Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: nHs/oEMGOYnHc3p1cWFdUqQyXsHgjYR1DSB8UwBYC1A=
Subject key identifier: 6A:C1:DE:31:B9:47:DE:AE:79:DE:06:0F:C9:95:2E:29:6C:4A:74:FC
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 019D273B192194452CABC025265ABEF05BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: QaiuCl7apbrrqHNvCy2A6fSh6iOFB4nihriWDyaGOxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:19:21:94:45:2c:ab:c0:25:26:5a:be:f0:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=6ac1de31b947deae79de060fc9952e296c4a74fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:74:f7:ce:9e:21:5f:6a:16:69:ef:45:99:
ab:7c:3d:2e:3e:9b:46:4b:51:d6:0f:e2:b2:73:45:
3f:7b:93:8d:9d:8f:a7:83:db:49:4f:9a:43:e0:25:
b6:40:e3:d2:50:db:b2:43:52:57:b3:9d:84:b7:1f:
d0:1b:73:10:fc:35:3c:18:72:6b:f8:b0:5e:be:9f:
fb:d1:a6:8b:04:8e:27:f8:cd:c5:6c:ce:04:31:f1:
26:9c:84:b8:d2:78:a3:72:58:56:10:5e:88:57:65:
c8:05:96:91:6b:47:df:a1:f1:35:e8:5e:1d:87:0c:
2d:84:8e:12:ea:86:a9:22:3b:9c:a3:f0:ce:bd:8a:
1d:f2:98:0e:2f:22:3e:be:bb:94:32:42:4c:67:e1:
76:f9:3d:ad:de:9b:05:1b:81:4a:b0:ed:16:fc:b2:
0a:56:c9:33:71:60:74:08:41:b9:12:73:54:28:1d:
a9:8a:b4:6e:29:0a:0c:3c:94:13:a5:bb:b3:fb:90:
a3:f0:33:4f:07:91:a1:1b:46:96:3c:b8:bb:2c:9e:
80:11:7b:8c:4d:07:50:01:55:7b:17:66:37:52:7a:
72:b5:6f:e6:f0:e1:4e:42:9b:78:db:a5:1b:e7:b3:
e7:c4:7c:c3:35:ff:7e:30:a4:e5:f3:62:7f:4c:13:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:DE:31:B9:47:DE:AE:79:DE:06:0F:C9:95:2E:29:6C:4A:74:FC
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:cf:ed:98:44:0f:cf:72:df:b1:fa:8e:1e:0e:79:70:a6:
bf:db:8b:e3:58:ab:e0:8e:c4:16:58:b0:5b:29:bd:8e:88:5b:
65:f1:cc:09:e4:77:19:0c:38:35:5c:d2:f2:ff:0e:ff:31:15:
43:86:31:cd:d6:24:bb:3d:34:62:02:98:7a:b8:28:4d:af:5f:
d4:9c:26:df:23:d9:d8:42:a0:da:b4:9a:c9:6c:16:73:00:43:
88:95:3c:57:0e:28:13:68:41:d2:fc:31:d7:08:ca:13:18:fd:
c9:69:21:98:b3:a8:d3:0a:b9:8e:fc:d9:bf:8e:45:8d:fa:1a:
f9:30:57:61:a8:4c:fa:33:2d:a5:e2:a3:cb:40:26:4c:35:a1:
2d:0e:39:3e:13:4b:e4:3e:6c:c5:6a:46:fe:df:b1:3a:4a:bb:
7c:67:cc:73:07:3b:a6:00:2c:89:1e:7e:86:a2:9d:92:eb:29:
ad:a9:d4:61:12:d2:0e:c4:eb:12:25:b9:66:9a:fd:d1:64:71:
4a:58:79:5d:61:0e:3f:af:dd:fc:9f:73:73:32:7d:8e:92:b4:
da:7d:1c:88:76:a2:76:c4:43:8a:b0:29:64:fc:5e:b8:cc:6d:
8b:d4:e1:d2:a4:eb:ec:77:29:a0:d7:87:d9:b1:9c:c4:2a:97:
57:dc:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:33 2026 by rpki-client