Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: 4oOp4FzIRU9Xqxow29Km4YIXZNtNv+xI1VxJ4yarkQw=
Subject key identifier: 75:2D:54:A9:DC:2E:4B:95:BE:4F:7A:70:26:C9:C2:C4:C3:D6:0E:31
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 019D273B2B91A3E65CF3CA890018754A22A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:01:22 +0000
Manifest this update: Wed 25 Mar 2026 23:01:22 +0000
Manifest next update: Thu 26 Mar 2026 23:01:22 +0000
Files and hashes: 1: _Hgo7jcPjmaSfusUTNwDyQGV918.roa (hash: HrRfQ3y2o/21ByPzpK6PlTJikaZMMOxAwoJ1HV+ZCfE=)
2: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: uy2aCTJl2mtwPJ/Ci9CJ+xon3xaFI4OqUk4P5/Nca5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2b:91:a3:e6:5c:f3:ca:89:00:18:75:4a:22:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Mar 25 23:01:22 2026 GMT
Not After : Mar 26 23:01:22 2026 GMT
Subject: CN=752d54a9dc2e4b95be4f7a7026c9c2c4c3d60e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:a7:98:21:b9:c3:41:b3:e1:40:47:c4:03:
e4:3d:f3:f5:09:21:94:98:f9:d9:b5:53:c9:00:1d:
3a:ae:67:07:09:61:a5:e6:70:1c:ad:f0:81:e0:a8:
ea:e0:a0:16:0c:ee:e6:ea:ca:a3:4f:86:5e:3a:0b:
7b:fd:ad:fb:d8:5a:25:63:0a:b8:e6:36:4e:85:3b:
c4:0f:14:a3:75:c5:52:a4:75:01:fb:82:05:af:33:
9f:9f:f7:36:df:72:22:41:45:08:3e:af:17:f6:6e:
a3:43:61:09:d0:05:62:ee:33:00:d4:f8:40:dc:9f:
75:07:25:30:71:1a:80:6c:57:6b:25:89:0f:9d:ae:
16:e7:68:e1:e7:63:6f:02:62:7a:30:47:00:a8:ba:
b5:e0:06:e7:48:2d:2e:5b:9b:a1:7c:dd:e4:d8:2f:
0f:48:2d:9d:3d:57:5d:dc:cc:59:4d:97:10:5b:45:
bf:25:ed:41:0f:6c:df:3b:df:4f:27:36:30:df:9b:
02:4f:24:28:ad:bb:b2:6f:fa:ed:f6:64:b0:74:66:
a7:41:d9:03:a1:69:1f:48:96:ed:41:1b:d3:76:58:
30:ee:e1:63:fb:91:41:1e:2a:9a:43:0e:c2:cc:e1:
54:c9:08:50:f9:f2:54:95:b2:1e:84:24:f6:be:fc:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:54:A9:DC:2E:4B:95:BE:4F:7A:70:26:C9:C2:C4:C3:D6:0E:31
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:4d:1c:09:d5:e7:86:aa:25:24:9f:c3:71:d2:66:19:82:
8e:87:ca:6b:0f:4d:d9:4f:9a:cf:22:1b:ba:14:fd:3e:6f:d4:
59:76:bb:f1:84:03:f8:a7:c0:d0:0e:c0:b8:5c:fa:c4:a2:a7:
3c:b0:f5:20:40:fe:df:5f:ea:a5:3e:93:ea:c8:30:5f:0c:5c:
17:4d:a3:54:53:4c:fa:24:7e:b5:94:b8:a1:11:4c:0a:9c:78:
02:11:d3:54:ee:48:84:30:a7:4e:37:f1:0d:d1:8d:db:3c:b4:
8c:88:b1:3b:6a:f5:81:6c:b6:7b:31:10:76:f4:4f:36:13:61:
6d:e3:97:dd:70:35:de:d0:7b:53:e8:f6:85:b5:fe:fc:d4:9a:
93:40:ba:e5:91:71:ff:f5:b0:c1:36:25:a3:f2:10:30:56:17:
0d:28:f5:9e:03:54:73:47:09:8b:b3:2d:83:34:53:27:e1:9e:
5c:78:be:95:48:79:34:50:11:17:b0:b0:a9:4d:69:45:48:f9:
6a:18:ed:37:74:43:a9:cb:b6:9b:4e:1e:cc:7b:a5:05:f3:3c:
0d:95:ba:ba:6e:d9:1f:bc:e5:72:1d:ef:9b:44:a0:d4:fb:9d:
0e:8a:b8:9f:2e:65:6e:33:be:99:62:9d:2f:2c:66:df:b1:d9:
9b:7a:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:32 2026 by rpki-client