Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: +79+nZoTQPe4sqO/fIqev8NEznJ5MSaTnYpu5+P+WQA=
Subject key identifier: 7C:59:E1:78:A9:69:6A:D6:2A:31:41:FC:B6:F8:D3:7A:18:B2:0D:DC
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019D2A3BBAF51DC212C2A3A4AB2ABB767BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 180C
Signing time: Thu 26 Mar 2026 13:00:50 +0000
Manifest this update: Thu 26 Mar 2026 13:00:50 +0000
Manifest next update: Fri 27 Mar 2026 13:00:50 +0000
Files and hashes: 1: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: sWze4WMBX0jAqX4kgIqp4l4Cvq+ICKiY3Kf3s2Ddntw=)
2: zX13-oU7cBG6cIg8ROGm1tDQrik.roa (hash: iojJpLqSVjV4cIjGJVDdqQHg6vG+JzagzhFK3HWdZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ba:f5:1d:c2:12:c2:a3:a4:ab:2a:bb:76:7b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Mar 26 13:00:50 2026 GMT
Not After : Mar 27 13:00:50 2026 GMT
Subject: CN=7c59e178a9696ad62a3141fcb6f8d37a18b20ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:05:bb:89:49:21:66:62:94:61:d4:de:5c:
f7:71:c9:f2:8e:87:d1:55:e3:4c:69:ee:97:ed:b9:
f0:96:8c:2b:84:28:cf:5d:77:76:f8:81:0d:ec:1c:
22:df:6a:17:40:87:1c:13:38:4d:ae:37:1c:70:af:
db:49:04:20:c8:b1:8f:73:d7:ee:3e:2f:5b:8f:84:
ce:c4:61:70:cf:81:68:c9:94:36:78:cf:40:17:07:
76:8f:1c:b6:41:de:fc:76:20:3a:d9:07:c1:bc:8f:
aa:13:bf:64:80:f9:cd:a7:38:e2:30:2e:85:81:87:
ff:d4:b6:b0:c0:63:e1:ce:96:b3:76:a9:1f:5d:b1:
90:83:9d:7d:c0:b1:60:9a:19:8c:1b:b6:d5:0e:5a:
ca:41:ee:86:77:0f:59:60:74:fb:dd:61:a4:ee:d8:
7f:84:77:77:55:16:93:e2:03:0e:70:ff:75:34:20:
18:f3:be:36:5f:db:c9:bd:43:42:d4:85:66:bd:f9:
3c:6d:74:93:40:f0:49:f2:db:30:cb:ff:72:41:30:
ae:0a:71:7e:f3:13:64:ed:03:2e:77:a2:f1:1e:7e:
8c:52:c1:25:2a:7d:db:33:07:30:11:ab:7b:8f:01:
d9:fa:53:f5:05:db:5a:58:06:8e:e2:cd:36:7d:2d:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:E1:78:A9:69:6A:D6:2A:31:41:FC:B6:F8:D3:7A:18:B2:0D:DC
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4b:cd:fe:31:89:15:0d:35:5d:7d:9f:7f:e6:03:82:de:b2:
0e:8c:3b:40:e3:9a:3c:86:a3:9a:1b:2e:b0:a9:d3:8d:a1:23:
98:64:d7:3c:82:6f:f6:9d:8d:53:df:67:95:cb:db:bd:02:23:
5c:e3:02:89:aa:98:e1:ce:14:b9:0c:b5:de:a5:f9:f9:41:f8:
7d:e8:7f:33:07:d4:cc:94:1f:f6:cd:9b:02:21:3f:91:dc:03:
16:ea:e3:d1:35:71:0a:bb:d8:82:5e:2b:a0:f1:b9:e7:f1:00:
89:36:7f:84:c5:43:0c:e6:9a:fc:3d:03:ab:5a:9b:88:8c:16:
b9:2e:e1:a7:28:04:99:48:5d:99:c8:ef:4d:f2:d6:5e:50:0f:
b4:3f:f9:0c:e2:31:04:70:dc:94:52:e1:79:f4:b1:b9:1d:de:
a5:46:bf:42:59:e6:b2:9c:fe:f3:d2:55:41:9f:6a:a9:cc:a6:
4a:c3:ab:2e:ac:d2:51:1a:48:ca:2a:7d:37:95:e8:e2:de:01:
66:a8:34:41:f9:53:36:5a:37:21:de:40:26:42:9c:8a:05:86:
41:d1:ba:ca:0f:83:66:a2:8f:4e:91:c5:23:f7:c4:25:0b:68:
a4:b5:d5:4e:08:67:da:fd:29:5e:67:07:55:70:f1:0a:16:da:
55:ba:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:16 2026 by rpki-client