Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: jbX/GHFG9CWMdCIxLJQ5bG0EOaFwcou5/7I4WlKbfIg=
Subject key identifier: 03:17:1E:3A:84:48:2E:7E:A8:98:52:44:0A:25:32:B9:CE:9F:34:7F
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019D25F1BDB4EB0FF130D6BC121CA3DB678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0B55
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: +IVVjvGJC571hPG5OqBKM5PaF9GHa60FCCt99JYSU8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:bd:b4:eb:0f:f1:30:d6:bc:12:1c:a3:db:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=03171e3a84482e7ea89852440a2532b9ce9f347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:d6:70:72:0f:10:cf:29:70:7b:c5:33:c5:
ac:09:dc:fc:8d:ac:38:34:a5:f5:6d:66:f1:0c:01:
3a:4a:ee:06:75:25:df:db:92:59:62:dd:63:99:1b:
f2:61:82:19:2a:7b:65:32:79:a9:c9:c7:73:2e:3f:
e7:83:b8:a9:63:a7:3c:ff:05:72:42:9f:b5:3c:b6:
4b:be:33:7e:19:5b:51:e5:8a:0c:98:29:00:46:ec:
55:8f:b6:43:3d:3a:cc:2f:c8:8b:a6:06:52:26:c8:
73:8f:ef:88:ee:fe:12:d8:a8:15:6e:c9:98:62:8e:
0e:d1:f8:a8:6d:a4:78:85:1c:c3:e3:61:5c:fc:a9:
c8:91:94:bf:f8:07:2a:31:e2:1e:98:c4:ec:34:e8:
9b:85:2c:81:42:c3:4a:d0:68:7c:24:a5:0b:f8:5c:
06:66:31:b5:0d:4d:ec:e4:0f:0e:ae:5b:d6:f7:32:
3a:fc:ed:b5:ee:5d:e1:e6:0d:4f:78:f4:ba:22:b9:
dc:f8:91:7c:4a:16:4d:59:e6:0a:97:5e:05:96:95:
2d:95:e9:dc:35:2c:82:6c:c5:d1:a5:9e:a8:c8:1e:
0b:c7:e4:d7:86:1b:18:1e:b9:de:af:80:86:2a:4c:
11:01:fb:d4:c9:c6:e7:ab:30:80:1f:6b:66:14:85:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:1E:3A:84:48:2E:7E:A8:98:52:44:0A:25:32:B9:CE:9F:34:7F
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:35:8c:68:17:73:64:04:be:dd:a8:09:e1:a3:42:65:53:96:
78:cd:b5:fd:bc:d1:5a:a1:9a:46:9f:d0:d4:97:8c:4b:a4:2d:
9e:49:bd:cb:5a:62:34:26:43:7c:04:42:3c:ab:6b:56:60:4a:
b0:af:96:ff:bd:eb:39:41:52:92:c5:3f:a2:93:b9:ec:40:1f:
88:a5:2b:a3:87:8e:44:3a:74:86:18:c8:e0:6b:3e:7c:d2:83:
60:d9:4f:9e:39:83:5d:fa:f6:56:62:79:42:e7:59:44:de:df:
c7:cb:f3:ef:e7:2f:c9:2d:3c:f2:c9:38:6c:b7:a4:54:48:92:
38:bd:3e:0f:30:63:47:d0:31:a2:e9:ee:d3:10:6e:ff:f2:cf:
4b:5b:95:aa:42:ba:07:fc:5f:c6:92:93:93:a5:bb:f6:e0:14:
d0:8b:53:2a:e7:4b:de:99:02:12:0c:cd:d2:83:96:49:55:cd:
f0:f9:1b:08:26:3f:11:91:a0:f5:6d:76:71:84:5b:ce:df:b4:
81:b9:58:95:69:26:38:11:16:24:76:52:65:73:13:05:32:79:
59:53:d9:bf:10:7e:aa:d5:18:90:3a:68:90:ed:76:f0:df:39:
08:f3:24:8a:65:27:9c:61:5f:ce:70:b8:ef:63:f2:92:82:46:
ea:f9:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:15 2026 by rpki-client