Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: 7hnJTC0C8ymxX8Xfu3PDVQ1w+GztXyClqQpijAwtenA=
Subject key identifier: 1E:11:EF:79:E8:0B:3F:9D:4B:48:D4:C5:75:92:76:7C:51:97:75:6C
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019D284D3DEF4F6BD0FB0B409E3A3FDC3DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 15C9
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: 9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa (hash: wE6I1csBO6GEmAQaIzNTh2tvdzqwUCjixq3m2Z3pzSw=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: uDwvPDl12GJgYHrWwwfFp3X+MNWJ+Xgmp9QFzzNcBBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3d:ef:4f:6b:d0:fb:0b:40:9e:3a:3f:dc:3d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=1e11ef79e80b3f9d4b48d4c57592767c5197756c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:3f:9c:f4:f1:e3:d1:bc:e9:20:ba:6c:7c:
a4:ac:72:6e:f9:f1:26:d4:80:b2:c9:8c:93:18:5b:
e3:be:82:8e:63:71:54:c7:6e:5a:ef:b3:8d:30:95:
8f:52:3c:fe:31:88:88:7e:8e:3a:f2:52:82:dd:51:
4f:8b:da:80:e4:80:c1:d1:d2:ef:70:e7:61:fd:3f:
90:f9:b1:a5:51:02:39:78:ec:91:5d:b5:25:18:0b:
cd:0a:17:32:08:a6:f8:26:8f:30:7c:46:1b:b9:b6:
71:ae:bd:d2:38:72:da:b3:19:a3:ed:53:e7:da:0a:
43:f1:55:32:25:1a:9f:d8:0c:d8:f6:2e:f5:72:5d:
26:24:01:2d:f2:fb:58:b3:3e:c2:db:b7:0f:b0:54:
2c:71:52:c2:8a:84:07:e4:4c:84:d1:a3:61:a4:3e:
63:bb:aa:b9:49:ac:4c:ec:bc:97:40:02:74:83:e6:
5b:2b:58:bf:b5:96:11:b3:0a:b1:05:4c:6a:c8:71:
8c:92:64:29:9f:e6:97:11:3d:a6:c1:0a:7e:af:66:
0c:70:53:38:4a:92:e7:59:17:e6:b7:66:9d:0c:22:
72:8b:e6:67:12:65:2d:ef:2c:7f:f0:d1:a1:72:7d:
9d:8b:ad:e0:54:5d:95:e2:2e:b2:ce:d7:bb:3e:a2:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:EF:79:E8:0B:3F:9D:4B:48:D4:C5:75:92:76:7C:51:97:75:6C
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:38:c1:f5:3d:8e:44:ab:64:c3:61:75:12:fe:a8:0c:05:5f:
2e:47:18:76:d6:77:51:29:17:4c:f7:0b:19:b2:65:92:09:ad:
53:a7:da:22:f8:c1:97:4a:17:81:43:10:c7:fd:73:37:66:22:
6d:2c:65:5d:3c:99:10:f8:ea:db:bd:73:17:92:52:cd:71:b5:
f1:6b:70:71:9d:0b:1e:59:af:8a:6a:b8:c3:3f:8c:8e:db:e2:
fa:e8:d9:50:2b:37:a9:33:0c:9a:5a:22:f4:7d:70:7d:ab:45:
c8:5f:fd:a8:1b:fa:16:65:ba:ff:ae:26:dd:06:f2:b3:15:9c:
ea:8f:6a:d5:ec:2f:82:09:d3:a1:52:03:ea:81:53:40:41:4e:
d1:6c:59:19:05:06:ae:4c:e0:9f:51:af:ef:d0:3a:ca:f1:51:
df:94:2f:90:43:03:ba:08:4b:56:55:cd:50:72:c1:bd:e5:84:
6e:f9:e0:d3:7f:93:84:ef:d8:e8:7d:28:85:b8:e7:29:39:73:
72:f7:d6:a8:1f:15:48:5d:f7:47:1f:0c:60:23:4c:1b:2c:ea:
a5:73:1f:27:60:c4:fb:de:39:92:1c:da:57:01:e8:f6:17:10:
df:8b:c3:cc:5a:40:1a:4b:c8:bb:5a:9d:81:bb:5b:2e:1f:b4:
17:d4:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:46 2026 by rpki-client