Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: ICtVGJUj8uZgOIO6kpHysgZKcvL8QGHlejvf8kDjHz0=
Subject key identifier: 9D:37:9C:31:C9:75:95:1B:AA:87:C5:32:98:FC:E4:72:0F:30:D5:28
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 019D25F1F471D7C87E23B755495976370EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:01:46 +0000
Manifest this update: Wed 25 Mar 2026 17:01:46 +0000
Manifest next update: Thu 26 Mar 2026 17:01:46 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: TLdowjrw6QivZziZ6wDT9T/DLohHljh8MoaieObRQl8=)
2: PJf1Yws8p6oR_mrdRHX4LnOh1Z8.roa (hash: ceWACnB+ERuEfKRbsAjVw1PIFxKKxglKGhcLEOukNs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f4:71:d7:c8:7e:23:b7:55:49:59:76:37:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Mar 25 17:01:46 2026 GMT
Not After : Mar 26 17:01:46 2026 GMT
Subject: CN=9d379c31c975951baa87c53298fce4720f30d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:65:f7:e5:d3:c1:28:9a:03:b8:c8:5a:b6:
d9:bb:62:fc:0c:8b:c0:8f:5e:d6:9f:0c:89:83:31:
48:e8:a4:e0:ce:0a:05:b8:d6:2c:18:03:65:bb:fb:
2c:d9:11:b6:97:4f:53:8c:39:dc:97:2e:e2:93:a6:
00:6c:0a:d6:5f:c9:99:e2:c5:6c:b2:69:b5:dd:08:
df:24:5f:3f:a6:64:a4:0e:f0:c9:bf:19:d3:fe:6e:
51:58:42:c9:0d:bf:63:a6:58:ba:30:65:c8:b6:03:
ae:16:f2:21:3b:e6:b4:9e:ea:88:d3:2c:61:0f:90:
8a:5b:55:81:d4:6a:a5:6c:3b:e5:ff:c3:73:93:e8:
24:17:a9:8e:b0:6c:6d:32:c7:fd:8f:25:d8:87:69:
62:55:e6:70:4b:0b:50:4c:3b:61:9c:0f:1a:cb:fd:
a1:d0:fb:7a:32:3b:cc:43:5a:71:92:28:91:d9:80:
09:a7:1c:b9:c3:82:57:35:64:a2:e2:84:c7:02:31:
68:c7:18:7f:91:5f:a9:20:57:1e:fc:94:7d:dd:d1:
09:bf:36:dd:b6:0c:84:40:bd:4c:17:86:8d:32:2a:
6b:ac:2d:2f:47:f1:5f:79:60:df:fc:7e:a4:1e:f5:
fc:ba:f5:c5:b4:29:c0:8b:86:11:1e:5f:9c:03:2d:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:9C:31:C9:75:95:1B:AA:87:C5:32:98:FC:E4:72:0F:30:D5:28
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:4b:12:a7:ee:52:59:1b:e5:7b:73:dc:27:6d:ed:67:e6:
b5:fd:e4:10:68:55:ad:89:a6:2c:71:f8:db:3e:8a:90:cb:ce:
70:8e:66:de:58:73:d6:d0:ab:c9:0b:b6:d8:bd:c2:f4:ab:ab:
a0:3f:89:3a:88:27:50:14:a8:ee:e2:dc:64:63:a6:2f:5f:c1:
71:eb:ca:66:da:58:44:7e:f4:68:07:3e:9a:13:e6:57:be:3d:
81:ed:82:90:c0:8b:07:74:51:f5:cb:4c:5e:78:4b:bf:aa:a7:
cf:b2:63:6b:67:2e:04:23:3a:7e:c4:21:a9:af:d3:aa:56:6c:
d9:16:c0:8d:6a:91:dc:3d:11:ac:de:09:12:e5:2d:aa:15:e4:
56:34:c5:c8:04:a1:b5:7d:a1:f6:5f:f0:8d:72:c9:be:f5:77:
1a:65:53:1b:ff:f8:10:de:0c:4f:84:3d:dc:c5:ea:da:d2:20:
5f:66:21:ec:a1:70:d7:eb:b9:41:ef:07:a1:ea:64:d9:b2:a8:
e0:66:ff:9f:08:02:cf:be:b9:a1:6b:86:a0:60:54:cf:92:5f:
86:f5:f9:06:22:96:78:0c:0c:f1:f3:36:36:bf:8c:a4:7c:c2:
55:63:c8:5f:ce:26:a4:fb:ed:69:6d:c2:63:00:47:1f:c7:44:
a3:70:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:15 2026 by rpki-client