Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: a09CuJPi8/3v1rqOxyC6grVc9BLTDQNUpuv4BOxyK+Y=
Subject key identifier: 04:CA:93:81:5D:13:9A:B9:66:09:75:90:9C:B4:F9:53:45:48:54:59
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 019E20FF8A899018AFC661FB144A52F48C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 109B
Signing time: Wed 13 May 2026 11:01:18 +0000
Manifest this update: Wed 13 May 2026 11:01:18 +0000
Manifest next update: Thu 14 May 2026 11:01:18 +0000
Files and hashes: 1: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: DvvGWpVxF/7YbUnkPg85d6DfBemeGT8wvkBzenSoLOc=)
2: wflbDoADYAsK4GD1fsBz6TdNDNU.roa (hash: 0r3hdg4G+H0uIyPzUPDcBYqQLBzzIsPKqLy64umuAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:8a:89:90:18:af:c6:61:fb:14:4a:52:f4:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: May 13 11:01:18 2026 GMT
Not After : May 14 11:01:18 2026 GMT
Subject: CN=04ca93815d139ab9660975909cb4f95345485459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:22:2d:83:97:72:2e:9b:82:15:d6:06:bc:
b0:c8:fb:37:07:9c:62:e4:d0:f0:f3:49:bd:90:55:
ae:40:a0:72:21:73:40:0f:87:e4:c4:f0:c6:eb:4f:
d0:3e:32:51:36:41:f9:0a:bc:2a:20:18:85:86:7e:
9f:47:c7:1e:cb:e9:a3:dc:22:be:25:91:7c:10:f7:
75:7d:55:be:14:d6:4d:67:eb:f6:be:c9:7c:eb:3d:
46:da:42:be:29:f1:14:45:73:92:ea:b0:f2:32:e8:
2c:e4:b8:67:2e:0e:a4:5b:47:9b:f0:3b:36:8b:7a:
3a:ef:e3:9d:08:32:3e:44:32:15:36:4c:dc:24:1c:
03:68:14:bd:2f:90:3b:3e:c3:4f:90:40:0e:ad:e7:
4a:e8:4d:9e:a6:24:04:4a:79:06:64:df:70:e7:7f:
82:24:e6:73:8b:3f:a5:9d:01:18:ac:30:8e:39:4b:
8d:8c:5e:74:87:d9:2a:a1:a8:cb:3b:e1:e4:1a:d8:
62:dc:60:c0:34:09:3a:37:15:f0:ba:af:9a:b4:a0:
80:d5:5f:66:a6:c0:4d:65:5c:21:f0:fd:aa:b0:3e:
e7:1d:f6:cc:33:18:22:cd:7d:ff:71:fe:c2:89:1e:
75:1e:7b:2d:b9:25:b0:bd:84:8d:ae:58:ba:1f:61:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:93:81:5D:13:9A:B9:66:09:75:90:9C:B4:F9:53:45:48:54:59
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:ce:e1:d5:16:81:0f:87:a2:af:e4:67:36:22:46:b5:13:
aa:a7:72:6c:e1:8e:24:c1:6a:9d:e4:9a:23:4b:a8:25:9f:33:
34:bb:55:95:10:64:9b:09:c3:7a:1f:01:7a:3b:15:03:6a:f5:
43:7c:f9:0a:1a:0c:db:5b:33:3d:13:0a:8a:40:62:81:be:e6:
6c:84:88:06:60:e4:30:81:39:49:8c:0b:01:4a:db:6a:79:68:
5f:43:77:15:84:61:3e:8a:b6:20:83:1b:95:a1:47:89:26:f5:
ea:f3:8d:91:ad:fe:2b:da:51:49:7d:31:20:47:36:c1:fb:de:
d5:4f:c2:4f:1b:eb:94:23:c2:1c:1d:00:de:19:90:b2:e9:99:
a7:9e:a5:5d:07:7a:87:dd:94:ac:c8:b8:d0:6d:0d:63:fb:ec:
14:ef:f2:94:e8:bf:21:38:25:90:92:1d:b6:09:53:a3:2b:5c:
fe:ab:84:2e:28:a1:96:6a:c9:97:df:0e:f3:53:45:d9:8d:b4:
83:9a:ea:40:ea:8c:26:5b:4b:35:3d:23:f6:8a:41:e5:b3:a7:
5f:71:96:6c:5b:ce:d1:70:ab:69:88:98:7c:51:73:7f:26:a2:
fd:f6:28:dd:42:59:05:fc:64:eb:7a:ac:48:c2:63:d2:f1:56:
0d:04:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:55:34 2026 by rpki-client