Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: Mu4U7fj5W6XpP+RCd2lgvbtv+kcIzjXP75oHRIpBc2s=
Subject key identifier: BB:0E:C4:AB:A9:7D:2E:1E:47:45:C5:72:FB:74:0D:13:5B:32:0C:E3
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019D337554F60CEA3CA86A7F1C2D603DD123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0BC0
Signing time: Sat 28 Mar 2026 08:00:20 +0000
Manifest this update: Sat 28 Mar 2026 08:00:20 +0000
Manifest next update: Sun 29 Mar 2026 08:00:20 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: Eq9VIIjiy4BKFS+1Ui+v13ciO6wFUSRzed3UA6dmXuA=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:54:f6:0c:ea:3c:a8:6a:7f:1c:2d:60:3d:d1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Mar 28 08:00:20 2026 GMT
Not After : Mar 29 08:00:20 2026 GMT
Subject: CN=bb0ec4aba97d2e1e4745c572fb740d135b320ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:03:84:a0:68:8b:8d:8b:25:96:c2:ab:fe:
e8:eb:86:a8:84:8a:66:67:ee:54:23:29:f9:e7:ed:
16:cf:6f:3f:3a:05:f5:c5:4d:6b:81:71:3a:63:a2:
aa:96:73:7b:9d:35:9c:42:22:81:a6:87:46:e8:e9:
e0:20:86:33:e4:02:d5:fa:92:f5:db:5e:46:ec:87:
6e:0b:0a:ae:95:47:6e:de:02:43:2a:d5:37:9c:da:
10:89:0f:20:3e:e3:d0:0d:4b:29:de:a9:22:01:f8:
24:b1:d8:90:98:08:b5:fc:6d:d5:f4:bb:47:fb:ec:
be:e6:4c:92:1a:14:aa:28:9d:9b:10:b3:88:6e:94:
6b:e2:ce:61:27:f1:75:42:ae:93:5d:3e:ec:11:97:
4d:a1:b3:4e:a3:1e:91:58:40:28:d4:09:07:4e:5c:
ab:ea:11:d5:7f:7d:43:31:71:26:69:51:35:10:dc:
3f:58:da:e5:20:70:3e:15:88:ce:f2:b3:c4:fe:82:
93:94:db:79:6b:59:de:77:72:e0:27:cf:f8:0b:39:
8c:b2:80:af:01:1d:75:9e:05:45:de:46:6b:27:be:
59:14:5d:41:6c:81:8c:d6:88:93:0f:2c:60:aa:df:
d2:e1:b5:54:47:7e:5f:09:71:b7:ec:6d:93:b1:1f:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0E:C4:AB:A9:7D:2E:1E:47:45:C5:72:FB:74:0D:13:5B:32:0C:E3
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:20:e3:23:ca:26:aa:95:fe:15:43:3d:01:1e:20:19:c8:
b7:c1:fb:87:ec:42:db:8f:7f:51:72:b0:52:ff:24:51:b4:e5:
36:d1:18:3a:1d:ea:bc:ed:40:3b:5c:24:15:0f:0d:a9:f9:64:
13:dd:52:18:8b:ef:f4:dd:c9:5d:e6:a4:7e:78:67:9e:6d:80:
75:e8:f1:26:23:62:17:bf:c0:ba:00:0e:47:d3:41:cb:a6:d0:
0b:63:44:0b:4f:dd:82:c7:ef:23:c1:14:ac:bb:31:e4:a9:fa:
34:6b:75:73:0c:b3:94:ba:82:64:d1:33:0b:ea:5c:b4:ee:c2:
1d:5d:c3:5a:09:ea:73:df:d5:57:27:f8:d9:84:54:33:c1:52:
f4:69:d8:b3:d7:5c:62:ee:30:76:6a:22:cf:dc:4f:5f:a7:83:
7e:3a:7b:ae:cf:3a:07:d7:20:1c:be:39:50:e2:93:2b:37:c0:
d9:7f:3e:2e:e6:c1:ab:2c:10:4a:16:67:f9:54:90:44:fc:75:
30:13:d7:2e:a5:18:3a:5c:b3:54:b8:54:c4:20:a9:6b:d8:41:
a1:03:c2:88:80:07:7e:3e:7c:dd:2e:34:a0:a7:75:13:a8:d1:
5d:b7:b7:f3:e5:a9:63:a7:0b:8b:e2:fe:f8:c3:0e:e9:98:41:
8d:c8:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:01 2026 by rpki-client