Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: 4LQrC5UIVgn7kkgQ/4sNQjnFKJIQMl5DKmTp5Ge5moo=
Subject key identifier: D7:FB:C2:98:9E:FB:69:E1:C8:07:9D:C6:05:9B:CF:4B:D1:28:10:78
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019D25F1F36E032873AF10DDB1B4BE57D0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0BD1
Signing time: Wed 25 Mar 2026 17:01:46 +0000
Manifest this update: Wed 25 Mar 2026 17:01:46 +0000
Manifest next update: Thu 26 Mar 2026 17:01:46 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: jFc9tE3CO6aPqctpJDCnsu6GcN+2wBnU06/T+hmi4l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f3:6e:03:28:73:af:10:dd:b1:b4:be:57:d0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Mar 25 17:01:46 2026 GMT
Not After : Mar 26 17:01:46 2026 GMT
Subject: CN=d7fbc2989efb69e1c8079dc6059bcf4bd1281078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:f4:24:59:84:d3:29:46:70:03:e0:76:fd:
24:70:65:5d:09:3e:56:c8:be:3d:7e:ea:42:7c:e9:
ba:8e:48:8a:2f:f0:59:eb:7b:da:ae:ac:67:1d:12:
27:19:3f:ac:f5:45:37:dc:e4:b8:26:fe:19:13:74:
17:a2:ad:07:a1:ea:1b:0a:57:0e:6d:61:e7:13:c8:
3b:74:2f:8e:e6:1c:00:58:61:e4:37:6f:75:6b:a0:
2d:0d:2f:93:8d:b1:65:43:7b:f8:9d:ad:57:ef:ba:
15:c1:08:00:35:23:ca:50:2a:d7:e4:dd:a1:13:07:
80:09:9b:50:1d:0c:0b:09:9d:c1:45:4f:dc:17:f4:
1a:8b:ac:85:d4:e2:c8:e2:e5:da:93:d2:3e:c8:e6:
cb:65:ea:cd:0a:5f:11:39:11:70:5b:a1:99:69:bc:
e0:14:7a:82:7a:74:28:60:c9:4d:eb:74:35:53:ee:
fc:9c:b2:63:b1:4f:e6:73:69:dc:b4:e0:78:79:c6:
fa:3f:37:e0:af:87:a3:57:36:d1:35:81:dc:b8:0d:
4a:72:74:81:98:50:ac:c2:d8:73:b9:9e:bc:f4:d6:
c4:55:ec:00:f5:3f:01:8a:30:3c:8f:5d:16:23:14:
68:fd:3a:fb:0c:6e:93:b3:07:07:49:a7:59:48:4a:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:C2:98:9E:FB:69:E1:C8:07:9D:C6:05:9B:CF:4B:D1:28:10:78
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:b5:11:83:86:94:8e:df:08:aa:0a:39:b5:c9:38:66:f1:
31:6c:ae:2e:cf:0c:a0:4b:ae:4d:89:67:7b:2b:3b:bc:7b:d1:
65:20:4d:4a:8f:31:65:af:fb:69:23:23:ff:c2:92:c5:eb:b7:
06:01:c9:b2:a1:d1:3d:b5:ad:31:06:3d:aa:5e:2e:fc:eb:60:
78:f4:e6:e2:5e:fe:2e:48:d8:29:d4:ca:82:b7:94:75:b9:1d:
1e:86:62:73:54:58:76:0c:7a:1b:1c:e5:2f:e1:39:5f:a2:17:
4f:a9:57:8d:3a:2d:af:bf:e8:8b:05:34:23:af:5b:bb:e9:1e:
b5:84:0c:5d:20:55:dd:03:2c:d7:e6:14:f4:81:18:08:1f:97:
ba:c1:15:4b:10:09:82:cc:d1:57:61:7d:27:cc:29:5a:42:5a:
84:22:69:dc:f3:f2:23:73:a8:c4:a0:0a:c5:f0:22:5c:c0:b2:
34:de:c3:df:06:3b:13:d7:c3:72:0c:3f:75:5f:c2:78:4c:03:
82:d9:44:b1:d6:29:03:97:a0:46:5c:ff:b1:3e:9e:c4:de:c9:
f0:e1:ac:37:11:f1:69:0b:18:5a:2d:bc:b1:49:b6:c4:d6:d1:
af:59:f5:51:c8:af:9d:c0:5a:7d:6e:3d:06:5a:30:1a:aa:d0:
20:97:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:32 2026 by rpki-client