Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
File: nRNTyAuINe6erTfvfp9kIQp3O_s.mft (raw, json)
Hash identifier: ojGoP3Io0c/ywWysmyT50a2up2dBZ1gsgDSZvl8oT9o=
Subject key identifier: D4:13:49:C4:40:9B:C6:27:F5:BF:34:2E:A0:A7:A1:DA:52:6F:44:38
Authority key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
Certificate issuer: /CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Certificate serial: 019D26CCC085B8A270051C347E5E60DA7E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
Manifest number: 018F
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: aN1c9Sw0mZJOwIEAY7wKPyQLEEw.roa (hash: 26mq/JieiE08d31P7dbCMptw/12YVOE7/U8mBDr4f0o=)
2: nRNTyAuINe6erTfvfp9kIQp3O_s.crl (hash: dU/LsmtSrNuuBS9VNsgehBPxVaWij9aaCNog5FoLM4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c0:85:b8:a2:70:05:1c:34:7e:5e:60:da:7e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=d41349c4409bc627f5bf342ea0a7a1da526f4438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:11:41:bb:f9:5e:8f:f7:2c:4b:59:9f:94:
57:05:27:1f:da:68:d0:01:ee:3b:d1:19:9d:fa:61:
55:7d:72:a1:ce:b4:80:4d:99:b4:49:12:13:b4:c3:
ff:5a:22:2c:52:fc:03:b4:07:fa:73:67:62:71:dc:
0c:bf:58:f2:e4:c9:67:71:51:ac:48:26:b2:78:ac:
08:6a:c5:b3:79:ab:99:5d:e2:27:dd:06:32:4c:8c:
b8:9e:1c:9e:47:37:30:6d:1c:25:49:9d:80:6c:82:
eb:e5:44:9d:15:10:13:1f:55:0f:78:16:be:7b:8f:
41:b5:9f:a9:68:03:b8:e6:42:46:d9:a8:3c:37:07:
8e:66:49:5a:60:54:00:86:f0:55:18:50:ad:85:d9:
f7:7b:b6:37:d4:85:c2:3e:f5:b6:53:29:fe:2b:b9:
10:9f:aa:04:12:55:89:e1:b7:ba:82:55:81:90:ec:
5c:1a:75:b6:f9:44:30:96:8b:4d:4a:e1:a5:27:3b:
07:d3:2f:ef:b3:a0:93:ee:e0:41:be:75:77:76:6a:
4d:c8:b5:6e:68:92:f5:1c:9a:c1:c0:ad:d9:28:fa:
f5:8c:ec:70:3c:8f:0f:10:88:e4:a6:99:94:a6:b2:
8b:dd:b8:b5:95:aa:ba:42:31:f8:ef:1c:a8:1b:cf:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:49:C4:40:9B:C6:27:F5:BF:34:2E:A0:A7:A1:DA:52:6F:44:38
X509v3 Authority Key Identifier:
keyid:9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:be:1d:1e:83:81:26:e3:4f:c9:e7:99:61:e0:65:1f:55:23:
80:57:2e:93:fc:42:e2:31:68:cb:64:16:d0:21:62:3b:1f:91:
6e:e9:ec:57:b8:d4:2d:0a:26:97:a9:30:9d:7f:0e:e5:46:ca:
a8:1a:57:f1:bf:3c:d3:64:23:64:62:c0:8e:f5:bd:0a:a9:f9:
94:7d:a8:84:ee:50:8e:b5:39:0b:dd:07:0a:61:e7:59:21:82:
45:90:95:f5:7c:37:94:28:6a:46:fd:fd:b8:c0:37:48:4a:35:
d8:af:e9:7c:3f:d6:ce:8a:29:65:9f:d3:2a:c8:9d:52:10:1a:
96:cf:e9:77:41:be:b2:40:49:70:56:81:e0:e1:06:7d:fd:cb:
cf:13:52:79:02:32:ec:44:3e:1c:37:54:87:ce:31:c3:bc:fc:
bc:34:6e:8f:a1:dd:50:b4:15:57:cd:f2:23:a1:24:fd:65:7d:
88:60:be:8b:a2:74:83:23:26:77:fc:3c:32:00:2c:c3:d8:77:
a2:a2:5b:9c:86:76:26:14:46:c2:cd:eb:92:c0:09:20:8a:de:
d0:01:6d:86:42:bd:9a:f5:38:ac:47:12:ab:58:37:4c:61:93:
7b:a4:a3:b5:fb:73:e0:b7:19:40:03:1b:69:a7:96:eb:23:2a:
4d:a5:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:39 2026 by rpki-client