Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File: nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier: 7tJngPX7u1j6/+ngxwHXnUcuMRN1UevfsydNEIxiVGE=
Subject key identifier: 20:CA:7A:35:13:86:79:57:D1:0C:8C:4A:FB:29:3C:D7:0B:E2:23:E0
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 019D288470BB54E43D3B67BEEECA16BD0C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number: 0523
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: aEdbH2gcMJrcI8LeEpWiiItu560.roa (hash: 2FbQgo/a/H9dMPsQCbyn1M5Rd/nKsnsa5CJ69qDU4Ds=)
2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: Ym/XXGa37yYy9PBawniXu9pjUBLoQ+0mgd2Z85JqKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:70:bb:54:e4:3d:3b:67:be:ee:ca:16:bd:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=20ca7a3513867957d10c8c4afb293cd70be223e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:d9:c7:ae:ce:35:3d:5e:fe:48:39:9e:86:
b5:e1:db:17:f6:28:1d:dc:b8:5f:e6:6c:b7:ef:62:
13:3c:37:04:ea:19:86:fa:56:cb:5e:81:8f:16:10:
a3:f3:85:91:d1:62:b0:b6:a9:c5:b9:4e:fe:b0:95:
64:89:cc:3b:26:2a:95:f0:35:5b:87:de:65:da:08:
98:87:4c:de:b2:db:95:dc:04:5c:1c:dc:4d:e7:0a:
fd:7d:0f:c4:eb:23:e5:ec:27:3f:eb:47:2d:20:4e:
60:8a:8d:74:61:71:a6:d8:df:37:12:b8:a5:f7:99:
a0:f5:55:ca:9c:d7:42:9e:1b:9f:eb:d7:51:6f:20:
01:6d:fd:00:82:bc:66:fd:9f:84:5d:b9:c3:3e:72:
38:9f:c1:77:b1:04:c8:43:00:2b:a6:d4:2d:42:3c:
6f:e5:06:3f:a0:87:af:a2:8f:a7:ac:97:e7:6b:78:
af:6a:1f:7a:08:26:92:5e:e9:9b:ea:38:5b:83:92:
5e:29:75:4c:04:67:9c:58:45:c0:b5:a1:4b:d5:8e:
4c:eb:7a:30:ca:5e:4c:12:5d:4a:9c:8a:79:e0:4c:
fa:17:da:a2:a8:92:56:09:c7:9f:dd:72:c2:17:da:
25:8e:ea:6f:c8:f7:c3:84:bc:2c:1c:a2:24:8b:be:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:7A:35:13:86:79:57:D1:0C:8C:4A:FB:29:3C:D7:0B:E2:23:E0
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:b3:47:5a:ac:84:97:0f:ce:88:4d:8f:86:1c:d6:f6:43:
f0:c0:7d:1b:2e:21:62:03:2d:d6:2c:47:06:2c:6d:2d:63:96:
9f:23:df:e2:a8:73:17:bc:bf:18:3c:de:7e:72:3d:04:07:79:
8e:8b:8d:4c:34:c5:7a:f2:38:01:d5:bb:6a:97:6b:44:7e:57:
96:5b:63:87:76:ec:8d:38:aa:17:a5:ca:92:55:10:6f:6c:bf:
cd:14:46:99:40:7b:d2:37:e8:58:37:26:ec:d6:c4:57:e9:bd:
58:27:16:e3:d8:f0:47:27:c4:05:7b:51:c0:83:27:d3:8b:2d:
e8:4b:2b:74:9a:ef:d7:34:6e:bb:60:4f:fb:e3:e9:62:88:31:
3c:bb:d6:fd:98:26:55:08:32:eb:4a:4b:c4:4c:92:37:8f:55:
f9:ad:83:16:ef:5a:c1:39:d3:81:1f:3f:20:07:01:f6:38:29:
14:a6:00:df:85:44:c7:7a:0c:cc:b3:f4:91:e5:f8:14:a8:0e:
9e:a1:39:ef:e2:05:60:8f:04:53:7a:a0:a0:1d:00:2f:39:47:
92:04:aa:56:71:6e:9a:c8:30:9c:9a:6d:83:3f:77:5c:69:b1:
62:ac:ab:85:11:1f:c0:f0:f3:df:c5:ea:0a:50:c7:61:04:61:
9b:6e:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:32 2026 by rpki-client