Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: ix9PhRR7+DfBO1YXr9buMllUn+kh+8Fe46soNWGKJFA=
Subject key identifier: B4:59:91:03:1B:26:BC:7F:F6:00:62:BC:8F:A6:44:EB:28:4A:D4:BD
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019D2A04C73E3FC0BF9EAA931A3FDF403F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 1136
Signing time: Thu 26 Mar 2026 12:00:49 +0000
Manifest this update: Thu 26 Mar 2026 12:00:49 +0000
Manifest next update: Fri 27 Mar 2026 12:00:49 +0000
Files and hashes: 1: ercPbtahy3f9eM5GSzohbTGgqsw.roa (hash: 6i0HSVm0VOwA3Kxo8s7D20nC5SFv01ATtGPCU/ddYG0=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: 6i/IVJfn/VPK+tV0+GTvqd1sl0dOpIFaGmIZgVH8p1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c7:3e:3f:c0:bf:9e:aa:93:1a:3f:df:40:3f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Mar 26 12:00:49 2026 GMT
Not After : Mar 27 12:00:49 2026 GMT
Subject: CN=b45991031b26bc7ff60062bc8fa644eb284ad4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:ae:f4:db:41:05:17:ae:bc:39:72:78:ce:
5b:ac:ba:72:6b:8c:fc:14:e2:75:23:3d:be:8b:9b:
5b:b6:d1:48:57:e8:6a:6d:8c:58:35:cc:55:40:a6:
ca:33:93:25:6f:7f:9b:c3:1b:2b:e5:e3:29:75:8b:
b9:bb:11:f5:35:ef:db:4a:f7:14:d5:c3:c7:38:d0:
03:ba:fc:bf:45:03:31:63:10:ce:23:77:87:a3:5f:
c0:75:22:5a:13:3f:29:50:f5:12:7e:53:32:3d:ea:
84:d2:e8:24:16:5a:3f:dd:a0:6d:ae:35:1a:80:57:
8f:15:80:b6:6d:93:86:b5:ae:ab:db:76:0c:a4:e8:
d3:d5:3b:75:de:31:f5:7e:45:88:22:82:b4:5c:87:
c8:31:7e:f0:a3:de:d3:96:10:8a:e4:11:fc:4d:ef:
e8:7a:57:57:69:3e:b8:4c:5d:fd:32:a6:e7:82:5a:
ed:ad:98:96:18:6b:3b:c3:75:a2:8f:fe:72:71:d4:
16:0e:3c:92:97:2d:da:71:21:15:93:e9:0c:d2:64:
19:13:1e:8b:49:32:bd:15:7d:91:9e:8f:60:a6:3d:
46:32:7b:67:ca:b0:6a:84:50:5b:fa:ac:8a:74:45:
b6:68:2d:2a:fc:b0:b9:6b:81:8f:42:3a:32:ec:af:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:91:03:1B:26:BC:7F:F6:00:62:BC:8F:A6:44:EB:28:4A:D4:BD
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:34:72:e0:b4:a1:1f:cc:bc:d5:2f:39:27:a2:fd:0b:71:
19:d9:6a:a5:40:93:da:f9:f8:f6:1b:03:bd:09:69:fa:1a:ac:
ec:07:b9:96:8c:b2:47:55:9b:77:a7:51:64:03:e8:0f:11:2e:
10:4d:50:6e:c7:0e:e1:96:1b:44:2b:04:1c:64:25:08:8b:3f:
3d:91:9f:50:f4:31:61:f2:af:7a:cb:cc:d7:cb:bf:fe:04:39:
6a:5c:2c:33:84:db:0f:9e:cb:04:2c:fb:98:c4:c5:58:9e:b8:
83:8c:7a:da:ff:bd:61:12:d8:10:48:50:54:57:ff:13:23:fb:
51:09:04:a0:91:86:44:60:8d:e8:5a:d5:d8:5b:e9:a3:ac:f3:
c6:56:28:8a:cf:bb:30:a4:41:c6:cc:63:31:46:28:a9:a6:a0:
72:e4:d0:fc:6d:d7:8d:8d:a0:45:58:32:b5:a2:88:8b:6f:be:
9c:69:19:ad:29:18:37:e6:23:b4:aa:11:41:86:6c:55:5c:48:
7b:ba:53:09:6d:01:14:54:93:47:8d:af:99:bd:2c:b0:28:21:
c4:25:d4:f2:f6:3a:7a:66:89:d2:78:4b:65:ef:84:03:90:96:
c2:2c:c5:1b:79:3d:c0:19:04:68:5d:b9:53:f5:c3:be:a6:84:
8c:52:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:51 2026 by rpki-client