Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: GQvbaTIqIAni865jhvzQFXPuss7Rk2ICbPGOtwjyPrU=
Subject key identifier: BB:27:05:F2:2E:C5:4A:0B:D7:E3:F0:E2:05:48:D2:CD:E7:55:15:C1
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019D25F1EAB68B0408A2834F202098E818C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:44 +0000
Manifest this update: Wed 25 Mar 2026 17:01:44 +0000
Manifest next update: Thu 26 Mar 2026 17:01:44 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: TQULeGcbQbCSi2TvZ6RkaNnoKvN1c27rnzf8lEXVCfI=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ea:b6:8b:04:08:a2:83:4f:20:20:98:e8:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Mar 25 17:01:44 2026 GMT
Not After : Mar 26 17:01:44 2026 GMT
Subject: CN=bb2705f22ec54a0bd7e3f0e20548d2cde75515c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:f3:fc:ad:3d:6d:04:b5:e6:fb:52:3c:1d:
06:4d:87:b5:33:94:7d:31:8c:c5:d9:34:7e:86:ed:
96:69:11:c7:d3:b0:2e:c7:bc:a4:1f:a1:98:79:d6:
3a:1b:a1:df:fd:5c:34:85:7f:67:21:3d:27:4b:bb:
11:f9:00:4a:f5:21:07:ec:40:a8:3c:af:c1:4d:dd:
49:31:68:c1:4f:49:f6:3d:47:b0:e6:88:91:31:3f:
f7:08:83:88:1a:ba:05:0c:b6:98:77:b2:c1:fc:10:
65:63:66:bd:bb:83:20:3e:cc:71:1e:eb:4b:e8:d8:
3e:d4:9a:10:d3:2d:a9:7a:a7:80:9b:3c:11:50:58:
70:0b:f7:24:b2:37:3c:b3:a1:80:41:94:84:98:6f:
c0:71:51:82:80:f6:cb:9f:eb:4a:f4:d2:7f:1d:42:
b7:f0:a3:92:74:33:1d:7e:b6:5b:4c:f0:c3:43:0f:
8e:1a:3c:92:19:07:e1:dd:cc:88:db:f1:c4:3f:89:
da:f5:58:fd:e0:97:85:ff:d2:9e:a3:7f:31:81:a2:
41:b6:dd:54:de:28:b4:65:2c:88:9a:62:55:00:d8:
58:c4:94:77:7e:f2:12:74:ae:99:42:af:bb:3f:5b:
78:87:28:4a:4b:ee:8f:d6:04:60:d9:b6:64:92:e6:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:27:05:F2:2E:C5:4A:0B:D7:E3:F0:E2:05:48:D2:CD:E7:55:15:C1
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:a0:94:2d:02:ce:24:83:cb:09:cc:e4:db:84:8c:b3:da:
53:0d:3a:4a:ac:32:a4:b5:bc:d6:fe:0f:a7:c7:89:e5:70:03:
23:58:31:ed:77:e3:f6:14:f0:c5:6e:27:dd:56:1e:27:d6:b6:
50:77:81:2d:f7:23:e4:4d:74:0c:04:74:02:a6:4a:6e:ac:85:
c6:58:92:0f:90:f5:2a:20:df:e8:9f:ce:90:c2:cf:80:60:d3:
99:97:e3:57:79:30:04:3f:80:3d:30:98:e6:f3:53:dc:cc:05:
4e:fd:50:08:9b:ed:7a:bb:1e:00:82:7f:15:99:3b:24:5f:55:
16:70:b9:f9:30:4c:72:8b:e5:b9:16:87:ca:74:9e:f9:93:db:
c8:19:b7:86:48:4f:7f:3e:75:d8:80:cd:c0:74:7d:66:73:32:
69:0b:be:f3:58:04:e3:71:c7:a9:2b:1a:63:36:ac:31:3e:82:
45:60:29:42:49:f8:7f:26:3a:ae:38:33:be:e6:cb:e4:bc:b2:
15:85:10:d3:b9:5f:eb:72:85:de:55:42:e4:7d:93:0c:fb:e8:
3a:e8:1a:af:45:c0:5e:b0:07:26:95:e9:af:1c:9d:e3:01:3a:
ad:49:51:82:32:44:c2:ed:7a:3c:de:31:af:f1:9b:ed:6e:0f:
63:d0:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:02 2026 by rpki-client