Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: U3A9PpNAPCsL0tVZCc05IZ4g4crIsxgaoNWtNDuxCw0=
Subject key identifier: EB:85:BD:37:C0:F4:F7:97:B8:25:EC:88:5F:F4:35:5A:10:25:A8:5B
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 019D25831F05EBC7A00C3C5DB399CB9D3B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 1189
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: blMjfRyOLEyojLj42XPxwXwFTD4.roa (hash: jrLQeO+lNASlqC6IDejHJLnMTZ65htbv+psssgALK6g=)
2: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: il5xl1YSuKqlzyreCw7iY4E9hexiwe7wah/jFcRi1kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1f:05:eb:c7:a0:0c:3c:5d:b3:99:cb:9d:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=eb85bd37c0f4f797b825ec885ff4355a1025a85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:1f:b7:54:db:f2:ab:88:b1:6f:a5:d4:9b:
de:92:b2:08:7b:ca:9c:ef:6e:be:a0:82:0b:95:75:
b7:ee:c5:bd:1d:58:c4:3e:02:c9:e2:24:3b:ac:de:
aa:50:36:2e:56:d2:5d:2c:92:87:a5:04:2d:9a:d0:
3b:2c:a1:80:af:62:f2:88:4c:7f:bc:08:28:31:22:
52:0a:63:e8:06:e0:15:f3:23:e4:7d:8a:84:a3:5b:
ab:c5:32:0c:e5:46:57:90:ce:1e:15:36:6a:aa:27:
30:cf:a1:e5:67:95:ae:88:f7:df:5c:1d:33:4b:a4:
22:d5:cc:c3:f3:f0:94:41:29:a5:7f:12:17:b3:2b:
b2:62:2b:2e:7d:28:d6:58:ed:05:57:16:95:b8:93:
ee:bb:1b:43:2d:b8:c2:1d:0e:34:74:48:61:c5:68:
86:51:8d:f5:03:0a:2b:69:4c:60:0e:72:cc:55:57:
fe:a4:0f:3f:91:67:50:e0:a6:78:57:8c:f6:89:56:
7a:20:81:e5:9c:3e:7a:28:79:41:65:3e:0f:0f:71:
75:77:9e:88:4e:03:a4:3f:d4:42:62:e4:5f:e4:4b:
12:a4:64:39:40:15:6c:22:09:f6:f6:70:13:98:a8:
bf:06:0c:a2:db:29:72:45:29:08:35:45:69:0f:2a:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:BD:37:C0:F4:F7:97:B8:25:EC:88:5F:F4:35:5A:10:25:A8:5B
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8f:84:58:e7:a1:dd:f4:6f:f9:7b:9d:f5:a8:14:1a:b6:01:
b6:0c:99:ac:f3:68:6f:70:e3:e7:2b:71:f0:42:18:3b:f9:8a:
b5:c3:fb:55:5d:d5:10:68:ac:79:cd:e4:70:83:cd:ba:6a:c7:
02:14:14:62:13:07:ba:53:d4:42:75:86:cb:c7:69:2a:c3:6a:
7e:f8:22:20:61:4e:41:77:02:e0:c1:a9:43:1a:fb:fd:1a:48:
ae:1f:a1:ab:7a:7f:0b:8c:26:0b:eb:e2:1e:59:d3:a3:0c:98:
a1:7a:66:8e:68:e2:ca:dc:fd:23:7f:45:1f:cf:4a:40:0a:84:
1d:bf:71:8b:03:b4:3a:5b:4a:34:7c:6c:4e:ba:ca:b9:5f:f2:
1d:02:43:5d:6e:98:1a:6a:2c:e7:0c:42:b9:b3:72:7c:f7:2d:
99:84:42:c1:ea:41:96:18:36:44:53:81:25:bc:81:86:8b:ce:
e5:93:f2:07:a4:4d:fe:02:dc:60:9c:42:73:30:29:cc:59:50:
b6:e4:0e:e4:56:c6:9b:f2:c7:81:64:70:6d:e4:c9:0d:09:77:
3e:1d:37:34:3e:8d:d0:11:44:9b:8b:57:ed:14:40:1d:f5:82:
ef:85:71:75:43:20:b7:d8:dc:25:8d:e5:fc:ca:f1:1e:51:25:
81:92:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:55 2026 by rpki-client