Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: 0t5gd3Vk2+TLRbEKjFtYVc17l2qnS3+KdlaQqkFsgIo=
Subject key identifier: CB:06:73:20:98:4C:82:D5:00:A3:13:7D:F8:18:47:2A:45:E8:EB:2C
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019D2960D9F8B219A1D128ADB43A6DD50DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0773
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (hash: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI=)
2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: fUBOjnb5kZLPYrUqmkZ8rv+4iUtR1QL5VI6piW1CSzQ=)
3: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (hash: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY=)
4: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (hash: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d9:f8:b2:19:a1:d1:28:ad:b4:3a:6d:d5:0d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=cb067320984c82d500a3137df818472a45e8eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:fe:b2:f5:48:3b:a8:a9:9f:73:aa:59:34:
fd:06:c2:e9:fd:8a:89:44:3e:e6:a9:18:cb:ac:7b:
2f:65:cf:6f:57:7e:5a:5a:60:e5:59:d5:7a:23:24:
93:98:00:83:4b:04:7a:4a:44:4b:21:f2:36:1a:54:
1d:02:c7:84:64:10:a9:1a:60:01:d2:b0:86:13:9b:
ec:1a:47:88:82:6c:33:8b:6b:14:1e:a6:69:62:34:
45:3d:93:47:d7:08:65:c4:9f:49:89:0d:c7:54:54:
4a:2d:b4:bb:35:05:7b:7c:73:fe:a6:e1:1b:52:09:
ba:d2:7f:e9:96:4a:a1:c7:cc:c6:1d:4d:42:35:01:
18:97:c5:58:86:a5:40:2b:91:73:b4:f5:eb:69:45:
5c:29:6a:65:a0:4b:e9:d9:20:be:a1:a6:6e:ae:ac:
a9:fc:61:5a:14:55:83:d7:ff:b3:17:77:b1:7f:62:
ad:5c:95:9b:1d:15:5d:fe:69:db:39:54:06:82:5e:
06:bd:1e:3e:65:12:9f:82:d4:7c:0d:6c:9b:04:6e:
04:36:9c:7f:91:0a:bc:df:52:e2:c1:83:97:1a:91:
4e:ec:47:95:6e:3c:37:e9:b0:30:4d:b9:4b:8f:5e:
17:b8:7b:8c:e6:e2:8d:ae:0d:65:90:74:32:ab:45:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:73:20:98:4C:82:D5:00:A3:13:7D:F8:18:47:2A:45:E8:EB:2C
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e9:ee:ad:d3:b3:eb:e8:cb:bd:d6:d7:3d:4f:d5:86:00:1b:
9d:9e:01:25:25:59:20:8b:ae:56:e4:c3:a0:06:ab:f7:92:16:
21:20:cc:6e:56:1f:73:d3:fb:93:f0:07:37:f4:44:db:d3:5f:
5d:a6:40:34:eb:64:0d:d6:f7:13:94:dd:ec:9c:03:b4:a3:c0:
d1:45:53:5d:b2:40:8e:1f:e8:1c:5d:0b:13:1c:30:e2:f0:95:
d7:3c:fb:b9:6d:81:40:0e:d1:64:9c:1f:eb:03:ff:f1:87:6a:
3c:b2:87:31:09:56:6e:35:35:39:ab:d7:61:d3:d1:60:88:7a:
4f:67:2d:2b:c3:92:04:6f:19:15:d6:cc:50:77:a4:a9:da:f9:
04:a6:32:23:5c:34:1a:c8:b5:04:54:1e:df:fe:74:4b:16:62:
65:e5:0f:9d:3b:5e:00:65:f7:40:3d:d5:f9:fa:3e:44:60:c9:
fe:0a:b6:ee:5a:e8:e2:31:66:60:04:83:1f:ef:db:c1:28:87:
d5:01:d6:2b:af:25:69:64:85:53:34:92:57:49:3d:1c:90:c7:
a6:d6:09:72:8f:e2:44:5f:3b:e0:8e:98:a2:d4:36:b6:c1:83:
fc:c2:4c:47:86:e1:fd:1c:26:4e:d0:3e:ad:77:60:a5:31:ec:
56:7b:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:09:20 2026 by rpki-client