Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: kj1PRGixVD9C2ngzIb92YJoAhrrBsxCu5MpMLuCCHVY=
Subject key identifier: 6B:09:86:3D:B1:15:FD:86:D1:40:6D:D9:42:D5:46:53:87:51:1F:8D
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 019D26CD14D06CDF5AE7C3FE4F24E8CC9A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 1155
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: T+AbdZgR+0NW+dVk3myD0TAWDzP8dJN5kW8KMXSxUeA=)
2: v6gwLEELUcOW8EGrOdAAHovql_o.roa (hash: OVBiXttWtXEViwRttR3M1gCKBS/ptPZBSBfkNvQ8mSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:14:d0:6c:df:5a:e7:c3:fe:4f:24:e8:cc:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=6b09863db115fd86d1406dd942d5465387511f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:76:bb:42:71:af:1a:ad:24:42:9e:2a:1d:
8e:1d:b1:79:f3:d6:77:00:21:51:a0:63:c5:b3:f8:
8f:38:d6:9c:bc:ec:4d:a2:7a:85:1b:a5:b1:87:eb:
dc:f1:5f:6f:3d:21:3c:e9:ec:00:4d:3d:28:63:7d:
89:80:a8:18:bc:90:28:25:16:1b:46:9b:a5:cb:f1:
ab:6f:a6:12:ce:b5:b4:3d:04:f3:8d:d5:0d:05:d9:
26:a6:8a:74:8a:da:85:e3:1f:45:e9:dc:d5:1a:2e:
19:02:b0:2f:c3:d7:1b:41:d7:f2:74:fe:d4:0d:9f:
d9:b4:5f:33:ec:6e:72:d4:34:67:d6:be:f2:08:3a:
ca:0b:84:98:66:88:c4:a8:10:ff:49:06:69:cb:1b:
b2:f2:dd:f5:d1:69:f7:b4:bc:a4:5a:5d:c8:aa:3b:
76:2d:03:e2:db:2e:08:3e:f8:32:18:eb:46:f4:cf:
62:81:07:5b:47:af:a6:dd:fc:45:63:04:33:02:57:
76:35:22:06:d3:03:09:a1:cf:05:42:33:72:17:10:
a5:6a:48:81:a2:53:78:e2:45:b1:2c:ed:15:ae:6f:
1b:5e:5a:cc:f5:4d:18:42:64:2b:57:47:23:2f:9b:
ae:0a:c9:c3:48:b0:c4:cf:4b:65:db:f8:c6:0e:d4:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:86:3D:B1:15:FD:86:D1:40:6D:D9:42:D5:46:53:87:51:1F:8D
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8d:a7:ae:08:44:23:d3:87:5b:28:61:19:93:d0:0e:fc:f0:
ec:70:56:4e:a7:9e:34:a9:94:b9:8c:b4:d0:44:d9:04:52:61:
49:5b:f1:50:c9:a6:01:28:fa:8d:c0:15:99:22:2f:20:97:aa:
91:b1:3b:3e:1c:cd:65:f7:54:73:13:ab:30:d2:11:29:eb:db:
6b:95:d0:c2:4c:2c:55:0e:60:7f:17:f0:ca:fc:51:a9:ab:82:
74:1c:68:91:fd:bd:3f:be:cb:ad:db:d9:68:0c:09:f4:66:34:
1b:25:29:6f:f2:64:40:d5:c2:db:df:a0:06:64:bb:e0:df:46:
fb:63:e9:4b:18:a5:6e:88:6b:95:30:ac:97:09:7d:09:41:96:
a6:98:34:a8:e1:b5:e8:44:0b:6e:5c:5c:8a:36:d3:9b:82:49:
db:cc:9e:1d:71:84:7b:ae:88:09:bd:82:78:08:9d:ee:a5:4e:
01:8e:41:60:6f:63:8e:73:5e:82:f7:55:b5:e1:2d:41:fe:b7:
45:5f:40:c1:d8:29:ac:84:16:6f:f7:27:5c:e9:8e:20:29:de:
8f:c3:2e:af:10:67:6b:12:b4:77:5c:44:4f:e5:8f:b8:5e:e3:
13:38:b9:9b:12:f6:36:6b:32:f1:75:d1:07:18:03:3c:a0:51:
5a:e2:65:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzRTQbN9a58P+TyTozJpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjU4OTY3MmJjMmEzNDVkYzExZTlmZjE2MjUwMGVjMTVk
YWRkMWQwHhcNMjYwMzI1MjEwMTA3WhcNMjYwMzI2MjEwMTA3WjAzMTEwLwYDVQQD
Eyg2YjA5ODYzZGIxMTVmZDg2ZDE0MDZkZDk0MmQ1NDY1Mzg3NTExZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQF2u0JxrxqtJEKeKh2OHbF589Z3
ACFRoGPFs/iPONacvOxNonqFG6Wxh+vc8V9vPSE86ewATT0oY32JgKgYvJAoJRYb
Rpuly/Grb6YSzrW0PQTzjdUNBdkmpop0itqF4x9F6dzVGi4ZArAvw9cbQdfydP7U
DZ/ZtF8z7G5y1DRn1r7yCDrKC4SYZojEqBD/SQZpyxuy8t310Wn3tLykWl3Iqjt2
LQPi2y4IPvgyGOtG9M9igQdbR6+m3fxFYwQzAld2NSIG0wMJoc8FQjNyFxClakiB
olN44kWxLO0Vrm8bXlrM9U0YQmQrV0cjL5uuCsnDSLDEz0tl2/jGDtQWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsJhj2xFf2G0UBt2ULVRlOHUR+NMB8GA1UdIwQY
MBaAFJ31iWcrwqNF3BHp/xYlAOwV2t0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjct
OWMzMGY2NTZmZDViLzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjctOWMzMGY2NTZmZDVi
LzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo2nrghE
I9OHWyhhGZPQDvzw7HBWTqeeNKmUuYy00ETZBFJhSVvxUMmmASj6jcAVmSIvIJeq
kbE7PhzNZfdUcxOrMNIRKevba5XQwkwsVQ5gfxfwyvxRqauCdBxokf29P77LrdvZ
aAwJ9GY0GyUpb/JkQNXC29+gBmS74N9G+2PpSxilbohrlTCslwl9CUGWppg0qOG1
6EQLblxcijbTm4JJ28yeHXGEe66ICb2CeAid7qVOAY5BYG9jjnNegvdVteEtQf63
RV9AwdgprIQWb/cnXOmOICnej8MurxBnaxK0d1xET+WPuF7jEzi5mxL2Nmsy8XXR
BxgDPKBRWuJlYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:03 2026 by rpki-client