Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: 2u+WzRXIPKMfheyopkrGAsJQAZaI/lm/KRYyig9aYHs=
Subject key identifier: 5C:5F:8B:3B:1A:10:F3:39:06:9F:A8:C6:6C:6E:BC:65:72:59:6B:6A
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019D284DAA98EC24F6A3EB9E0E28504042F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 0862
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: P08FAOqWFTjmUaDwe7lM3xB9KrVZSELfz8HjqDalSUM=)
2: cGNM2kUYGwh1pqp3KDfnuGuO-40.roa (hash: RBzO91NF0DSPBv6o+tDtIFzqxm7krs8U6K6aFGD7SjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:aa:98:ec:24:f6:a3:eb:9e:0e:28:50:40:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=5c5f8b3b1a10f339069fa8c66c6ebc6572596b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:eb:b9:7c:03:c1:db:e8:6a:49:30:97:aa:
7e:75:a6:b5:c2:7e:19:1d:59:26:f7:56:b6:a8:22:
d9:1d:bf:ac:57:45:0e:c5:f9:ff:2c:22:71:2f:b6:
52:ea:00:75:75:b4:0f:b2:53:7e:ca:ec:51:2e:c9:
c9:bf:81:ae:ec:9e:b8:85:f0:26:fe:77:db:f7:af:
85:9b:76:ef:5d:72:3b:10:aa:a3:03:b2:df:23:7e:
0d:21:50:96:78:19:69:d6:29:a1:af:51:72:6f:c6:
06:1c:fc:81:7c:e3:b1:b9:fc:72:1b:fb:46:48:84:
2c:45:fe:87:ab:bd:b1:f4:7d:63:a6:83:df:dd:1b:
5d:d5:eb:1e:28:44:95:4a:8d:f2:87:52:3c:3c:be:
4a:1f:f7:a4:21:7d:64:1b:d3:a2:05:46:24:55:de:
46:8d:52:60:fb:13:d2:35:b6:8d:65:4e:c1:70:1a:
33:4c:15:a0:11:1c:f8:06:e8:a9:1e:58:bb:28:75:
10:24:84:b7:64:31:57:ae:6d:d6:4b:a1:ab:93:55:
91:69:9e:c0:3e:7c:f6:89:ce:14:bb:64:fc:2a:0c:
04:9b:70:a0:a3:92:42:67:d2:05:21:c6:1f:d6:87:
12:95:e7:db:20:e4:78:e8:40:c1:68:ce:31:a4:e4:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:8B:3B:1A:10:F3:39:06:9F:A8:C6:6C:6E:BC:65:72:59:6B:6A
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:cd:7c:4a:3f:ba:a6:23:f4:e8:44:d0:0b:85:e3:ed:35:
18:c8:db:88:68:db:bb:ed:d8:be:65:ae:47:f0:c7:9e:75:19:
dc:85:07:21:4c:50:46:bd:b7:01:83:42:57:42:7d:ad:ff:9a:
45:4b:20:e9:36:10:01:18:1c:3f:d5:4a:d3:30:b1:d2:47:58:
b7:bb:44:1c:b2:d1:e0:43:68:0c:8d:bd:f7:5a:4a:50:cb:83:
8d:97:f2:00:b5:9a:d8:9d:db:5e:77:0e:37:0c:89:97:83:e2:
a1:44:4d:d9:19:b0:3b:7b:71:84:20:e8:7a:b7:02:65:1a:36:
d9:42:d3:26:8a:8b:f7:9e:f5:98:78:b6:ef:a3:15:0f:ca:6f:
8c:d9:b0:32:ae:8c:9b:3c:bd:fc:d4:9f:83:2e:58:40:22:3b:
f9:f5:35:df:37:be:73:de:fa:34:e7:9d:32:81:8a:9b:10:6f:
9a:d1:00:57:74:c7:32:d8:41:d4:a5:47:93:fd:a0:e3:b4:f9:
b8:22:f8:d0:f0:5b:88:37:14:2f:cb:17:09:0a:05:eb:81:31:
9c:86:66:79:cb:f5:61:47:7a:24:c2:e9:b2:e6:da:98:2c:65:
5e:61:46:cf:c5:3b:d8:2f:e5:17:c8:e2:1b:fd:4c:a2:5f:4c:
e7:37:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:35:02 2026 by rpki-client