Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: ZjFzO4sjAmZLOoOtBOxdTcUHuM9jpMQ4MNsRF6zeuMw=
Subject key identifier: 2C:EA:B4:4F:52:6A:BA:D4:72:C1:02:55:92:0A:72:2B:01:7D:CF:23
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 019D2884B424D896B31BF55C807BD40F4E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 17B9
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: NF_ZJXamVG-MCa_q4NzRMxK6B08.roa (hash: BEU1FyfqqI6VaL+KOpo/X80Gj2W8UWl6HtfuD6fI7nE=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: ECSAHdGX/jicljjIVUOW5vpdab4pBfA447gl+ljZvB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b4:24:d8:96:b3:1b:f5:5c:80:7b:d4:0f:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=2ceab44f526abad472c10255920a722b017dcf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:e9:92:a8:c2:77:e5:f1:c1:c4:57:31:4c:
7f:3a:fc:d4:f6:96:1c:d5:64:67:3b:d1:ac:64:70:
39:61:8f:b5:77:a5:97:32:2e:e1:ce:93:fa:b2:0d:
d6:49:df:7e:4d:40:a3:8f:64:9e:fc:01:8d:eb:c1:
3a:36:fb:b4:96:30:12:23:8b:ca:26:03:6f:f5:88:
92:46:50:60:ee:77:6c:a2:f1:d9:b0:da:bb:f7:08:
1a:83:f1:04:8c:db:29:75:2e:32:c4:ef:9e:d6:a8:
be:92:98:17:78:65:dc:6d:69:5b:3e:56:99:06:05:
2e:cd:50:00:b7:0d:e1:b9:c5:2d:b3:f5:4c:74:3f:
f3:8c:86:18:a0:ba:c5:49:6a:a8:91:08:14:56:01:
ad:5c:c8:d2:02:16:65:d6:04:5f:08:24:af:6b:12:
23:99:29:0e:1b:83:3e:36:4f:53:82:a5:5e:f0:bd:
74:0d:b4:f8:ad:e8:72:d6:cf:36:73:92:fc:90:2c:
24:c0:ef:9f:46:45:21:9b:f0:15:14:aa:9c:63:a0:
66:72:af:e8:f5:43:94:19:83:0d:c8:76:1b:9a:e9:
58:63:1b:e2:de:6f:56:fa:2e:1b:28:2f:a0:2c:2e:
34:ae:9a:25:19:9e:32:4c:4c:a0:f6:9c:5c:b9:fa:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:B4:4F:52:6A:BA:D4:72:C1:02:55:92:0A:72:2B:01:7D:CF:23
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5e:2d:f1:4a:f6:58:40:50:b5:d6:3b:df:67:2c:9b:c6:35:
5b:9c:05:2b:ff:c0:f4:69:90:d2:6c:ac:61:a1:9e:ed:c6:72:
13:8a:19:80:3d:ac:eb:f7:68:44:e5:7d:65:92:af:35:44:80:
86:ef:21:b7:64:bb:f1:f9:05:c9:92:a8:7a:b6:a5:36:d0:78:
c3:48:08:1f:26:c1:0b:59:0c:c3:02:51:b6:78:04:41:f5:e0:
0c:c8:c4:d5:79:3d:4e:7e:e6:56:da:b8:95:eb:36:f3:80:a6:
7c:f0:58:ba:ac:c9:86:60:2d:85:b0:66:e0:ea:16:a9:6b:aa:
ed:13:13:2d:e9:17:f8:7b:06:dd:50:95:09:b8:85:eb:80:ce:
91:54:5d:1b:07:79:6c:2a:7e:02:fb:77:19:13:92:d9:c9:f9:
59:62:39:03:f4:56:21:cd:78:dc:43:9b:93:70:00:4a:71:7e:
31:4a:40:01:eb:cb:12:91:9e:17:dd:48:19:4f:6f:8b:00:71:
66:36:cc:70:45:44:2d:6a:28:3e:f6:11:8d:6c:8b:16:de:94:
a3:f8:26:09:bc:30:61:57:10:13:52:f7:aa:ed:a7:24:e2:44:
ae:9f:38:6c:92:f8:af:42:fc:91:34:13:8f:11:5e:41:d9:a9:
fd:3f:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:19 2026 by rpki-client