Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: 367t6ScmTxMrGoqVYGienXsmiVmNrXf6VJ6t391arkQ=
Subject key identifier: 5A:B6:A2:00:73:32:30:63:39:3F:3D:A7:71:3C:7E:8C:55:B6:58:27
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019D2A04FD8ED30E67D1F2AA26B25696B2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0BA4
Signing time: Thu 26 Mar 2026 12:01:03 +0000
Manifest this update: Thu 26 Mar 2026 12:01:03 +0000
Manifest next update: Fri 27 Mar 2026 12:01:03 +0000
Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=)
2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: VEuFoVQkYAkCnDSbAXksghco2nYsu2t22dXqHqyNFm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:fd:8e:d3:0e:67:d1:f2:aa:26:b2:56:96:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Mar 26 12:01:03 2026 GMT
Not After : Mar 27 12:01:03 2026 GMT
Subject: CN=5ab6a20073323063393f3da7713c7e8c55b65827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:95:86:1e:82:67:8c:1f:3f:04:32:8a:57:
31:83:41:3c:d9:67:55:4a:02:56:a1:a0:d6:22:3d:
c1:8f:23:0d:39:0b:1d:b8:7f:d4:7b:43:85:af:eb:
16:7b:46:35:b6:93:9b:cc:22:0a:35:04:52:48:f6:
4f:3f:11:57:8e:89:32:05:61:51:5b:de:a7:bb:d3:
61:f3:59:c6:1e:ae:55:04:fe:48:a1:bf:fe:26:b1:
1e:72:4d:d2:50:77:7f:b3:ff:41:8f:59:e2:ea:e9:
2d:d3:06:77:66:a8:95:43:46:a6:7b:31:2b:66:56:
38:9a:9c:f2:b4:ae:98:4d:b1:5a:bd:c8:71:d9:46:
f9:bc:65:66:ff:d6:a4:be:6e:8f:d3:b5:bc:0c:46:
c8:bf:5f:b2:66:7f:0b:37:3f:ff:dd:8d:d6:be:e8:
48:b5:53:b2:de:b2:eb:f1:8b:22:6c:92:f2:00:e7:
ca:20:ad:c3:bd:f8:7e:ae:88:4a:bf:70:71:ab:0b:
15:f8:f1:e5:02:0c:e1:bc:d2:c4:73:f6:4a:75:94:
ed:38:f6:74:b9:75:15:b7:dc:89:9f:c0:97:77:b0:
54:5e:73:2a:c5:d3:3a:8f:38:69:2c:5a:16:be:0b:
5d:64:39:c4:ef:d0:f2:f8:7e:4b:ca:63:8d:4c:04:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B6:A2:00:73:32:30:63:39:3F:3D:A7:71:3C:7E:8C:55:B6:58:27
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:5b:b6:36:04:53:81:e3:75:10:e5:ac:54:16:f5:c4:26:
1f:8f:80:28:90:b8:9c:4d:b2:ab:db:1c:03:d6:04:43:14:90:
71:59:b0:a7:8a:dc:1d:7d:48:f6:11:35:cf:d6:89:40:ae:6f:
a7:bb:ee:d8:14:f2:f9:e9:38:71:95:9d:50:d0:f4:7d:37:9e:
fb:57:89:3b:25:f5:64:21:c6:05:02:c4:50:0c:6e:d7:bc:8b:
a5:ba:50:77:06:66:7e:2c:1e:d5:f5:c3:0a:e7:d9:1e:e3:1f:
f6:bf:c3:8a:c5:bc:ad:e9:08:31:76:07:e3:7e:fb:a7:b1:55:
64:2a:9e:bb:1d:f2:38:fd:ed:88:fe:9c:d4:91:27:44:66:8f:
b3:bb:7b:d6:d3:b2:c5:e9:26:62:3f:66:90:62:de:d0:9c:16:
55:91:28:76:d6:b7:91:3d:da:96:f0:f9:81:51:86:c2:31:37:
6a:fd:60:23:a9:86:84:cc:f0:a6:f3:cf:3e:f1:8e:b8:9a:d3:
93:09:fc:b2:ea:40:f2:f7:74:5b:fc:9e:21:32:79:17:d8:77:
eb:bd:5f:5d:0c:ea:be:68:eb:9c:a1:a2:fb:a3:fe:a6:8b:ca:
11:b8:3e:25:f9:8f:5a:6a:ad:e4:69:19:14:02:cf:f9:d2:b7:
ab:8a:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:19 2026 by rpki-client