Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier: mX2lLwUggfJPicie4iU/DP0NigF3C9tcfaOztWDpYl4=
Subject key identifier: 9E:AE:70:53:B0:DF:25:0C:87:B2:17:1C:55:A3:DF:CD:32:37:D0:EB
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 019D28846F87F373DB7D4114BFD0D57B38B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number: 0F5A
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: _-WgAdeW2Y99K-sGrqhGfWbfEYA.roa (hash: 66pgLoCvktoVUaDGxvzDuDueB2STnHHTVeeS6krd+lc=)
2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: TRehrKPw4UTdrw4Ct4RSTWXdijlbnr0HN3Y1swrGyhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6f:87:f3:73:db:7d:41:14:bf:d0:d5:7b:38:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=9eae7053b0df250c87b2171c55a3dfcd3237d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:b6:51:74:3d:00:31:08:fb:85:0b:30:bd:
6a:a3:f2:d1:a6:e6:30:fc:74:11:23:a1:4d:bc:ae:
b9:f1:0c:cf:cc:fc:4d:7d:20:84:98:05:93:4f:92:
77:ab:c1:70:cb:12:31:de:40:77:0b:5e:93:dc:d5:
ff:09:8c:ee:ee:11:db:fa:9e:49:65:25:87:ed:f5:
30:86:d0:fe:ad:87:eb:68:8d:48:b7:d4:30:67:e3:
2b:67:e4:73:6b:bf:f2:df:21:b8:2d:8c:10:1e:f3:
23:0a:8b:99:3c:3c:16:11:a1:34:f5:13:e0:30:b7:
23:0e:37:58:c9:0b:2a:bc:2a:7a:52:16:1e:a7:f3:
c7:39:d8:ca:a5:9a:50:24:39:38:4c:06:72:6c:a7:
25:39:9d:b5:56:a6:be:49:ac:1d:0c:81:1f:80:73:
b8:7a:91:dd:02:1f:0c:98:9c:8c:6c:16:10:d3:48:
58:62:a8:ba:62:e3:7a:cb:5c:6d:2d:84:96:20:e4:
0f:ad:07:b3:11:4d:ee:af:8f:5b:0f:e8:97:37:b2:
c6:1c:32:12:92:c9:20:1d:ee:28:a1:60:6f:c0:ae:
8c:a1:69:67:3a:d6:06:04:54:9f:97:81:76:27:34:
f7:41:0b:f9:bf:37:94:1f:94:15:27:00:85:bc:b4:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:70:53:B0:DF:25:0C:87:B2:17:1C:55:A3:DF:CD:32:37:D0:EB
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ef:db:b7:fc:26:e7:5e:5a:81:7f:05:6e:be:28:de:6a:5b:
f0:7f:be:f7:a9:d0:6e:08:be:75:1a:0d:22:db:98:4b:72:3d:
bf:ef:f3:90:ec:88:e3:31:e9:31:58:d9:fb:fa:8c:e8:24:e9:
28:88:f7:4d:50:cb:80:0c:c9:c2:69:8b:ec:f9:a0:c2:68:48:
a3:14:ee:ce:ae:a7:0c:0c:be:13:cb:9d:68:8e:78:28:d3:f6:
52:ff:47:2a:36:0c:4a:7a:36:2e:3a:43:ef:42:88:81:11:5a:
d1:c6:b0:17:a7:52:e4:49:66:b2:01:c4:bf:9e:65:0e:1b:73:
b1:ff:d9:c6:14:a9:a5:7e:03:b3:e2:cf:81:b9:2a:47:d5:c9:
8b:e9:42:99:9e:43:3b:a2:80:fa:3a:61:0d:aa:c1:e6:46:8f:
7a:74:8a:07:b2:07:bc:5c:8a:f0:5f:11:59:6b:5f:ac:2f:73:
41:37:b7:7e:da:74:5b:0f:fa:00:3e:5a:bc:2c:57:02:a5:10:
76:f3:6c:9a:e7:e8:84:2c:03:43:2f:dc:42:24:ce:9d:33:7f:
d2:e6:84:54:67:93:cd:23:9a:d5:b2:b2:c5:41:b9:f5:ae:d4:
61:71:1d:0e:29:e5:86:d3:6c:25:85:ca:65:2f:f9:e7:c8:96:
04:5a:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:31 2026 by rpki-client