Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: N84YL5lVJ5WuyBixiKWSwIC2Y6fz6I14qob/sHvSV6k=
Subject key identifier: BE:15:3A:4E:F5:E4:4F:86:6E:3B:42:BB:08:07:52:15:2A:86:72:A3
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019D284DE7D118095A07243103A9EBDC7B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0FFE
Signing time: Thu 26 Mar 2026 04:01:27 +0000
Manifest this update: Thu 26 Mar 2026 04:01:27 +0000
Manifest next update: Fri 27 Mar 2026 04:01:27 +0000
Files and hashes: 1: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: Kzg3PGRks5pb4IvzvGJ2/V9kwseSd4J5e7p2irhdwQw=)
2: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (hash: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e7:d1:18:09:5a:07:24:31:03:a9:eb:dc:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Mar 26 04:01:27 2026 GMT
Not After : Mar 27 04:01:27 2026 GMT
Subject: CN=be153a4ef5e44f866e3b42bb080752152a8672a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:63:e5:f0:b7:cc:00:29:f1:5f:dd:68:80:
95:c0:18:e9:b3:21:e6:bf:7d:d4:da:8b:86:6f:c4:
29:fd:3b:69:d9:f2:bf:e1:6c:c1:c8:29:fd:1c:e0:
c8:8d:97:d9:e1:02:be:48:ac:ab:1f:e3:11:1a:8a:
50:72:cb:e0:e3:1c:83:f8:a1:43:d8:e2:5b:38:c8:
07:90:60:ce:24:96:58:db:fe:e1:3b:9f:ef:84:af:
19:1a:a2:ed:60:90:e8:ce:c8:40:b9:79:ba:6e:aa:
5a:16:3b:49:f2:96:7b:94:55:1a:ef:e0:9f:2c:d6:
ac:22:12:3a:9f:a8:b0:55:5e:fc:f1:03:b3:80:f1:
b9:dc:64:fc:7c:78:34:b4:96:5d:8c:a9:33:49:0e:
b9:5a:56:97:5a:4b:bc:36:07:c9:19:8b:97:ca:88:
68:64:ec:f9:38:76:8b:3d:eb:9d:16:a3:2e:2f:71:
16:51:91:db:a2:da:96:e9:b9:03:31:c9:75:b6:46:
c4:11:d4:63:c8:cd:7b:fd:48:d6:a9:b7:df:fd:99:
76:7c:e0:45:40:af:39:38:9d:3e:7e:92:19:67:e0:
af:32:fa:e2:2c:9e:30:71:a1:af:a5:1a:1d:70:6b:
39:75:23:90:dc:bf:97:5e:6d:27:78:8c:59:9e:65:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:3A:4E:F5:E4:4F:86:6E:3B:42:BB:08:07:52:15:2A:86:72:A3
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:7c:b3:18:98:d4:50:4f:b0:f3:20:ce:1f:02:20:46:e4:
8d:56:9c:3b:d2:3c:c7:e9:ab:da:eb:07:a3:1f:4e:ba:a0:c7:
0f:46:5c:b4:b4:79:65:36:90:89:da:06:d9:fe:9e:eb:38:04:
ae:52:b3:83:47:b2:18:82:08:85:62:21:1c:ad:9b:bd:6f:40:
4a:f5:79:25:bc:2c:8b:bc:10:e7:17:32:e4:99:ff:c0:36:a0:
c1:cc:bc:c4:4f:14:5b:25:f6:34:9b:80:b6:90:b1:55:82:d9:
df:40:53:5a:cc:4e:ad:fb:fb:f2:dd:90:2f:57:b6:0c:df:d0:
20:0c:5d:a8:69:6d:bf:0f:bb:43:bd:ae:68:21:03:83:76:15:
e3:54:b4:03:58:d0:17:7b:d4:c0:b5:92:a2:eb:4f:20:a3:02:
be:1c:91:4e:5b:5b:18:9c:93:ef:b7:bf:b2:fa:f6:cd:29:32:
b4:65:ef:dc:9c:8d:28:64:c5:25:9c:e2:fd:92:0a:77:82:8a:
b9:72:84:53:a6:cb:05:0a:d6:13:d6:97:af:59:a8:49:d1:72:
bc:2d:0c:65:54:c4:ee:4b:24:7f:63:ad:15:da:0b:f6:24:be:
55:95:45:b9:3f:2b:60:b7:20:4f:42:dc:f5:7d:5f:32:39:44:
01:a9:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:03 2026 by rpki-client