Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: ydnt8QAfMuPIeC6eYdeGR3Vfvf1LwDFiJTbDXgMMslc=
Subject key identifier: E7:C9:7F:3A:AD:AB:CF:0E:1B:A1:78:47:FE:0C:4F:1E:EC:3C:DD:C1
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 019D2627FA502FAF4D487DE8DFEAE87A1BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 058F
Signing time: Wed 25 Mar 2026 18:00:47 +0000
Manifest this update: Wed 25 Mar 2026 18:00:47 +0000
Manifest next update: Thu 26 Mar 2026 18:00:47 +0000
Files and hashes: 1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: 8FIjoBVuPbo6tCRGju2AC1qEeldkE1IIec/h4G3zCJA=)
2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fa:50:2f:af:4d:48:7d:e8:df:ea:e8:7a:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Mar 25 18:00:47 2026 GMT
Not After : Mar 26 18:00:47 2026 GMT
Subject: CN=e7c97f3aadabcf0e1ba17847fe0c4f1eec3cddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:51:83:54:78:37:5e:4b:97:bf:39:f6:03:
a6:0f:c5:dc:1e:f4:70:f6:a1:75:64:54:a1:e1:83:
90:81:97:18:81:0a:94:40:46:0f:67:ee:bc:21:43:
9b:43:b2:b7:6f:d1:2b:94:99:30:e1:c1:dd:3a:11:
1c:28:ab:da:8c:97:13:60:2b:c4:5b:a1:ee:2e:5e:
38:13:75:37:0f:6a:05:ee:90:8e:90:87:bd:3c:57:
89:89:eb:f7:c0:c4:c2:18:3e:92:ee:ef:65:23:27:
f3:8d:19:f2:53:53:15:f6:b2:9f:e9:c3:e0:04:8e:
f5:30:4d:c1:f7:3e:4e:25:1b:37:1d:87:d8:6d:42:
62:fb:1d:e5:9e:ac:ee:85:5e:b0:7f:4c:83:59:32:
7c:cc:96:d7:e7:91:20:2d:bd:a3:36:51:23:5c:48:
58:55:2f:f4:a7:d7:3a:e8:b6:8e:19:72:d5:61:8f:
a6:ec:b8:f5:41:53:95:49:3a:ab:64:30:9c:ff:96:
b8:97:7a:9d:48:26:47:78:0e:4a:19:4e:06:b2:f8:
21:e4:a1:f3:f4:46:04:b7:bf:8a:ab:36:73:4c:ed:
c4:b8:5c:99:11:41:b4:fd:2f:b0:23:60:aa:0a:08:
d4:58:ca:37:0e:60:f9:d2:24:86:e9:1b:c4:d3:fb:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:7F:3A:AD:AB:CF:0E:1B:A1:78:47:FE:0C:4F:1E:EC:3C:DD:C1
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:69:de:3c:74:80:fa:c4:d3:a9:f9:22:fd:e0:73:b1:c3:b7:
6b:a6:0c:15:e6:54:20:0a:51:8f:33:02:25:5d:ae:ab:25:b1:
01:a3:df:80:1c:b1:33:87:8b:89:24:31:7a:47:4c:3b:dc:fe:
92:1b:8a:f5:dc:ca:bb:45:71:6a:76:41:d8:70:fe:28:a6:f7:
11:fa:c1:6f:29:d0:a0:c3:30:ec:39:7f:a4:36:aa:05:ce:77:
e8:57:69:bb:8f:fe:20:f2:43:fe:aa:50:37:6c:04:14:fd:64:
af:06:6c:44:37:af:e0:43:e6:ee:9c:4f:1b:59:93:19:d8:63:
cf:36:ae:00:b5:4d:31:d9:a2:82:27:97:f3:9b:df:f8:c4:c7:
83:ab:2a:18:70:65:fe:40:52:5b:1c:cc:5a:20:46:42:e2:31:
e9:e5:91:fd:07:fb:62:dc:95:72:ed:1e:18:b4:4a:32:71:79:
05:4c:e4:4c:4c:01:68:92:b8:4e:72:02:b9:9d:e2:36:22:63:
08:e5:40:73:de:49:c7:14:a8:4d:70:93:f1:26:5d:4e:d9:5a:
68:9f:80:39:33:c1:15:aa:be:00:15:be:de:f4:5b:64:83:ba:
16:ff:7a:29:0d:a0:5c:84:62:4b:c2:60:52:97:b9:46:9f:86:
16:8f:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:22 2026 by rpki-client