Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier: o4qpyJDNZlJSFAIG7n1Z4tFVksa4Cti5EdFoEgy6xco=
Subject key identifier: A2:0E:A6:37:B2:C0:0B:00:22:EC:DF:1A:4B:7A:94:9E:9C:6E:35:11
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 019D25BAD3A207EC7BF73050281C351F86C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number: 11C9
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: QXvdf-kfkCqDOGFDPxtMYLWrQHI.roa (hash: f3NerkrqCiw7WLEljVvu/M9+wfwW4SsFhdBrrw3Fl+8=)
2: U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa (hash: jc+b8+PFodDUod3IoDVdMM++eET9wVKeCNE2IXdwBOs=)
3: UT82bVvbFZN0Klu1mqOTYQBNxWw.roa (hash: oyZ/B5zzSvaRc9Ctci5GyXXQUAialxundovqq61f2VY=)
4: Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa (hash: T3NFEwCtciElA5xvLnKd1BMF5VD6hCHMxPdJ+yTHW8k=)
5: f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa (hash: QWEHUEuCQFEx3Ifs/5uJ3ysgwmoEufGpwhglHF6YQdo=)
6: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: uzEJ4zYT8LBbvYEU2YQN7Pw8aeqERuXkvyemC4G7A5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d3:a2:07:ec:7b:f7:30:50:28:1c:35:1f:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=a20ea637b2c00b0022ecdf1a4b7a949e9c6e3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:7c:84:b2:7e:85:9c:32:84:8d:32:19:ae:
53:e4:b1:47:bb:05:0e:b0:1d:6a:13:db:48:7f:91:
d1:b6:33:06:05:59:4f:1f:66:bf:b0:cf:1b:d2:27:
c2:f8:30:1a:c2:e8:f7:dd:cf:44:6c:af:00:c9:73:
ea:d7:e1:39:89:40:58:de:05:a9:84:34:8b:2c:20:
78:2c:1c:2b:ed:e9:e0:11:b5:a8:65:10:7d:e0:4e:
c7:cc:19:9e:08:88:a5:0e:d6:e9:67:ed:ee:a1:1b:
d2:13:2a:0a:14:38:15:9e:90:6f:4b:b7:ac:d7:44:
5e:e5:2f:c8:2a:96:08:a9:14:48:81:b7:9b:9d:20:
4b:13:46:0d:2f:d0:7c:dd:e5:28:7c:d4:94:1f:04:
c1:93:00:48:c2:79:64:cf:fa:4b:ee:f4:82:2c:ed:
7b:2f:a7:4a:ae:ac:7c:f2:e9:e8:88:26:e7:26:7f:
91:a0:ae:fa:e4:c6:4d:d5:de:5a:e7:47:8f:1e:70:
c3:12:cd:32:be:5e:2a:f4:0f:eb:a2:5a:d1:fd:4d:
03:1b:82:2d:bc:94:f2:0d:d6:95:39:af:65:dc:33:
ca:74:80:e9:a9:02:0d:eb:3e:34:85:ec:af:23:21:
99:1f:e3:b5:e5:7b:a0:ee:61:ce:7e:33:20:73:1f:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:A6:37:B2:C0:0B:00:22:EC:DF:1A:4B:7A:94:9E:9C:6E:35:11
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:2c:0f:ba:80:ff:0d:f4:ad:91:81:ec:88:b8:a5:28:27:
50:b8:fc:b2:ad:c0:f4:66:1f:1f:b9:46:4f:76:52:6a:39:85:
83:03:66:bf:b4:24:c7:15:ef:77:b8:2f:24:06:3a:8f:52:41:
a8:2d:e5:da:5b:f8:ff:d2:be:dc:20:f8:8a:5c:30:39:7a:98:
91:e6:c2:c5:f1:6e:d8:52:3d:c5:94:2b:06:d3:73:59:1d:a5:
15:4f:93:56:f2:d3:20:38:41:bf:8e:2f:8d:93:0b:ef:d0:b2:
43:bb:f0:10:99:71:b7:38:3e:cf:6e:80:c6:34:a5:b0:09:00:
1b:7d:9b:5e:38:13:eb:56:cb:62:c9:65:bf:6f:6c:f7:54:ca:
f3:8b:9c:b8:a1:4e:56:2e:25:c9:99:50:46:64:2d:99:91:4d:
00:1d:c4:a6:55:46:9d:8f:39:1d:fc:6f:55:ff:8b:98:f4:78:
d1:50:d1:74:8b:b6:c8:c6:32:64:e9:2a:c6:5f:19:ff:fd:7c:
e0:49:19:61:89:3e:6b:bc:7b:ab:b5:f9:73:d2:78:fe:e8:1e:
cb:04:20:47:2d:7c:34:47:50:5e:f5:a0:49:8d:22:f2:c4:53:
de:68:4b:7b:4f:be:23:68:77:69:f0:2f:a3:96:71:0f:66:62:
fa:e4:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:22 2026 by rpki-client