Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: SqnqVa3tGWp/1+wuIuBirL4JHsuS9heFH34V1g7tZJA=
Subject key identifier: 14:9B:0A:A7:15:6A:50:CA:32:EF:5D:FF:03:C2:B0:31:3E:59:63:34
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 019D265F6E4E805442BE8E8910D10A5AC5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0F22
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: Og8b6mn9T1akZjxc4TVcMnSz1As.roa (hash: MZENTXsLseNKZbHPbPVFQM4cXWctRVemJxC3RSLuLEk=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: xd9F02CdR3Ec47BxoNqID2/nqcUYMXx2r/XpablVqyA=)
3: qpf2jrPnGEdSelRtM1fGztVUn_M.asa (hash: T6+awxj1fPEBE6Cn0I06mdbSa3YDzKpDM/bjQAsbn8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6e:4e:80:54:42:be:8e:89:10:d1:0a:5a:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=149b0aa7156a50ca32ef5dff03c2b0313e596334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:2c:e2:9b:f6:72:ef:8b:21:63:0c:ad:f5:
d0:0e:32:fe:00:77:8e:e2:d7:6e:61:e0:da:fb:c7:
53:14:81:ba:c2:0c:f2:76:13:db:3c:e9:be:b3:1a:
d3:09:b2:98:12:13:7d:ff:54:cd:a0:29:e3:7f:00:
79:1c:72:9e:43:4b:69:4c:de:61:de:01:ba:de:e6:
bf:3d:f0:cf:71:f7:5b:96:64:0c:76:88:c3:65:63:
35:3f:37:2a:c3:da:84:1b:05:80:5e:71:0a:ee:64:
e0:d9:7a:42:86:f5:a4:66:17:6a:7b:96:5f:86:94:
35:41:de:8b:9d:36:f0:7e:77:da:ad:50:1f:c6:aa:
51:bb:11:33:09:4b:ec:99:4b:76:27:39:e3:4f:e8:
99:ef:2c:8f:14:03:98:28:70:85:a5:6b:98:76:91:
4c:20:3b:23:71:a4:78:d1:14:74:01:1a:f3:ff:5b:
1f:69:82:68:2d:89:22:3c:6e:70:19:2e:b9:54:7b:
e2:50:2e:21:24:93:16:05:ff:07:84:60:7c:46:1a:
61:35:00:24:4f:ca:22:eb:69:95:03:b7:d4:d5:7d:
27:c7:8b:7e:ed:e3:b2:53:cb:60:6e:bd:de:da:3a:
0d:25:43:27:d3:23:0b:16:37:33:9f:c2:bd:c8:dd:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:0A:A7:15:6A:50:CA:32:EF:5D:FF:03:C2:B0:31:3E:59:63:34
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:25:4e:c7:75:48:05:e1:4d:25:62:11:fb:e3:45:f2:8b:d8:
d4:17:36:58:37:14:4c:76:cc:5f:23:64:ad:50:f8:22:4d:18:
e8:8a:b0:7d:87:c8:48:e6:49:a4:6a:e5:90:4a:8d:f5:4d:e2:
20:bf:4b:5b:97:23:e7:c9:8a:a2:fa:f0:b1:44:c8:8c:c2:36:
17:8e:8a:b7:07:39:65:42:bb:c8:8f:d3:d4:58:4f:69:4c:f6:
7d:57:b4:ff:12:fe:a8:34:06:ce:77:83:28:bf:8c:3c:ee:81:
c8:c7:28:1a:8e:f3:f6:dc:5b:1f:63:4b:e2:55:36:db:3e:0f:
0b:8f:97:4f:d0:7f:cd:46:68:f7:91:51:73:eb:f2:3f:64:3e:
ac:48:4f:0a:b8:ad:20:74:99:26:78:c7:1c:30:4d:20:b4:f1:
72:4c:e9:5a:e8:44:bf:18:17:d6:f6:ab:d0:43:6e:3d:31:de:
28:2b:f2:53:87:e4:12:92:4a:43:e4:7f:bd:8d:99:3c:a2:0b:
8c:51:43:99:b7:b1:26:41:14:27:91:3e:5b:f9:4c:2d:ba:10:
97:3e:b2:f1:49:1c:42:36:3f:1a:b0:13:2f:72:79:b5:a1:74:
45:e0:eb:1b:2d:05:bb:9a:87:67:ce:8b:69:de:b6:b0:6a:a3:
96:6d:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:10 2026 by rpki-client