Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: XrMLsg9Bq5TDtkpPV8QTXEIU/BxKEa4YJGNVxEALDwo=
Subject key identifier: BA:CF:D2:50:79:95:34:53:B5:98:3D:79:17:98:2B:93:5E:72:BF:AC
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 019D273B3FDEE93ACB1B36F58072C9C8A74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: a_g1TDCKs0djGqyHBT2iLxMGygA.roa (hash: 3E0lz2si/4Jtpa0xKFZpZcmoUUdUfMhPP/gPs109DNA=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: rcnJXASYCMuMCr3JvblIbmcVogxFCGOLKwW27G6oi2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3f:de:e9:3a:cb:1b:36:f5:80:72:c9:c8:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=bacfd25079953453b5983d7917982b935e72bfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:dc:2c:55:51:d3:eb:d0:1d:8c:c0:e6:ac:
35:b6:1e:e8:d1:42:21:20:62:92:9f:ef:07:8a:51:
46:37:49:86:41:60:96:c7:a3:70:8e:6a:34:11:b8:
9b:36:79:4c:36:d2:03:a2:4c:bf:00:e1:f4:9a:ae:
01:3e:f6:83:1e:fe:6d:fc:66:4b:53:fa:18:cc:84:
5c:c4:f9:23:59:99:20:fb:26:14:85:83:08:5d:61:
2d:66:19:ef:0c:40:32:ac:4e:9a:57:84:33:f9:92:
99:66:c3:3e:d4:94:e8:2a:f5:a9:a4:42:c0:67:02:
7b:f1:16:99:63:fd:b9:81:f0:ae:33:d0:5e:bc:86:
19:55:e4:af:36:07:99:62:a5:c1:0d:12:41:55:84:
1a:04:b4:0e:1d:90:f1:05:67:60:25:d9:77:10:ca:
04:45:4d:4f:e0:56:fe:af:d6:92:38:6e:df:e0:89:
95:8f:d7:bf:a0:d7:e5:31:7f:45:ec:ab:13:db:0f:
9a:f7:a9:2c:b4:c9:9c:1d:cc:7a:ec:f6:92:82:00:
13:bc:c6:ef:62:c6:5c:6e:58:21:1b:fb:da:62:8a:
c9:8a:f4:fe:67:73:91:05:03:5d:32:21:ce:85:2c:
ee:e5:52:48:4e:54:a6:7e:c4:1d:c5:b8:ec:44:14:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:D2:50:79:95:34:53:B5:98:3D:79:17:98:2B:93:5E:72:BF:AC
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6d:07:2f:03:05:fa:97:dc:9a:fe:c9:7b:34:7f:ee:05:3c:
1d:ca:a9:34:42:ee:f7:9f:1c:31:11:d9:5f:04:9e:55:0e:51:
f6:72:c0:94:65:75:11:28:c9:11:fb:26:2e:c1:f4:44:00:25:
e9:e1:e8:61:b1:0c:84:06:c2:e3:d5:ab:32:cc:6b:26:c6:3c:
9e:3d:63:a3:13:81:48:9e:d5:a4:67:bd:8d:26:9a:69:1e:06:
7b:8d:46:32:a7:c0:38:25:91:d1:4b:e0:72:95:ee:75:04:7a:
fd:25:cb:fc:81:21:63:8f:61:24:01:a5:ff:65:8b:f6:ca:ab:
e1:e4:19:d8:a3:7e:7d:5b:a2:61:9c:28:2e:50:eb:a2:b7:ee:
8c:c5:70:9f:8f:5e:7e:22:6d:a8:a7:d8:26:29:d2:6f:72:60:
51:b2:e8:5e:79:32:b7:48:7e:83:95:83:45:5a:d8:d8:32:ef:
cb:fd:ba:7f:45:1b:13:aa:63:29:0c:22:0f:3c:10:3a:80:7a:
5d:fa:7b:fb:55:bb:6a:29:0e:73:d6:97:1f:16:c3:40:6e:c0:
0b:bf:6b:0b:90:5b:34:b3:5f:32:66:c7:71:ea:ef:11:16:0c:
4c:92:11:4b:d1:41:21:b6:85:7d:c7:43:2f:f9:d2:42:96:70:
0f:98:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:12 2026 by rpki-client