Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: +/T8mpvVbsb99PGwyLYYzKNGujX9V9Dno6dWttAQObw=
Subject key identifier: 8D:45:5F:D7:47:62:49:19:FE:DD:E6:04:45:6E:3A:8C:24:DE:86:1A
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019D265F98DBBC18337CE38502473E6FF824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 056E
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: 1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa (hash: V7/89jWIsWgE5VYj0PiaT+PidNKfZz1SVPLmNchZNk8=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: HViWGu04KtyCaKzCx6N3eOY4i1VNvpWGy3U4GUlCElM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:98:db:bc:18:33:7c:e3:85:02:47:3e:6f:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=8d455fd747624919fedde604456e3a8c24de861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:e2:83:dc:10:87:a1:e8:8f:55:fe:78:9e:
66:de:cf:c8:51:df:da:7b:cc:68:72:1e:61:3f:1b:
a9:90:3b:0b:3e:8f:ae:71:9c:58:32:56:de:18:eb:
e3:00:c7:01:aa:19:1f:d5:63:97:50:94:08:88:ac:
21:24:b5:1b:e0:8a:e5:c8:6a:2a:fc:08:73:28:52:
8b:aa:d5:44:13:94:bc:f6:2b:b3:20:cb:4a:24:db:
8f:39:f2:b6:ca:08:7b:09:f1:fb:7f:4b:f1:20:d3:
0a:d5:f7:2e:d8:f5:02:1b:40:17:d8:13:ca:45:5e:
88:bb:84:e4:6f:26:c1:a5:0a:cf:56:1c:54:1b:3a:
3a:79:25:25:7f:cf:6e:e0:c7:af:62:6d:8a:7f:23:
08:92:f3:47:01:32:ad:af:22:75:69:7b:e5:c0:20:
57:90:6d:e2:31:43:5b:4b:e4:15:3c:e1:24:7c:25:
e6:36:4e:2f:79:c1:92:3f:21:16:2c:f2:ff:ca:0a:
89:6a:20:a1:d7:72:48:65:c9:44:be:e6:25:c8:5b:
51:7c:80:eb:ad:2f:42:a6:1c:8d:15:4d:c2:f9:17:
3e:5a:38:16:f6:a0:5d:61:91:1a:d4:b9:f6:c8:cb:
01:2d:2d:b9:66:ff:8c:01:4a:2e:bd:7a:4f:6d:9a:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:5F:D7:47:62:49:19:FE:DD:E6:04:45:6E:3A:8C:24:DE:86:1A
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:34:66:19:b8:18:31:81:ef:70:d2:83:b4:1d:13:e0:c0:
1b:d3:d8:d5:79:25:5d:bb:68:07:77:9d:01:ed:28:57:9f:48:
60:75:4e:49:74:b8:d2:47:51:24:dc:3c:09:89:c5:3d:76:1c:
62:d6:34:13:7a:73:2c:8b:8e:83:31:86:5c:f3:3b:9b:15:22:
5f:c9:4a:fe:0b:41:7c:2c:75:a4:5b:33:ed:41:88:d1:2c:ad:
09:f7:e6:7a:1c:fe:b5:ba:8e:40:e0:f9:cf:88:5b:96:0c:c1:
be:e8:e8:28:8f:f7:60:a9:25:a9:f9:e4:2c:d0:bc:c8:53:f8:
dd:6e:18:5f:64:92:d6:ed:23:12:54:a2:45:6f:ff:b7:d2:71:
a2:f6:03:dc:1d:ab:19:41:8a:8a:b4:e8:e2:a1:12:8c:c7:50:
d1:15:a4:19:02:fa:21:ba:9c:91:ea:85:fc:35:fd:37:76:91:
1b:8e:0b:90:f7:49:5c:f1:71:eb:ac:ba:ac:b7:d4:5c:82:4e:
43:cc:7e:e4:8b:36:af:f5:de:08:be:0f:4a:89:9a:22:a7:54:
ba:86:57:76:85:c9:10:92:7b:69:69:da:d4:4f:aa:6b:9a:44:
ea:5d:19:8f:a2:de:f3:be:3f:84:f8:56:2b:53:fd:2c:7f:8d:
22:c8:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:04 2026 by rpki-client