Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: T/OKckGnYsdUia1dk42ar6Oy8OUn9aFOrzeHkE64OzA=
Subject key identifier: 75:2B:FB:01:C6:AE:87:33:65:49:56:BD:08:D0:52:5D:79:66:EB:A7
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019D2771C9864B448B5651954776C2331CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: xZQrVMIWMhZerq7fO7lyz9JDxROqojH2kcFke5bM9UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c9:86:4b:44:8b:56:51:95:47:76:c2:33:1c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=752bfb01c6ae8733654956bd08d0525d7966eba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:15:e3:b2:8d:2a:be:fd:ea:87:8e:a0:33:
b4:33:15:df:9b:d7:a3:fa:28:9b:cd:1b:36:58:fa:
a9:99:1b:ec:1d:39:d9:01:94:1a:29:1a:6e:20:48:
b9:4b:33:c2:22:93:3a:59:c0:43:ce:00:b8:85:42:
f8:d2:9d:74:88:fd:26:30:33:4b:95:f5:64:7c:7e:
17:8b:92:5a:ce:fb:56:f8:52:83:aa:42:12:78:be:
9d:73:c0:80:70:eb:18:46:52:8b:d9:e5:7f:f6:21:
42:b7:f8:fa:be:ed:be:37:f9:0b:df:5a:f8:e4:c6:
4f:93:40:8c:7a:6a:a2:1d:b6:03:e7:fe:07:33:55:
a0:f5:57:f4:e8:9a:3e:3a:41:87:2d:7d:7b:ba:d8:
e0:eb:7f:3a:50:8e:85:df:d8:87:fa:40:e7:99:80:
1d:0b:af:7e:73:cb:8d:6f:a0:7b:8d:3f:ab:c2:85:
da:d1:48:c1:43:87:28:e4:d4:5b:06:6b:ca:0c:c1:
b1:b3:cc:5e:d9:b5:35:fd:56:aa:6e:a7:5d:3b:98:
bc:81:d3:1e:33:d0:3d:b4:fc:4c:9f:e4:c3:d6:30:
41:72:be:e1:97:4f:f0:37:9c:ec:c8:c6:15:c5:f9:
69:31:af:dc:0d:81:f0:18:e8:54:3e:3b:2a:51:d2:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:FB:01:C6:AE:87:33:65:49:56:BD:08:D0:52:5D:79:66:EB:A7
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f6:48:eb:63:18:15:2b:af:11:92:39:6c:76:e7:94:a4:d7:
30:74:62:2c:49:64:5b:d1:e3:2f:c4:84:25:eb:37:61:60:ad:
ba:4e:b7:a2:fd:59:e4:4a:d4:dd:06:73:3d:58:49:e5:02:d0:
1e:ec:06:a2:1c:c6:1a:d9:19:90:2e:61:af:62:bf:04:4d:1e:
7b:1e:e6:6c:2b:17:90:de:ae:0b:23:4c:a2:1d:39:2d:20:d9:
46:6c:b6:dc:a5:81:ac:c4:5f:66:59:a2:46:6d:43:b8:23:ab:
dd:75:c5:5a:28:10:72:f8:42:c8:2b:c0:81:8a:d5:4d:b0:b7:
86:c2:12:13:f1:c5:50:67:7d:9c:66:ed:d5:88:90:d9:fe:44:
2d:ab:e4:55:6e:37:51:f7:55:ad:ae:4d:28:d2:b2:5f:c4:a6:
91:95:1f:47:78:82:91:4e:9c:9a:e1:26:e4:c1:f5:bb:4d:56:
bf:bc:e5:c6:08:07:f8:5e:f3:27:f5:7f:ae:ba:a9:e2:62:3a:
d9:ce:7e:d7:82:7b:71:18:6e:67:7a:a2:b7:21:ee:13:87:c7:
95:f4:05:c1:9f:09:c0:e0:11:f8:f3:2e:58:0a:7b:2e:7a:77:
6a:97:d7:07:05:80:06:1c:05:ae:3a:66:9c:a7:fa:65:0b:8f:
8b:70:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:09 2026 by rpki-client