Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: zes1mNESfwoWGKDL5kvYH6O5spGuzXctslAkqcyxYWE=
Subject key identifier: B8:98:B4:AA:73:21:AA:90:BF:85:11:84:DD:35:11:43:4D:3F:CF:9A
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019D26CCBE5E197FFBE2068DA8DFE17CE12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0F18
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa (hash: PwX6Qj+/Hw67w92aS4xQ86nPtQ/6Nm2w8w8MnwiNUKI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: vGNzlY3kogvPikqgKiEnV3yDdr6Bt19NRisAnrn0PEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:be:5e:19:7f:fb:e2:06:8d:a8:df:e1:7c:e1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=b898b4aa7321aa90bf851184dd3511434d3fcf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:f1:a4:83:da:31:91:1d:fb:dd:3d:49:39:
dd:0e:fb:98:e2:88:99:31:9f:ff:04:d8:e5:15:7e:
fd:82:2f:cb:85:91:91:7e:d7:eb:27:0d:f4:8e:fd:
c1:a8:c9:8e:db:98:5b:0a:60:a2:5b:4f:a0:fe:76:
a0:ef:97:89:c6:ee:1c:f7:49:cf:9b:34:d4:05:ed:
d2:4a:ec:6d:e8:4b:94:f7:4f:0a:51:44:22:09:ac:
c3:1d:de:fe:9f:7a:0b:a3:51:8e:14:d4:05:c0:0d:
63:ac:c9:1c:15:b2:72:a4:de:02:c4:b5:7f:9a:38:
b2:94:16:31:fe:2c:ff:5e:8f:9f:62:a6:1e:d6:6f:
9d:dd:ec:58:52:80:66:b1:ba:23:cc:3d:77:01:5c:
dd:85:d4:c6:2a:39:64:c0:9f:2f:31:a5:9b:a5:19:
f9:de:f7:bd:36:33:b2:e4:01:27:2b:6e:6d:7d:e0:
46:e2:fe:db:c6:4e:78:fe:90:88:6e:c4:e2:f8:f8:
f2:01:74:5f:5c:3d:1c:c6:d0:1d:99:c7:0c:21:10:
43:64:3d:2e:4a:f8:db:39:6c:96:57:7d:03:b4:6a:
16:d5:a4:c2:67:0c:98:ac:98:e4:5a:38:fa:18:25:
ad:5b:26:90:ff:29:dc:b3:de:bd:ea:e8:b3:3b:30:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:B4:AA:73:21:AA:90:BF:85:11:84:DD:35:11:43:4D:3F:CF:9A
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:f7:78:f6:8d:79:dd:98:fa:c6:c4:b1:6b:40:81:cc:ea:
53:b5:b6:e0:55:b8:a2:65:95:e8:5b:47:36:4e:1e:c1:49:b7:
f6:30:a6:7a:39:f7:cb:8a:d7:2f:e6:88:a5:ca:de:e1:77:9a:
eb:26:a3:8b:16:25:5e:e3:20:0c:33:19:6c:00:7c:df:39:cd:
5a:6e:f9:2f:94:a4:90:7c:2c:41:ba:0d:cc:df:31:5b:3b:e6:
4c:56:c0:23:34:bc:94:c9:8f:0d:15:d0:de:96:9d:60:62:38:
e7:42:61:60:dc:58:56:ee:fd:ee:f8:d1:5d:32:79:4a:37:dc:
e2:e9:32:25:a0:ee:c5:36:61:52:70:1a:2e:18:22:9d:3c:c3:
b7:25:79:16:e7:53:e6:a9:79:b1:26:e1:36:62:ce:ab:90:32:
d8:e5:c1:a9:3b:e1:db:ab:62:c1:e3:26:e0:87:2f:65:20:41:
5f:de:01:11:d9:cc:9e:86:3d:50:70:d6:76:6c:e4:8a:e9:5d:
46:9f:fe:29:d5:f0:a7:d6:0b:ba:7d:f7:ae:a5:e7:98:58:08:
56:a8:91:2f:c9:6e:73:e5:d2:a6:df:33:c0:79:04:5f:77:4d:
d2:6d:33:8d:38:c2:15:5c:34:64:4c:eb:9a:12:19:d2:eb:78:
8a:a6:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:23 2026 by rpki-client