:cf:49:b3:fe:4c:06:b9:31:a1:c5:7c:e9:59:f7:
e7:d3:e3:5c:ad:25:a3:60:7e:6c:05:8d:4d:31:95:28:52:fa:
c8:39:a5:51:f2:86:e2:3a:9a:ce:c3:7c:8f:a3:44:e3:1d:3f:
6d:ab:a5:ee:ae:ab:a1:63:a0:fe:73:17:72:98:bb:69:dd:d9:
d2:ef:3a:15:31:35:33:cc:80:4b:f2:04:56:e3:53:fc:b7:d2:
30:71:b3:77:c4:37:3d:75:7e:94:21:42:66:a7:da:4d:bb:bb:
3c:3f:db:2b:d0:a3:2e:9c:58:1d:ad:a2:1a:0a:3e:ab:26:9a:
a7:03:c3:e9:54:40:f8:f3:f5:d2:fe:c5:60:ad:59:4d:ff:a0:
45:7a:1d:85:23:06:be:cf:8c:99:32:a0:f4:a0:44:c9:f5:df:
62:da:5c:10:3d:c9:4c:83:f6:a4:22:35:76:0f:72:64:80:ae:
4b:b4:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:28 2026 by rpki-client