Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: Nuk3c9kkBZbwMlZX05jbDD9EFftB2j2eAHZ+VuSAzpM=
Subject key identifier: 98:87:D2:6E:42:74:C4:E3:2A:40:B9:D0:55:6A:4A:C4:DA:47:98:21
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 019D284D49E5998971AC972278FE138518C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 1291
Signing time: Thu 26 Mar 2026 04:00:46 +0000
Manifest this update: Thu 26 Mar 2026 04:00:46 +0000
Manifest next update: Fri 27 Mar 2026 04:00:46 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: FivivUqRaH/8OVMWVUTg33VGC7QlqaIh5Of154G1Abw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:49:e5:99:89:71:ac:97:22:78:fe:13:85:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Mar 26 04:00:46 2026 GMT
Not After : Mar 27 04:00:46 2026 GMT
Subject: CN=9887d26e4274c4e32a40b9d0556a4ac4da479821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:23:9f:2a:4a:93:5e:7b:55:e4:a7:3d:7a:
b4:83:8b:56:a1:14:03:eb:6d:fe:34:db:9e:59:67:
68:62:21:9d:25:e3:54:9b:dd:a6:3a:2d:5d:a8:b6:
b9:da:69:08:24:ae:68:49:ca:9a:f8:f1:32:7e:d5:
59:de:d8:1c:b5:5a:ca:23:f9:69:62:cb:71:4e:27:
e5:a7:1d:ba:35:0c:7b:3e:ed:15:ab:a9:09:00:91:
2b:0c:76:43:27:c7:5e:6d:36:d5:86:04:6b:eb:e6:
93:25:b1:62:b9:1f:5a:55:d5:87:5c:26:24:60:ca:
f3:9a:6e:b3:a2:e0:02:c5:b8:e3:36:ee:62:1f:a0:
24:4f:ec:43:af:8e:48:14:95:db:ef:d6:3f:34:17:
ea:af:89:61:f0:42:87:3b:b5:bc:ec:63:d3:3a:9a:
4b:bd:cf:22:73:04:86:67:89:19:71:2b:f7:93:f8:
94:f9:7c:0f:2f:90:3d:b1:37:70:67:3c:92:75:92:
d9:7c:83:56:26:ee:52:59:5e:f9:22:f9:bc:57:1f:
09:46:29:7f:13:14:d7:0a:fb:c9:a6:6e:e9:2f:bd:
7f:9f:ef:02:b8:22:d4:62:e2:f7:c5:33:62:fc:09:
f8:03:ab:c3:a3:6f:1c:23:b2:c3:b9:e7:8b:e0:86:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:D2:6E:42:74:C4:E3:2A:40:B9:D0:55:6A:4A:C4:DA:47:98:21
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:fd:a9:80:0f:34:1e:0e:d2:9e:5f:4d:fc:07:a1:ab:4e:
fd:a1:12:74:9a:88:d2:dd:6f:a2:eb:ef:fa:a0:ed:44:46:6b:
06:1a:e0:f1:da:67:28:3f:df:8e:bd:a2:97:d5:70:14:30:84:
94:d4:7e:12:69:80:eb:2a:c6:df:9e:f5:6b:de:2f:d0:b7:42:
2c:bb:c0:e7:84:24:58:13:ef:b9:be:cc:50:51:a5:1c:ef:a1:
88:3b:90:cc:8c:8d:a9:42:c4:d5:34:dd:0b:62:8d:af:1a:35:
e7:93:ba:71:68:3e:eb:89:d6:23:8c:b8:22:39:a9:41:42:54:
a3:dd:6d:06:6c:1d:4b:27:84:1a:cb:bc:60:c6:42:fb:cc:c2:
7d:6e:c0:9c:2c:75:80:fa:ff:87:55:14:7a:54:79:18:8b:c8:
4a:42:c0:25:c5:8f:78:3c:c0:d4:47:a0:b0:b6:c2:b2:b6:33:
13:b2:d4:0e:05:8a:db:8d:cc:5a:8b:dd:a0:01:e7:8a:b4:fd:
85:20:03:db:03:b0:9a:d0:81:4e:aa:95:dd:4a:37:61:c9:94:
96:8e:07:57:39:fc:c8:66:8c:07:ad:96:29:90:7c:b5:8d:0d:
37:a2:4d:4c:ae:7a:37:1a:ec:58:b5:5b:db:42:77:29:57:88:
13:b1:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:01 2026 by rpki-client