Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: +aT0ZgcA0c2HUsCy+fWyLma271HW/hrc65veHu4Bajs=
Subject key identifier: 71:93:E2:CE:99:34:75:A3:2D:FA:DA:2D:64:AC:D8:A6:B1:BC:9F:E5
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 019D26CCFDA85034A9E59A04380C1A5B0286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 0479
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (hash: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: HOByI1wXCzP46eJp3jX2KtvrhLnKX55k4jv0CBH2Fow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fd:a8:50:34:a9:e5:9a:04:38:0c:1a:5b:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=7193e2ce993475a32dfada2d64acd8a6b1bc9fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:50:59:04:dd:00:07:2b:de:ae:0e:c4:d8:
93:56:f9:6e:50:10:3f:58:9b:dd:ab:37:8b:87:46:
44:6b:7f:58:86:6c:9a:9b:d3:e1:3f:85:12:d1:cd:
68:d3:3a:e1:bb:78:44:65:81:ba:60:a0:ea:33:31:
7e:d9:13:48:f5:6e:cd:9f:bf:52:f4:5c:d7:dc:1b:
b1:32:5a:37:bf:c3:56:f9:c4:55:1a:64:4e:79:f5:
fa:a7:1f:f1:f5:05:2f:ff:8d:61:4d:04:76:d0:a3:
c6:b3:c7:84:b2:e0:b4:8e:90:5e:52:22:08:d0:3a:
ae:f3:cb:f5:c0:68:d7:35:56:fa:77:05:8a:38:4b:
c8:0f:21:c5:73:23:77:4c:09:f3:c0:c5:ee:92:00:
53:d7:28:fd:f3:39:9d:07:8a:09:05:62:22:dc:73:
1a:1a:ec:7e:8f:fe:a8:eb:c4:b9:23:61:e7:48:fa:
51:7d:4c:6d:e8:20:59:03:b4:23:d4:21:ca:be:a6:
16:9e:d9:d4:45:96:da:d8:ce:1e:4a:fc:26:8e:81:
7b:56:2c:5e:e7:fc:1d:48:16:81:21:ad:b9:74:0d:
76:78:7e:24:d9:5a:b2:00:be:6f:b2:d3:ce:87:7c:
c4:df:a6:6a:bb:d9:71:15:ae:78:28:07:d6:fe:4d:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:E2:CE:99:34:75:A3:2D:FA:DA:2D:64:AC:D8:A6:B1:BC:9F:E5
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:59:bd:24:c1:89:a4:7b:41:1a:4b:58:d0:64:f8:69:31:ca:
98:95:4b:a3:44:66:5b:84:5f:ff:0d:3d:68:6b:97:4d:5a:8a:
1c:96:4f:0c:b1:a2:7c:65:2c:59:d0:0a:2b:8e:84:09:97:ac:
27:ed:33:b6:2b:69:24:e8:22:5c:a2:40:de:a4:94:fa:b7:95:
72:ac:76:e9:d8:0c:44:20:d8:c0:a0:a9:00:b6:6a:39:6c:0c:
0f:df:15:88:2d:23:4a:a4:15:ec:ec:b4:9d:23:de:0e:3c:50:
04:d5:61:63:98:9e:3f:ad:48:28:6a:44:e1:b6:47:3b:45:1b:
74:5e:9d:76:49:54:be:70:be:0f:df:a0:1c:f9:eb:2a:67:0e:
07:ca:76:8b:55:f8:01:4a:09:55:68:00:43:30:d5:1d:a4:4a:
a7:9d:d2:ef:f6:2f:69:4d:7b:bb:10:71:8a:b2:52:e8:7c:c7:
3c:5c:7c:32:e9:00:f5:a1:c4:71:d2:0a:3f:5e:15:85:2f:e7:
8b:7c:f1:4a:07:67:f7:32:99:f6:f8:c4:8f:1e:04:ef:cd:84:
f0:6e:14:f5:a2:4e:44:f1:10:2b:bc:86:f1:95:3b:cd:a9:ae:
81:af:f6:b1:44:e3:f1:77:5d:d9:44:ac:fc:73:87:49:ad:f7:
45:c5:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:30 2026 by rpki-client