Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: VGceyx/0qQF3msX8T0SIv/H2x9U4E88RuM8HJ03eLGU=
Subject key identifier: E9:2D:33:65:88:FD:73:91:B4:61:43:C6:E0:0D:FF:13:22:24:CB:5D
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 019D27E04A9B3102ED0E75BFB49F26FDFC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 167B
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: e8Z8NXoRn89z8xMoswHq7U1GfcI.roa (hash: ZQm2tG9VlJlgcfZg3NzWPxPtuvmFGw5gv1sbrxp3RIs=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: F2fECxz68gYY3DoT5G6BNolUFh5W519+Doyo8SvzvKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4a:9b:31:02:ed:0e:75:bf:b4:9f:26:fd:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=e92d336588fd7391b46143c6e00dff132224cb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:01:fc:ea:70:72:d6:3c:ed:78:3d:4d:0c:
40:54:9c:d7:3a:a9:4c:25:ef:e4:8d:6b:1c:c8:dd:
e1:ce:67:2b:68:00:9c:6f:e2:8d:7c:ca:0d:e9:ba:
05:4d:39:a5:e1:b8:e3:ca:c5:33:41:58:5c:d7:a0:
f5:40:ff:b9:0b:f9:a4:e9:32:a6:f6:9a:b8:db:fa:
26:17:27:7c:e7:34:42:ca:f1:8f:b5:6e:7f:00:3f:
36:7b:47:ea:fc:08:81:b2:45:16:03:f4:bc:d3:07:
ac:04:5b:6e:a3:2d:65:65:b9:cf:19:0a:77:fb:03:
55:75:2a:1f:50:09:9f:5b:6e:64:20:cb:8f:24:04:
38:dd:29:a4:56:dc:aa:9c:9d:d9:02:3c:05:3d:d5:
ea:15:89:92:a9:db:69:57:51:a5:19:71:92:da:dd:
02:fa:b2:5c:fe:b7:8c:d3:0e:0e:b9:4d:35:44:37:
17:5d:40:2a:6a:d3:6e:2b:38:82:b6:c1:f8:fa:14:
c9:27:09:e5:a2:fd:62:ee:52:cd:38:fc:a0:e2:7a:
49:17:18:4e:07:3a:0b:7f:5c:37:5c:6e:e9:94:2d:
7c:b7:c9:a9:20:f6:0e:f1:c9:88:30:11:66:a0:16:
20:e9:05:27:38:95:ec:a5:52:1d:33:71:2b:12:f2:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:33:65:88:FD:73:91:B4:61:43:C6:E0:0D:FF:13:22:24:CB:5D
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7c:63:14:56:48:c1:34:5c:6b:ec:6a:8d:28:57:0d:a8:68:
30:09:02:f4:d4:0d:17:f2:8b:27:f3:42:a6:ba:01:d0:a5:7b:
eb:85:0f:04:fc:9c:39:9d:26:7d:28:6f:28:a3:7a:3c:c1:34:
76:54:7c:83:fd:d0:04:08:8b:da:f8:e2:12:02:bb:31:8d:b9:
52:74:ab:42:f9:0d:7d:62:08:51:6f:ca:9c:a7:f5:dc:68:00:
10:9a:c6:6c:f8:66:ce:7a:35:b0:de:92:8a:ef:f6:32:f8:eb:
fe:56:14:fc:d1:4d:9a:57:2e:a8:8c:b1:06:f6:62:8d:bb:ea:
bc:1f:e8:3b:9e:d7:04:f0:45:03:fa:c1:96:81:8e:5c:c2:40:
0e:de:8d:0c:2e:80:f6:b2:12:27:f7:1d:69:8d:5f:74:e4:5f:
96:80:7f:48:f3:0e:dd:e6:aa:45:b8:66:3c:e8:c3:cc:16:9d:
f6:0b:19:0b:da:a6:47:37:a4:21:b4:bc:86:88:9a:d9:44:64:
62:45:66:5f:32:03:b4:5c:26:03:4d:80:f5:fd:21:67:f3:4f:
9a:db:e2:11:ef:5a:6d:b7:30:c5:7a:a6:a6:3e:45:5f:d2:b2:
c0:6b:c3:fc:42:48:9c:43:04:da:f1:0b:a2:6d:80:11:c5:48:
7d:46:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:04 2026 by rpki-client