Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: 6b6XBjeJuBoPTFMUsaEnYt6idZ7lXNywFnkXc7HXVVg=
Subject key identifier: 67:3E:1D:0E:41:C3:DC:EC:AC:02:E0:B3:38:22:CF:F3:46:D8:25:F5
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019D265FF7F9B0A519EFF88D3064564DAA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 074B
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: fEeplWw_YpRC4Ay1QIQCqiNzEng.roa (hash: Twh3oQrfCjhr2qTmHSOUea5jfVO2MWIW03LajOLIrEA=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: JBImKUxN5UzLePIyfRiRdddcKjVuZaFyh32PPOnvaxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f7:f9:b0:a5:19:ef:f8:8d:30:64:56:4d:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=673e1d0e41c3dcecac02e0b33822cff346d825f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:7e:77:d4:8d:58:90:ae:43:4c:07:85:29:
0a:59:f0:b1:d5:6c:13:cb:de:b0:31:3e:d4:01:d6:
b6:43:2c:2e:f6:a8:4e:33:96:bb:a7:bd:71:43:32:
fe:c3:77:37:a0:34:cf:0e:af:5a:d5:1c:7f:0e:f6:
6c:3d:ec:e7:b8:b0:61:4a:d1:69:76:1e:0c:40:5c:
28:54:85:76:bb:14:2b:37:0d:88:c4:e7:8a:1b:56:
49:c9:73:fe:c9:86:bd:50:c5:75:fc:b2:de:7b:4a:
0d:25:c5:e9:c6:ee:03:22:b9:1a:6f:22:76:fc:dc:
42:5d:78:ba:fe:c1:2a:60:b8:70:5b:52:dd:66:83:
a2:7b:ec:c3:cc:98:7d:77:9f:b2:4b:93:6f:23:3a:
c3:31:cd:b6:85:eb:89:3c:bf:b9:aa:69:03:29:2f:
80:40:bb:54:01:93:7f:c4:89:e8:18:e4:f1:0a:f8:
2d:77:3c:b0:ac:d7:b8:22:98:95:e4:36:34:69:42:
ba:6e:34:d2:41:81:1e:e6:ba:1d:20:b4:be:14:58:
05:b2:c8:7a:9c:84:ce:4a:3d:5d:c6:e0:a5:3b:6e:
d9:23:48:93:65:87:3b:b3:62:e5:c4:8c:b7:bd:07:
54:67:bf:98:e6:36:dd:63:d2:e7:5b:ae:cc:49:61:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:1D:0E:41:C3:DC:EC:AC:02:E0:B3:38:22:CF:F3:46:D8:25:F5
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4a:d1:46:4e:b6:22:b6:5f:68:71:52:e0:38:6a:2b:47:16:
49:c2:7f:a8:db:d4:8c:c0:41:17:57:30:11:e9:13:1c:7b:bc:
99:ca:65:ea:9f:fe:f2:d7:36:06:7e:92:7a:b0:2b:b5:53:31:
cc:19:d4:76:c9:da:ff:0b:d9:2c:a6:c2:43:e7:b3:34:26:ce:
11:78:fc:c5:4d:bb:ec:52:c3:3b:e3:10:25:aa:7a:24:2a:b1:
8f:18:a9:67:ed:f6:02:07:0a:9e:14:17:2f:3c:18:98:d2:bc:
75:08:6b:a6:fb:ff:1e:db:cb:df:d5:3e:0c:b7:d1:34:f7:dd:
8e:3f:d7:50:d2:72:88:3b:19:86:58:28:8d:62:33:fd:41:8e:
8e:24:96:49:83:1c:a5:23:b6:4e:f6:55:ef:f2:73:04:fc:2d:
a8:fe:5a:a4:30:c1:fa:09:84:63:1d:47:15:f3:73:dd:3f:97:
ef:ac:17:16:f0:25:8d:c9:2d:e6:62:77:ed:ca:e7:7e:d3:ab:
2b:72:31:12:ae:d9:72:30:62:e7:43:1d:6f:a9:f2:0c:fd:70:
78:3c:69:d6:ce:c5:5a:73:34:86:00:de:e9:d0:52:b0:01:36:
bf:cc:48:78:be:f5:12:af:68:2a:92:1b:66:51:d6:9b:72:79:
96:19:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:13 2026 by rpki-client