Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: ihHSR3Fa985UDAe+gIGZgjp4blxyBl+cYZmtP4fcK40=
Subject key identifier: F1:A2:29:D5:FD:4E:DB:6F:6A:1F:63:C7:F2:63:75:48:C5:B0:52:D3
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019D2928E4F1E27DADBD22E56C21B97F3418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 094E
Signing time: Thu 26 Mar 2026 08:00:38 +0000
Manifest this update: Thu 26 Mar 2026 08:00:38 +0000
Manifest next update: Fri 27 Mar 2026 08:00:38 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: kHobt1yHVi+G3abfXrm/wXlKjnNoS/IrcrNxdIEzDQA=)
2: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (hash: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e4:f1:e2:7d:ad:bd:22:e5:6c:21:b9:7f:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Mar 26 08:00:38 2026 GMT
Not After : Mar 27 08:00:38 2026 GMT
Subject: CN=f1a229d5fd4edb6f6a1f63c7f2637548c5b052d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:05:36:a3:f7:d4:b2:f4:2e:67:fd:24:9d:
41:28:e2:67:b7:6c:2c:15:bf:e9:4e:aa:cc:c8:5f:
a1:a3:42:6b:33:42:7b:ff:01:b2:61:06:6c:96:26:
80:f7:2e:fb:d4:c4:5c:57:d6:2f:20:1b:df:0d:39:
67:7f:79:e8:28:94:ca:bf:fa:21:05:94:16:11:9c:
0c:5c:5b:ff:5f:7c:54:eb:68:ae:2c:ff:58:ca:47:
aa:f9:40:c7:20:c6:dc:37:a7:84:92:1c:f5:bd:f6:
56:4a:0d:7a:c0:e2:0f:54:d7:73:d1:4c:28:79:45:
7f:94:4d:c0:12:7f:05:c9:a9:d8:e8:0e:e3:9b:15:
42:46:48:e9:ba:f5:d6:ba:3d:24:55:83:b5:be:6d:
93:39:9d:05:64:68:20:9e:0c:17:5f:e5:a7:3b:f2:
32:9f:c2:a5:70:c4:a2:1a:cc:0b:c1:f6:27:28:47:
70:1f:e3:4c:82:9e:bf:37:94:e8:9b:84:64:2a:08:
cd:9e:30:61:5c:05:43:73:75:d5:e5:7e:fe:09:7e:
ed:7e:bf:a7:64:73:7b:09:43:e7:d0:b8:34:0e:cd:
38:82:f6:75:df:bb:97:8e:3f:42:d5:e8:db:06:e9:
eb:67:70:72:cc:bd:1e:83:83:a3:22:28:39:9b:90:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:29:D5:FD:4E:DB:6F:6A:1F:63:C7:F2:63:75:48:C5:B0:52:D3
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:38:a6:30:43:2a:f8:ff:3e:3a:55:3c:09:4b:7e:df:a8:bb:
76:4f:0f:59:ce:b7:67:c2:7e:9f:5a:b6:4f:90:18:47:f2:4e:
b2:0d:41:e6:6e:b8:d0:71:c3:7a:a3:71:42:05:71:6d:cf:62:
43:f7:d8:d3:4a:fc:b3:d6:b7:ee:bf:af:51:3f:61:71:33:06:
fa:a9:d9:9b:21:46:f6:41:34:d4:fa:80:20:88:78:e7:40:8b:
8b:cb:28:a5:88:49:6a:fa:1e:ee:a9:d5:aa:37:b9:bb:50:3c:
7f:4d:3a:bb:98:a9:26:55:43:1a:c9:11:7f:03:3f:9a:ae:45:
63:1f:ca:35:31:de:3d:93:94:33:3e:69:a0:97:0d:ab:83:a3:
73:a6:7c:0c:91:f7:f2:7c:b9:e9:8f:46:54:fc:5e:d5:a8:7c:
2c:c1:c0:41:4f:90:d0:a2:f3:7d:16:b5:a6:73:12:5b:43:35:
d3:8e:48:65:19:44:e7:66:12:36:e6:5b:2f:c8:98:e1:7a:06:
79:58:cf:6e:55:ac:c7:bd:98:35:f5:62:5a:08:94:72:40:31:
d3:09:1a:ef:e0:6e:4b:b2:af:0f:e8:7b:21:7b:f3:0c:11:d4:
a5:d1:57:53:ca:5c:59:82:8e:e5:f8:33:01:27:14:22:22:a4:
82:94:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:46 2026 by rpki-client