Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: tl60dKXStM7UAVIy2F2+/bwbQwLj7rNR74/4G0OX6l8=
Subject key identifier: C1:73:DB:00:5C:5E:B9:4F:A3:27:CB:04:A5:A6:6B:C4:E3:20:79:A7
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 019D25838C31951249267BA911826D937D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 1415
Signing time: Wed 25 Mar 2026 15:01:10 +0000
Manifest this update: Wed 25 Mar 2026 15:01:10 +0000
Manifest next update: Thu 26 Mar 2026 15:01:10 +0000
Files and hashes: 1: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: gdjXfZB1nDEWrKEPkE1OH3jipeSWAaCALlfTDDXHqLE=)
2: zUQMp2BeSBKunWgSe9fmXZ9CuM0.roa (hash: GLAv3FngiNtDzlOEO79T42UrwsCvy0RXElAoeNFPOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8c:31:95:12:49:26:7b:a9:11:82:6d:93:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Mar 25 15:01:10 2026 GMT
Not After : Mar 26 15:01:10 2026 GMT
Subject: CN=c173db005c5eb94fa327cb04a5a66bc4e32079a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:29:fa:7e:18:b2:cb:90:68:cd:5c:c1:08:
10:53:98:b7:60:37:af:26:76:83:15:dd:b0:c9:fc:
ad:07:2b:65:62:a4:45:c7:be:80:20:69:6e:c5:33:
7a:f5:06:80:51:f3:87:4a:d0:85:48:48:2e:2a:57:
54:f5:88:b9:b2:ca:28:2b:f5:47:6e:b5:28:db:42:
b3:b4:e6:51:59:94:a9:71:c8:7c:04:11:18:01:65:
09:6c:3b:7c:11:c1:ee:55:75:1c:55:38:73:c5:b3:
fa:05:0f:a2:00:60:8b:f2:2f:2d:0c:af:2e:c1:4e:
06:29:64:0e:8f:e8:0a:2b:fa:67:0d:4c:d6:1f:df:
b3:b0:66:79:10:dd:7e:5b:ae:33:8c:40:96:b3:e9:
1c:77:41:12:de:13:af:b8:45:50:f6:dc:c2:2c:48:
4c:f7:c5:65:74:ce:48:c0:15:77:ac:cb:e9:73:d9:
b2:4b:1a:ad:e5:c1:f7:f9:10:ac:ec:ce:e2:18:8d:
45:a5:06:8b:c2:2f:5f:19:be:41:03:0b:d2:77:ee:
79:0b:40:d5:1a:6f:e0:a9:90:13:6c:c1:56:27:ee:
00:39:c5:50:37:a6:9a:05:7e:ba:94:11:39:fe:27:
9f:50:9f:e3:f8:b5:02:6e:97:ec:15:4f:44:5a:23:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:DB:00:5C:5E:B9:4F:A3:27:CB:04:A5:A6:6B:C4:E3:20:79:A7
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:69:e3:f2:c8:5f:c9:80:fc:9c:c6:de:85:42:ef:6f:0a:c3:
bd:0f:8f:f7:d9:10:2b:78:cf:b6:00:73:65:60:2d:42:91:11:
12:a4:9b:f4:fe:64:22:39:28:a5:75:30:87:af:51:73:f2:31:
16:68:55:3f:d3:a5:73:fa:61:ff:17:98:48:39:b4:9b:df:34:
a0:bd:c1:b8:3a:99:39:32:79:33:15:df:9e:7a:9f:17:6a:bb:
5e:ee:55:45:4c:c9:52:60:cd:56:a1:3c:98:99:d7:1a:d8:d4:
74:49:1a:61:21:6f:4f:03:63:6e:ca:4e:2a:a2:b4:e6:82:d5:
a8:34:a2:92:f0:e7:9f:7a:0e:63:bc:3f:2e:4a:f2:f8:ac:89:
10:7a:39:1c:48:3f:31:31:cc:c9:bd:47:c2:f4:85:0c:da:71:
cd:a7:b1:f0:d7:70:1c:cc:50:e1:e5:67:3c:7f:65:17:c3:c5:
24:06:c1:ec:ef:32:3a:56:d3:f0:63:cf:af:44:5d:d2:be:a8:
03:36:01:fb:27:d0:35:fa:72:a1:8b:73:49:82:6c:72:60:65:
e5:fb:32:30:cd:74:25:56:0f:22:ed:e2:d4:a5:95:8e:c8:54:
96:25:57:cc:2d:a8:d9:a0:01:20:6c:5c:30:a6:e1:ab:18:c6:
16:1e:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:14 2026 by rpki-client