Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: kbURUsIatAtHi4mQMH+UahfTaq8ch50fflYnY4ElDmw=
Subject key identifier: 69:0B:F4:53:0A:AD:A0:45:3A:22:0C:91:A9:9B:CE:E8:9F:F6:A0:88
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019D27E044980E1833E06330E0F2F2D9412B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 17D5
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: Wj5kc6kTXAG2M7hwQcfFYwKuORyinCuUlgh7HpSFyoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:44:98:0e:18:33:e0:63:30:e0:f2:f2:d9:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=690bf4530aada0453a220c91a99bcee89ff6a088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:e9:6e:b7:fc:af:f4:ec:eb:9f:4c:e1:91:
eb:9d:e4:0c:95:19:8d:1a:eb:55:e4:f8:b1:37:61:
40:b7:8d:c4:37:08:a1:22:a0:c2:f9:f4:be:ee:c3:
32:de:84:45:57:2c:10:86:89:0b:63:af:b5:50:a8:
c7:22:fd:5f:b9:30:63:3d:ba:6d:24:10:83:2c:4c:
0a:25:4b:cd:67:94:9d:b4:56:ac:66:61:10:c5:b8:
28:62:e5:85:65:0b:7d:52:b8:07:24:13:5b:26:e9:
9e:83:78:dc:61:53:8e:6c:89:e1:df:31:47:83:af:
f8:24:13:71:f5:33:11:93:ff:cf:f0:e7:9b:e7:40:
e9:dd:9f:ca:e4:b2:83:68:9a:99:4b:8a:4a:08:c9:
83:47:44:f8:d3:82:ef:f9:cd:22:e4:b5:75:1a:e6:
27:fe:26:f6:18:5e:56:f5:82:b9:37:4f:6b:0f:ce:
01:d5:5d:1b:04:22:ca:85:03:24:55:9b:7a:7c:f7:
e5:9b:8e:18:0e:4b:db:d9:ec:22:89:88:34:4b:49:
be:c4:70:c7:16:2a:27:a9:fb:ef:0a:b5:69:48:93:
e3:21:5d:df:c8:a6:08:2a:72:e1:5d:5d:24:ff:96:
d7:af:25:cb:52:bf:8f:66:b3:83:06:42:bd:4c:12:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0B:F4:53:0A:AD:A0:45:3A:22:0C:91:A9:9B:CE:E8:9F:F6:A0:88
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:f8:f6:4e:9c:0e:0b:c6:95:91:fe:c3:d6:bd:ed:96:d0:
99:fe:f7:78:cc:cb:cc:36:8b:f6:ba:68:6d:fa:5b:70:72:e6:
c3:70:dc:9f:50:f3:f1:4c:35:e2:e0:1c:bf:8f:25:cb:a1:15:
02:eb:8d:1c:7f:1f:aa:40:29:b8:b3:c0:a0:27:b2:1d:98:86:
8e:e9:75:72:ff:35:90:6c:23:a6:02:ca:ee:c1:64:5c:c4:11:
d9:32:61:63:b7:3e:33:72:4e:9c:11:86:d6:28:b8:5d:34:2f:
0c:46:d6:f8:9e:b6:64:00:e7:e5:b4:1e:49:fd:08:8e:ab:da:
4b:95:d1:dd:ef:fb:54:f3:f6:43:cb:63:5b:af:63:72:61:33:
e8:ae:81:19:6a:9b:b3:fd:78:26:60:b2:64:83:ba:23:2d:ea:
16:e2:2b:af:c6:58:ab:d1:0b:68:43:e0:3b:73:25:68:bf:ca:
3b:9b:a3:f2:43:eb:82:e3:a1:ed:9c:d6:a9:c2:9f:ae:ff:90:
83:a1:49:80:af:00:50:13:b1:c3:78:b6:d5:d7:cd:0b:f2:e0:
48:6a:83:10:f6:9e:a0:f3:10:e9:99:24:27:65:ef:bb:90:6d:
be:0f:52:72:92:2b:cc:05:d4:16:76:ec:23:47:dc:95:8a:7f:
a9:7d:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:46:37 2026 by rpki-client