Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: hR0Nc4L1PoA+4J5fKStZsD8QuNqmT4rLvr2d/K1Zq8Y=
Subject key identifier: 43:46:2A:A6:39:B5:FA:12:49:DA:66:1C:D3:B4:C3:F4:BC:FA:2B:4C
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019D26CD4DBDB6254D5B523FD7BDFA6CF639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0F15
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (hash: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: 51066kKalutaI6Y8rmMMm2RnJBR5goDkkXqrsAUnASM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4d:bd:b6:25:4d:5b:52:3f:d7:bd:fa:6c:f6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=43462aa639b5fa1249da661cd3b4c3f4bcfa2b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:66:a8:07:6d:40:87:37:90:fe:bd:17:e3:
8c:6c:fd:fd:a4:dc:fc:52:1c:2e:dc:c3:82:4d:31:
6f:98:00:1f:20:dd:7b:f7:02:95:65:75:ed:66:a0:
37:91:db:51:36:1f:23:56:9e:c2:55:fc:a7:5f:34:
9b:a8:cf:40:1f:a1:e6:4a:dd:68:4f:d0:91:98:d1:
93:c3:e8:ed:4e:84:64:c1:a9:1c:b2:42:fa:a3:5b:
42:46:53:8e:87:a0:b5:dc:bd:88:ff:b7:78:7d:c0:
47:6d:b1:f7:d8:c2:08:91:0e:29:08:cc:10:36:66:
eb:07:f5:b6:6c:9e:52:f0:1b:65:63:e6:a0:18:2d:
71:48:39:94:06:26:28:25:32:f4:8b:4a:de:48:c9:
c0:be:87:86:ac:7d:bd:e4:34:90:6e:ec:20:8e:96:
dd:3b:40:a4:44:cb:f4:46:af:57:62:ee:4d:e8:84:
4f:86:87:ca:94:9a:75:f0:81:1e:ff:58:f5:fd:3e:
90:33:33:2b:63:d2:6f:89:25:69:33:f2:21:4f:f8:
3c:3e:71:4e:50:74:b4:2e:44:6c:5f:dc:73:a4:2b:
6a:c6:b0:0c:4d:b6:6e:0f:92:a4:f5:65:6b:f5:ff:
ad:2e:6e:19:a7:a5:70:ad:ba:05:6d:ad:ba:9d:95:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:2A:A6:39:B5:FA:12:49:DA:66:1C:D3:B4:C3:F4:BC:FA:2B:4C
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c0:26:e4:0c:32:17:0d:c1:cb:8c:89:aa:45:e5:db:99:b5:
92:cd:d0:4c:dd:1d:2f:91:62:19:2e:77:51:c4:44:bb:65:3c:
89:c6:b1:65:86:e0:c6:6a:01:ed:93:ee:1a:30:93:10:26:87:
c1:13:1a:99:3c:68:9b:ad:e6:1c:17:68:be:88:a9:84:2c:7e:
b0:11:94:78:c8:c7:a6:9b:71:eb:45:07:e0:5e:37:67:7f:b6:
89:81:77:44:bf:d9:f1:41:ce:b1:41:e4:8a:c9:16:16:40:3b:
6d:92:0f:44:c8:18:9d:b8:02:d4:39:79:d0:81:6e:af:00:fe:
00:1d:1f:6c:cb:1c:12:3a:bc:bb:48:59:f9:12:7e:d7:51:ab:
1c:eb:63:ed:9d:35:4c:f7:86:1e:21:ab:87:b4:9b:cf:df:8d:
b3:45:d1:3c:36:bc:b1:64:d3:7b:0b:4b:a4:11:19:69:06:dc:
85:f6:83:ec:18:e5:b2:fc:af:3e:c3:1f:4d:51:b5:47:b6:ec:
56:4a:ec:3a:99:1e:f9:b6:0e:39:13:dc:cb:cb:0c:58:13:d4:
6b:da:8c:79:a7:b1:63:4c:dc:30:76:1d:41:56:84:91:2d:ad:
5a:74:2d:a6:31:57:09:00:39:6f:0b:5a:80:a2:52:70:6a:c2:
82:fd:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:42 2026 by rpki-client