Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: HQuPnk3bA/tLqqK/2mzrtGiRXkyIcknWUQsgjA66Q8w=
Subject key identifier: 77:67:3A:F7:CE:AC:B6:39:51:0F:79:65:83:44:47:F1:5F:6C:3E:78
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019D2961481417E2AA5B06013EE0F36713E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 11B3
Signing time: Thu 26 Mar 2026 09:02:14 +0000
Manifest this update: Thu 26 Mar 2026 09:02:14 +0000
Manifest next update: Fri 27 Mar 2026 09:02:14 +0000
Files and hashes: 1: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=)
2: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=)
3: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (hash: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko=)
4: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=)
5: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=)
6: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: szEEFKlb97LbGKtsYpsBeMw1QT9+pkAYFnvmu1Vm2oA=)
7: pVWucn62UZlUYEkLwtnRBuH29Ec.roa (hash: fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=)
8: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=)
9: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:48:14:17:e2:aa:5b:06:01:3e:e0:f3:67:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Mar 26 09:02:14 2026 GMT
Not After : Mar 27 09:02:14 2026 GMT
Subject: CN=77673af7ceacb639510f7965834447f15f6c3e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:11:3b:30:1e:f7:60:21:5c:42:ff:11:9d:
20:83:a6:de:a6:02:4a:08:14:f1:b9:8f:09:17:ce:
0a:aa:0e:ec:ed:22:c9:42:15:09:fa:db:e3:9e:1b:
dd:e9:0c:9a:08:33:50:6e:58:55:20:a5:f8:cf:e5:
6b:fd:76:b4:d4:0d:ac:ec:da:99:83:89:8b:13:ac:
6a:a0:15:17:a7:6c:04:95:19:18:55:1f:a6:e7:a8:
be:17:55:b3:64:9d:41:f3:11:07:fc:fd:bc:4d:68:
22:a7:43:58:be:83:b9:a2:fa:fd:02:ca:5f:57:66:
0e:a9:b0:65:5a:99:97:ec:11:1c:10:9a:a7:5d:78:
00:ca:14:8e:25:3f:7f:ba:8b:3d:8d:3e:15:97:1e:
f9:57:9a:84:43:58:0a:85:fd:4c:d7:53:e3:f9:08:
79:04:14:ee:89:08:55:c1:28:be:62:28:93:4a:ee:
b7:be:03:ce:5c:40:15:e9:67:33:74:a9:31:e4:70:
6f:4f:43:42:38:d9:7e:74:03:bb:09:47:d3:94:4a:
dd:1e:45:f1:2c:57:5b:38:f5:b1:4c:26:03:f1:cf:
d9:70:e8:d7:53:41:cc:14:40:d9:10:6a:db:4d:e4:
6a:75:86:a9:9c:ff:6b:70:23:9c:ec:30:cb:69:22:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:3A:F7:CE:AC:B6:39:51:0F:79:65:83:44:47:F1:5F:6C:3E:78
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:49:f8:a3:0d:aa:2f:66:65:7c:33:78:41:ee:35:a7:f5:
17:ce:31:6e:e5:1d:7d:24:59:2c:3a:c2:02:0a:63:27:d8:78:
7f:c6:b9:b6:bc:78:09:17:b5:d7:18:2a:d0:a4:36:7c:69:06:
84:c1:ee:cc:83:5a:bb:99:c2:f7:c7:34:34:03:85:9a:5c:fe:
3a:de:0f:3c:be:70:c8:d5:71:20:03:28:2d:67:a9:9e:89:8e:
d4:f4:7c:f1:90:8f:ed:ba:c6:16:10:13:4c:2a:5b:4e:77:3b:
2f:99:ea:5b:90:6f:71:84:80:64:36:17:37:66:24:1b:15:4f:
88:94:83:02:33:cf:32:e0:5c:5f:8d:93:e0:4c:24:4e:40:1d:
9e:a0:a3:89:75:43:3e:24:df:8d:33:c9:60:51:96:c2:c6:f1:
e6:2b:02:41:90:9e:e8:0f:25:7d:90:46:ac:c9:c8:0f:a8:34:
e6:05:7c:6a:e9:df:f5:5f:d3:ef:e7:36:0f:bc:ff:95:e6:76:
1f:a9:21:bd:64:d3:ab:e2:b4:fb:c7:80:6d:36:25:bd:b3:d8:
fc:72:43:f6:ac:86:6a:b1:14:d9:31:19:8d:cc:bb:63:3c:28:
fd:f3:75:22:30:cd:a0:b3:f4:10:2d:79:f6:eb:bf:35:2d:f2:
d8:cd:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:55 2026 by rpki-client