Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: NxHORkogTjlwQKZjtxSciiOAxgeWpGcgoY18RzLVjjA=
Subject key identifier: F2:99:52:1D:B5:D2:4A:50:D0:61:55:82:41:CD:D4:0A:D1:9D:CB:1B
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019D2929234272FC9EBC74BF720A0688F190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 08:00:54 +0000
Manifest this update: Thu 26 Mar 2026 08:00:54 +0000
Manifest next update: Fri 27 Mar 2026 08:00:54 +0000
Files and hashes: 1: N4O6L8wZNEXMElPASpRMOUmUr7w.roa (hash: QXAq/udQzlw3nbGli8BGmWpVXE2xd5fftRn8FB6H/Dc=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: r0HKBI8fc7Uoy7EAMNllOdMlKLM276IYG1T9zhZp114=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:23:42:72:fc:9e:bc:74:bf:72:0a:06:88:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Mar 26 08:00:54 2026 GMT
Not After : Mar 27 08:00:54 2026 GMT
Subject: CN=f299521db5d24a50d061558241cdd40ad19dcb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:1b:da:29:67:75:00:c1:39:23:dd:31:6d:
a0:42:06:eb:15:f0:3c:ec:07:17:bd:c4:6c:c0:d9:
6c:cb:0c:b8:48:3b:2b:6e:36:20:c3:5f:60:a6:e0:
30:1a:df:92:1b:fc:4f:fb:4e:00:c8:fa:b8:32:c9:
15:eb:30:31:c1:5d:ab:96:19:5f:56:32:df:40:20:
b9:e8:67:f1:b0:f2:5c:5a:bd:7f:d3:82:c4:c6:fb:
a4:59:9d:46:2c:f1:54:42:a4:c7:e5:1b:ce:bd:f1:
17:17:af:d2:ca:9e:63:fc:1f:bc:3c:86:2d:25:1c:
c5:b6:b0:22:fc:0d:9c:e8:0b:03:91:0d:ae:d7:28:
da:65:0d:bc:ee:1f:f2:c5:8a:21:20:ca:6c:6e:77:
9a:a8:86:28:7a:15:a9:0d:61:87:ee:bd:be:8f:82:
8c:90:df:27:81:63:c5:c2:cd:d3:85:05:10:62:73:
60:30:b3:a2:c1:99:e4:f9:b8:ca:84:2f:1f:de:a5:
1e:72:a0:d1:16:e9:55:60:d8:03:60:19:b4:d0:9c:
c9:04:aa:ae:c7:62:02:da:22:82:ce:85:87:e7:ec:
b7:e1:49:79:df:22:8f:35:11:45:60:c2:d2:d7:16:
17:0f:ed:40:27:12:ba:10:53:00:06:37:26:ea:8e:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:52:1D:B5:D2:4A:50:D0:61:55:82:41:CD:D4:0A:D1:9D:CB:1B
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9c:5e:9e:f1:53:41:4b:c7:6e:ba:cf:cd:d7:f1:71:d1:23:
3d:6f:a1:d8:05:e1:32:4e:34:9c:6e:bb:29:0b:83:7e:71:4d:
fa:e3:e1:df:f2:84:ec:58:50:0e:3e:65:01:db:62:4b:60:a2:
d4:78:a6:48:d5:ba:7d:9c:f4:2a:2a:39:30:42:11:40:ea:af:
c9:a5:54:13:09:d6:3d:ad:5b:b3:3d:c0:94:fe:78:50:79:d7:
a8:64:76:d3:92:96:38:c5:1d:b0:bc:46:d8:44:31:4a:96:09:
eb:e4:3c:62:35:2f:6e:55:65:45:f7:e2:83:09:77:d7:12:b8:
da:f9:76:24:09:32:fd:aa:b9:46:53:e3:53:be:f3:7f:88:84:
2a:ab:a9:84:58:14:84:3a:fd:b4:83:b4:06:7e:69:8b:91:24:
7e:6b:dc:16:fb:d3:83:ac:32:7e:e9:fa:1c:04:82:5c:32:a2:
0f:a8:16:41:5e:be:06:4e:23:16:ff:cf:be:68:e6:f8:40:64:
7c:ca:ce:25:3a:ed:9f:04:6f:5b:1e:20:2e:80:bd:47:45:41:
63:fd:e4:1e:b3:81:81:5f:02:31:49:da:fd:05:82:6e:3a:e8:
53:57:4f:aa:22:cc:e4:ce:72:26:83:91:65:72:94:70:88:ba:
97:3c:c9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:29 2026 by rpki-client