Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: F/hGkoK58nYUOhBfhHz6o3EhSywbPjFyIFqo1g1a7Xc=
Subject key identifier: 6E:52:DA:C9:45:82:C2:D0:CE:B2:EC:9C:37:67:9F:50:11:6E:FA:45
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 019D288439966D985B7A12ACE571DB768BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0C21
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: 8RN053bCakTRVXui6gfU_pQN-CU.roa (hash: /BriY1IgAGYn1GmZT5ixDLcg1lGG6kDvV6LZLM2uCJQ=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: +nkyA6bh67cNLvQImdSub4yMiHwZSNfbBXG+cyKxW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:39:96:6d:98:5b:7a:12:ac:e5:71:db:76:8b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=6e52dac94582c2d0ceb2ec9c37679f50116efa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:20:43:fe:e4:5b:5a:e3:20:ba:1a:74:90:
55:75:04:5a:ad:b8:0c:b9:aa:c0:ba:dc:71:4f:7e:
1c:0c:e9:e2:c8:3d:58:60:7d:55:30:8e:52:d6:99:
4b:72:e7:fa:6a:91:a2:56:1b:54:7f:d8:bb:3a:a2:
4f:0f:c6:82:ec:cb:21:64:fb:d5:f8:33:00:ac:02:
5e:be:f7:63:e1:d8:10:71:36:1b:a5:41:47:77:85:
af:97:3d:88:7f:e1:a8:82:89:e5:28:2d:a5:4a:89:
72:cf:32:7f:3b:af:d5:80:25:0a:22:b5:7c:5d:cf:
1a:64:50:ed:c8:68:7f:10:3c:92:63:84:af:59:b9:
53:1c:70:e4:0f:3b:f9:b1:c4:4b:dd:30:db:55:db:
12:f6:c6:e8:78:2c:ac:fc:38:49:cf:3a:f7:37:0c:
f7:33:f8:3b:97:a0:db:c6:20:15:0f:65:e8:b6:d2:
e6:f8:3d:99:f5:a2:f6:6a:c9:5a:04:44:08:2c:3a:
90:23:e1:b8:1a:3f:11:51:77:35:9d:10:55:ca:48:
55:7f:4e:5a:a7:3d:04:1c:20:49:9f:69:85:38:f9:
99:d3:79:11:db:f9:b2:0c:9f:5e:d0:c7:59:c5:32:
e4:f7:06:85:4b:b6:16:3e:75:55:55:b9:16:80:71:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:DA:C9:45:82:C2:D0:CE:B2:EC:9C:37:67:9F:50:11:6E:FA:45
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:60:05:59:9f:83:e0:66:69:b5:fb:29:da:7f:7b:cd:ed:
83:e9:46:2c:32:e2:0d:b2:03:ca:49:5a:79:e3:cf:f8:ab:43:
c1:b1:cf:e6:f6:95:d5:2d:a3:91:02:49:ea:93:67:53:1f:05:
d8:da:d7:a7:27:4d:d0:39:ec:5d:b5:d4:00:c9:ad:1c:42:91:
9b:78:ff:b0:55:10:df:69:80:f3:a7:59:5f:d7:bd:b0:04:e5:
57:36:f9:81:18:67:ee:10:ed:c6:1a:10:20:5c:b6:46:10:81:
5c:fb:9e:14:1d:b3:5a:d6:56:52:f5:28:47:9e:eb:90:e6:34:
c4:e4:9c:18:fa:62:31:3c:5a:08:bd:d0:54:6b:9d:20:43:60:
e8:85:2f:37:f6:29:b5:1e:b8:2a:82:89:5e:74:82:0f:de:45:
6e:fc:84:68:b3:d4:2a:74:0f:27:cf:d6:64:56:cf:a5:56:62:
5e:43:ae:7b:9b:58:da:46:56:5d:de:a4:50:d7:ab:83:1f:dc:
ab:c8:82:08:d9:ef:b4:cb:10:70:26:bd:aa:37:a5:de:00:c8:
c5:c3:80:c5:0e:95:98:d7:df:2f:50:fc:8a:77:65:de:98:07:
61:4d:9c:d4:99:5b:4d:40:45:33:48:53:2b:80:60:87:b8:5e:
22:dc:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:29 2026 by rpki-client