Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: dQZapOifqJdk9/h59CvDJSKrwnBb1oGND6IkHBGI0fs=
Subject key identifier: D7:E2:9A:A8:DF:EA:D1:AC:F3:A9:80:2E:27:64:D7:80:0C:27:15:AC
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 019D28842F937D7DC3210CA590916332D6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0E83
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: 8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa (hash: 4srsR9VRePR9yB/iD/hHMwN8fvofDELlgIaatI76q6Y=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: EKmHCkjd3ArOq5dv8WuuBJ1zxAu8sA9I1rNhuSE3ohQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2f:93:7d:7d:c3:21:0c:a5:90:91:63:32:d6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=d7e29aa8dfead1acf3a9802e2764d7800c2715ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:dd:51:f4:2a:71:27:61:9f:e0:b4:3e:94:
16:99:69:66:1b:f0:d9:fa:cd:35:f8:86:3a:1e:04:
4e:bd:39:fa:17:b6:1d:02:a0:a5:49:ee:08:84:e7:
04:c2:56:47:ea:8a:34:bc:02:4f:bf:9f:99:87:7b:
7d:a7:58:36:d3:11:5e:94:16:66:cb:96:63:a9:97:
4f:09:9a:e9:fb:30:b2:78:ed:b6:13:0a:16:f6:e1:
38:a1:c0:4f:b9:ca:5c:b9:d4:da:62:00:ac:63:3d:
63:71:69:5a:33:02:f7:39:cd:3e:de:c0:fc:98:f7:
5f:58:c7:58:6d:96:a7:19:43:ee:00:3b:51:5f:2b:
e1:b3:b1:4b:10:6b:e4:14:9d:e7:c5:ab:7b:af:69:
ab:95:17:db:e7:e3:64:22:36:4a:a2:53:7e:27:0a:
51:a4:c4:6a:9b:71:a9:34:68:41:0a:cb:23:89:7e:
69:f9:c8:4c:7b:97:a5:35:01:64:f2:9f:85:75:72:
b2:04:dd:b2:72:69:70:b3:1f:ad:62:8a:4d:68:9d:
a0:82:59:8b:6d:41:b8:8f:e2:61:19:d8:f3:e6:0e:
4d:cf:09:c3:68:96:4b:a7:d2:37:7d:d1:31:0f:42:
00:25:44:26:c4:06:af:18:a8:f0:b6:d6:40:cc:aa:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:9A:A8:DF:EA:D1:AC:F3:A9:80:2E:27:64:D7:80:0C:27:15:AC
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b6:0a:2a:e0:ae:2e:37:e7:89:da:26:87:17:c9:5a:82:0f:
a1:66:6b:d6:a4:5c:20:ee:bc:28:4e:29:8f:dd:b5:f1:11:00:
a2:10:d4:5e:27:c3:18:d5:24:ea:7b:0a:27:9f:47:69:28:a5:
12:a3:6e:45:a2:f0:a7:62:91:87:4d:80:47:8c:44:19:87:6d:
16:77:de:75:84:c3:be:78:cc:a4:d2:f1:b4:d5:6e:89:0c:1e:
07:ca:84:f8:f2:16:aa:d0:ec:45:74:f8:7b:cf:02:cd:b1:0b:
b4:8e:f1:dc:7b:bd:c9:86:a0:a7:11:74:ef:04:e4:d5:e0:3d:
36:74:3e:6c:9d:7a:bc:35:e7:ee:1f:83:5e:24:34:41:c1:15:
f5:8d:1e:69:ba:cb:78:22:13:f6:b8:a4:e4:04:47:23:6f:74:
f3:ef:b3:60:f8:66:62:71:30:b5:e8:a8:b6:2e:dc:24:cf:65:
39:e2:17:14:39:2d:ba:0d:cc:45:cf:58:4b:e3:73:a0:37:66:
14:72:46:98:d3:6d:63:b1:69:40:93:94:67:ef:a2:ed:c6:0a:
8c:14:1b:75:c9:cc:da:ce:a3:2c:82:ab:9f:ae:f7:4f:43:e1:
77:9a:16:92:b7:75:51:c0:a8:3d:bb:c3:cb:94:e7:b8:4d:f7:
0e:3a:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:16 2026 by rpki-client