Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json)
Hash identifier: y4fqTHYvQMU8yXGAymWjvEm9I4luRYMgDuPWsDWW9PI=
Subject key identifier: 25:C8:94:A2:0D:16:DD:B0:21:5E:D0:7B:28:72:62:E0:26:55:EA:7D
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 019D2704CC70E3B3930EF8214D0EFC7DCFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
Manifest number: 130E
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: NRznvrL2YoG-cf38M2vLuaml8bA.roa (hash: YLx0qtcJ0lvI55iXCy8XgdkJQcz4Gczwi13PC6t9rHM=)
2: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: tntfP40sUjA5QTdYdCmsENE5nbdBG1FPV8p1LZlqVCg=)
3: iPgazdI_NWGu6se1BPkdlOHXT-g.roa (hash: 7OLuylsS/2TavIGOkUbdjKQBKLt/n6JEHNQvNJ0ip3s=)
4: r4NW6IpzP-GUCDSqt6fVhBL0zM8.roa (hash: pZ8aEKVcEt06iRGfPsdT3tWqnEV+Lv3p58CyGeIOdNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cc:70:e3:b3:93:0e:f8:21:4d:0e:fc:7d:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=25c894a20d16ddb0215ed07b287262e02655ea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:80:d0:22:05:b5:97:b9:8e:d9:99:2a:43:
c0:d6:69:29:c5:02:e9:54:27:f9:62:2e:6d:03:10:
ef:3a:a2:dd:bd:17:fd:ef:aa:02:1c:1c:40:04:6b:
24:ef:16:66:70:da:f9:44:8e:86:50:22:03:b9:98:
38:72:6d:e3:05:09:39:ba:ed:ea:63:a5:d4:4d:9f:
b0:7d:37:06:4c:16:1d:16:b7:a8:c4:6d:62:39:64:
3f:03:b5:6e:9e:00:57:f8:ef:b1:81:ff:14:bd:1f:
68:55:9c:36:9e:d7:25:1c:58:bd:75:ae:ea:d4:79:
d3:f7:8c:58:d0:64:dd:18:88:d3:6b:c3:30:35:26:
c6:be:c0:25:48:bd:67:e1:aa:6f:f0:1f:c6:76:fa:
65:a0:c0:a6:9a:da:69:9d:73:b1:b1:d4:d9:fb:c5:
1d:80:a0:f9:89:6f:87:8c:45:3b:7c:8e:65:74:14:
4b:5d:9a:17:49:6a:d7:d1:6a:9d:38:5d:da:5f:8b:
53:66:ed:c0:d7:18:33:d8:94:f1:7e:55:c1:22:53:
d8:26:c7:4e:68:d9:71:3b:be:b1:96:b7:31:fa:2f:
13:66:fa:b9:16:3f:dc:81:62:cd:39:69:91:12:36:
79:53:ed:e6:3b:1e:d4:53:18:b9:91:48:6b:9e:ab:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:94:A2:0D:16:DD:B0:21:5E:D0:7B:28:72:62:E0:26:55:EA:7D
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:25:f1:aa:8a:54:9e:0b:cd:ba:57:fc:3e:e3:9e:74:71:
76:96:e6:5a:81:3d:36:80:19:f1:cd:2c:d0:6e:33:e7:11:18:
c5:8c:66:14:27:0e:a0:1c:ed:ca:ce:48:1d:3d:20:eb:2a:be:
13:97:43:c9:e7:e1:49:21:d6:05:ba:a2:f4:84:f1:9c:a5:f5:
33:66:4b:42:6a:ea:79:ae:b8:86:13:cd:b3:81:a7:b2:05:a6:
c2:75:f5:9a:4e:c0:b8:2a:71:94:83:dc:0b:98:69:9b:41:52:
d8:d3:63:f8:6b:44:83:d6:25:cc:ea:06:00:d7:4f:00:60:4d:
18:31:cf:6d:e0:9e:7a:a6:2a:a7:d2:27:55:8f:32:17:e7:0c:
85:57:66:12:50:3d:57:ad:7f:a2:14:40:61:fd:ec:3e:e5:0c:
c4:7d:49:dd:2d:d8:4b:b9:b6:12:88:92:52:3b:ed:5e:e8:70:
08:5f:26:c4:96:7f:07:02:f7:a9:b8:36:66:8e:44:9e:b3:0d:
1f:60:0d:73:c9:f3:d7:bc:91:7e:5b:68:f9:0f:4a:db:d1:dd:
a9:6c:3d:56:b6:ea:e0:8c:9a:fc:79:53:d0:c3:ae:13:39:f1:
f6:6d:99:f5:fa:b7:01:e0:c4:9c:57:49:ce:68:85:66:65:32:
44:d5:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:24 2026 by rpki-client