Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: xmLwX5P63IFVTnoboLDtilthn2kykfBDlBVmMtSBiHo=
Subject key identifier: D2:8A:D2:06:FB:8B:AB:77:A5:43:B3:4C:50:50:90:DD:30:F0:97:07
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 019D25F1CE0E13E6FC32453CFAA3BF811C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 1019
Signing time: Wed 25 Mar 2026 17:01:37 +0000
Manifest this update: Wed 25 Mar 2026 17:01:37 +0000
Manifest next update: Thu 26 Mar 2026 17:01:37 +0000
Files and hashes: 1: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: zoaU7ybTucgmGKYG3Ka7tCIxQRLsYiBo6oG3w8Qa9MA=)
2: wflbDoADYAsK4GD1fsBz6TdNDNU.roa (hash: 0r3hdg4G+H0uIyPzUPDcBYqQLBzzIsPKqLy64umuAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ce:0e:13:e6:fc:32:45:3c:fa:a3:bf:81:1c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Mar 25 17:01:37 2026 GMT
Not After : Mar 26 17:01:37 2026 GMT
Subject: CN=d28ad206fb8bab77a543b34c505090dd30f09707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:99:87:3d:b8:ce:a1:94:46:3b:6f:a8:50:
d3:95:34:b4:44:bb:07:1c:6c:ca:c1:bf:4f:49:fc:
39:b6:78:3b:dc:3d:8d:b9:35:c8:d9:61:f0:b1:0d:
5d:4c:08:bb:e3:8d:c5:4b:54:f5:1d:5c:1d:e0:7a:
38:6f:f9:ae:30:5b:a4:56:99:90:f3:ad:43:df:a8:
dc:e0:92:c0:9f:bb:b8:28:cb:c0:cb:d6:82:6d:c7:
6a:67:a5:c6:b7:c4:f3:3b:b2:5b:7d:83:ba:49:07:
0f:8c:74:be:32:2e:ac:cf:9c:01:f7:87:37:c3:b1:
79:e4:da:17:a7:0f:45:c9:3d:f3:2b:a6:99:34:c8:
ab:98:3c:de:43:10:f7:f2:d6:18:40:6e:40:dd:51:
84:9c:19:6c:0a:51:26:a4:5d:0c:39:ac:87:19:e9:
ec:d4:db:7e:1b:0b:7f:6a:09:fc:49:f1:2e:7e:e8:
5c:fa:c5:25:fd:d2:16:4c:94:52:2b:d6:a1:f2:87:
f2:91:92:18:8c:fd:31:21:f4:12:d0:7b:c6:87:a0:
6c:2c:d3:07:89:a1:c6:e8:ac:bd:7c:24:a3:7e:74:
20:29:a3:32:30:e0:b8:02:ed:99:5e:e8:a1:08:63:
8c:72:89:26:ed:5e:71:24:32:e5:c0:8a:cc:83:a0:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:D2:06:FB:8B:AB:77:A5:43:B3:4C:50:50:90:DD:30:F0:97:07
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:ac:91:e3:84:0a:e2:2a:b8:47:c9:c4:a4:e5:07:bc:a0:
2d:be:3c:54:b3:5f:3e:83:7c:58:2e:bb:3e:e4:8f:aa:cb:fc:
cd:ae:90:3e:23:95:51:ec:78:0c:f2:ab:1a:ef:f8:39:f7:ac:
b5:27:e7:29:a0:23:80:4f:95:98:f0:49:31:7d:42:c5:24:35:
99:d8:ad:3a:29:44:c8:53:57:3d:ce:d6:39:21:b7:27:3f:a0:
d4:2e:fb:b6:ad:17:b3:d7:81:ac:5b:a3:38:bf:3e:84:90:09:
3e:1e:02:78:e0:a2:57:4a:19:3f:fe:bf:ad:2d:7f:a1:86:f2:
c2:f0:9f:9d:70:2f:14:9a:ef:cd:ee:65:94:b4:e1:23:b9:45:
27:37:99:e3:d7:0e:e2:48:0c:85:55:ba:0b:b4:73:9c:60:89:
d4:17:e6:fa:eb:68:b1:aa:40:8b:03:58:d4:71:b9:a7:91:1a:
75:bc:b1:af:70:e1:c7:9a:98:74:48:33:5d:50:b2:84:ba:34:
75:10:56:65:12:c3:11:dd:69:00:f8:50:24:81:8c:98:90:5b:
15:b4:5c:ac:03:65:c6:fb:f6:02:7b:31:c6:8f:a1:4b:fc:e2:
17:f5:10:e6:25:de:dd:a8:a2:b3:35:d9:c5:01:af:4a:9d:0e:
d9:a4:ac:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8c4OE+b8MkU8+qO/gRyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZj
MGQ2NTkwHhcNMjYwMzI1MTcwMTM3WhcNMjYwMzI2MTcwMTM3WjAzMTEwLwYDVQQD
EyhkMjhhZDIwNmZiOGJhYjc3YTU0M2IzNGM1MDUwOTBkZDMwZjA5NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSZhz24zqGURjtvqFDTlTS0RLsH
HGzKwb9PSfw5tng73D2NuTXI2WHwsQ1dTAi7443FS1T1HVwd4Ho4b/muMFukVpmQ
861D36jc4JLAn7u4KMvAy9aCbcdqZ6XGt8TzO7JbfYO6SQcPjHS+Mi6sz5wB94c3
w7F55NoXpw9FyT3zK6aZNMirmDzeQxD38tYYQG5A3VGEnBlsClEmpF0MOayHGens
1Nt+Gwt/agn8SfEufuhc+sUl/dIWTJRSK9ah8ofykZIYjP0xIfQS0HvGh6BsLNMH
iaHG6Ky9fCSjfnQgKaMyMOC4Au2ZXuihCGOMcokm7V5xJDLlwIrMg6CmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKK0gb7i6t3pUOzTFBQkN0w8JcHMB8GA1UdIwQY
MBaAFJyT64p9Gf/XgEdlrP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQt
Mzk2YWQ3MDEyMzBlLzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBl
LzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHSskeOE
CuIquEfJxKTlB7ygLb48VLNfPoN8WC67PuSPqsv8za6QPiOVUex4DPKrGu/4Ofes
tSfnKaAjgE+VmPBJMX1CxSQ1mditOilEyFNXPc7WOSG3Jz+g1C77tq0Xs9eBrFuj
OL8+hJAJPh4CeOCiV0oZP/6/rS1/oYbywvCfnXAvFJrvze5llLThI7lFJzeZ49cO
4kgMhVW6C7RznGCJ1Bfm+utosapAiwNY1HG5p5Eadbyxr3Dhx5qYdEgzXVCyhLo0
dRBWZRLDEd1pAPhQJIGMmJBbFbRcrANlxvv2Ansxxo+hS/ziF/UQ5iXe3aiiszXZ
xQGvSp0O2aSsyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client