Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: 2dy8qoWewuNCEW/3DUbnuk8aezsysWNBSbkp2aTjamM=
Subject key identifier: 90:8A:49:B1:90:92:3B:96:2E:9F:D3:D3:8B:21:50:1E:06:42:59:A3
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019D29CECCEAC9D2C4A5CBE08439EEEC1B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 038D
Signing time: Thu 26 Mar 2026 11:01:51 +0000
Manifest this update: Thu 26 Mar 2026 11:01:51 +0000
Manifest next update: Fri 27 Mar 2026 11:01:51 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: D5aPt74fP8UZf+B76vnlxd6gCmQa+7FuenZSIiYlbtk=)
2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cc:ea:c9:d2:c4:a5:cb:e0:84:39:ee:ec:1b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Mar 26 11:01:51 2026 GMT
Not After : Mar 27 11:01:51 2026 GMT
Subject: CN=908a49b190923b962e9fd3d38b21501e064259a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:04:5c:73:10:b9:68:18:d9:25:d7:26:4b:
68:11:e5:21:60:1a:c5:9e:19:e6:57:4c:c6:43:94:
91:eb:ce:d4:8e:74:da:96:ee:7c:d2:26:8e:8f:a1:
e5:47:33:df:a3:86:45:61:76:8c:94:95:12:94:a0:
16:e0:a2:40:b3:2d:72:a2:0e:8e:20:1c:77:d8:82:
9b:1b:09:c0:70:70:db:8d:90:f4:44:0c:45:1f:53:
b3:05:bd:8c:7a:7a:c1:a0:01:5e:0e:94:82:77:43:
5d:5e:2c:7a:1a:a7:c4:b0:3f:b4:20:0f:a3:e0:10:
f0:cd:c6:ca:98:19:79:33:cd:be:63:b8:a0:73:ba:
d4:0e:4f:a2:54:6b:3f:0f:92:e2:a1:56:66:27:14:
7c:71:0f:14:4e:d1:f2:cf:24:a6:e0:fa:04:69:5b:
ed:32:d7:28:ef:cb:d4:9b:4b:66:50:53:a1:42:84:
13:64:82:85:07:16:39:00:11:d8:8f:b2:46:aa:4b:
1c:ac:73:e2:24:e5:a0:72:18:25:65:5b:3e:19:b9:
03:8e:4b:0e:7d:c3:d9:96:18:11:75:26:93:b7:c7:
a0:32:7b:84:94:63:01:92:a9:f0:45:e2:83:17:4b:
7e:3c:83:31:1d:b1:f3:55:aa:96:72:d1:7d:5d:50:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:49:B1:90:92:3B:96:2E:9F:D3:D3:8B:21:50:1E:06:42:59:A3
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:a2:7b:83:32:5b:b3:29:21:1b:4c:9d:04:40:66:bb:a5:
cd:64:60:7e:8e:78:30:88:1d:44:35:53:95:b5:fc:2d:38:60:
47:ef:7d:a8:07:d6:9f:8f:e4:aa:05:ee:7e:32:1c:cd:3e:9f:
bb:c5:1f:08:fc:84:7e:df:77:10:17:c5:f7:88:df:b7:c5:a5:
24:c1:9a:af:23:39:89:e7:eb:14:a7:48:95:9f:2e:35:ab:b2:
44:c7:f5:4f:8b:ef:76:f7:46:b3:d6:af:46:c6:f4:13:22:72:
e7:c1:45:13:18:56:c1:f2:95:45:42:48:c3:23:7c:7c:55:7b:
e8:21:3c:d7:4f:9f:f1:d9:70:18:1e:72:17:29:40:a8:f3:2d:
2c:38:61:f4:22:ab:2f:c6:c5:14:b0:86:d0:52:9b:93:17:7f:
cd:a1:89:28:6c:0f:ca:bb:45:a2:3c:01:d3:ec:14:0f:db:0d:
78:dd:47:a5:b4:11:91:23:95:9b:32:c5:95:66:ba:16:08:01:
5d:84:bd:80:86:6c:d0:88:f0:f9:da:ed:66:05:da:9e:11:38:
2c:8f:d5:75:b5:80:dc:e7:1b:55:9b:eb:8f:a9:fa:f8:53:f9:
9f:79:f9:3b:e5:c6:00:73:23:ff:cb:32:b6:39:8d:05:5b:16:
80:62:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:34 2026 by rpki-client