Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: agG7oTXAY9Vs655q3chmzYMuwSNeP+S1MNekzPXjJsg=
Subject key identifier: 77:F8:D9:EE:E1:4C:C0:F9:A8:B2:A8:67:2F:19:C0:D1:A2:7A:6D:01
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 019D2884B53EEC47478CF6ADFC8681259C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 1264
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: GJbpcBM6DeYJcijI_V6UQpsMcLo.roa (hash: JvMmW6CWfWERUpYtBxgQrLJ4+C/bBMbHU6ozU5Y8U6A=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: xqjc+t8lqNxWQTRhtDr0oAtrSUhP2qFCZ8Q/OiLDhL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b5:3e:ec:47:47:8c:f6:ad:fc:86:81:25:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=77f8d9eee14cc0f9a8b2a8672f19c0d1a27a6d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:f7:f1:02:96:33:1b:8b:b5:c5:37:f9:17:
5f:78:e0:b3:98:20:3c:09:a1:9a:03:20:87:20:c8:
b2:7b:ee:60:79:a6:a6:4a:f2:1a:9d:ec:e5:f0:28:
13:b2:6c:3f:a1:1a:a8:13:47:4a:1c:d3:b3:d6:72:
bb:ce:02:c7:26:69:0b:c7:aa:d9:b0:56:c4:bc:06:
40:1a:f7:57:13:eb:d3:b1:f3:ba:a0:4b:42:db:e6:
06:1c:e1:35:b4:6e:ce:64:ef:64:f1:3c:14:b1:d0:
03:fa:59:6a:df:94:2c:4b:66:e7:5c:3d:e2:f2:9d:
3c:83:38:a5:ed:38:4c:a6:4e:7f:72:71:7c:d4:d1:
1e:48:3f:2e:b4:67:59:63:f5:9b:52:24:5e:21:79:
81:3b:25:ea:89:59:bc:b3:78:72:26:a3:02:12:0f:
81:6a:59:95:9e:f3:50:21:ec:98:8c:73:ee:db:16:
4e:df:30:6b:6b:01:a9:b9:19:46:53:8e:c4:78:be:
ac:6e:99:06:62:bb:04:99:af:0d:43:3b:58:a1:1f:
de:cc:18:d3:55:6d:c8:7f:27:c5:b8:58:d6:c2:6d:
91:60:59:fe:8c:fe:ad:f5:59:d9:17:62:2f:c2:b0:
8c:58:78:e7:85:ac:1c:bb:e7:c5:58:82:76:a6:6e:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:D9:EE:E1:4C:C0:F9:A8:B2:A8:67:2F:19:C0:D1:A2:7A:6D:01
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:2e:d6:68:d3:23:59:59:24:35:08:3e:d1:e1:55:b4:7e:
bd:ce:82:ee:2e:5c:8d:37:56:6e:2c:cc:02:0b:55:75:26:38:
02:fd:a5:15:bf:10:62:a5:88:6c:3d:26:52:5d:c7:52:36:b4:
2e:29:c2:a6:24:f6:6a:6b:ea:82:70:32:25:fb:63:31:43:dc:
89:ce:80:2c:d9:01:07:8d:f9:44:3e:0c:88:95:93:5c:dd:7b:
4c:65:10:d7:aa:4f:fe:88:0c:80:1e:f1:1d:72:95:7d:31:0b:
76:53:90:fe:fe:d0:4e:72:be:c5:43:7b:d9:fc:db:cb:9d:fb:
10:23:75:f3:63:6e:e2:47:0a:11:31:4a:f7:da:9e:9a:2e:a1:
9c:5a:c9:67:c4:29:21:8e:63:cd:57:d1:f7:1f:c7:64:e4:9a:
21:cb:ad:90:a1:c6:22:46:4f:28:5b:33:e4:05:e9:d9:86:55:
05:27:e0:b5:78:1c:3d:89:8c:40:6e:6e:e8:73:c6:ed:99:54:
ee:44:c9:09:d2:51:f4:de:a2:27:66:ee:8c:c0:60:f7:1d:75:
03:1f:12:8c:f6:f3:86:c3:03:bf:5d:31:29:08:41:50:4d:ff:
9b:34:6e:2f:d4:4f:33:bb:bc:05:1d:6d:e2:5b:c1:a7:ef:11:
13:ea:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:26 2026 by rpki-client