Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: 2vYUQeQWzmGTbz0owCXPGXNIDj5dnqy0hvtKUHJJaSE=
Subject key identifier: 29:1F:B8:71:5F:D0:4B:E3:22:C8:02:4B:7C:E4:90:7A:66:FD:EC:14
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019D25F1CF685755116E16581075789C306A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 121D
Signing time: Wed 25 Mar 2026 17:01:37 +0000
Manifest this update: Wed 25 Mar 2026 17:01:37 +0000
Manifest next update: Thu 26 Mar 2026 17:01:37 +0000
Files and hashes: 1: PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa (hash: IqN6OL+5nEUWmHYyOF1lygpuFBpPS3oI5vZnXBqF7kc=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: ESVEq+Y93t59UBS/+wBHxyVb2sUw4512ksFEyjkhV6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:cf:68:57:55:11:6e:16:58:10:75:78:9c:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Mar 25 17:01:37 2026 GMT
Not After : Mar 26 17:01:37 2026 GMT
Subject: CN=291fb8715fd04be322c8024b7ce4907a66fdec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:52:25:90:be:b2:5c:93:70:37:95:ba:3a:
98:9e:5b:e7:fa:2e:6b:65:3b:07:9c:89:82:5f:f3:
30:1a:f5:41:e6:91:0d:16:40:4c:cf:92:d9:72:1c:
33:02:03:d4:7f:82:82:f2:c4:98:08:d5:09:82:1d:
f9:da:fc:57:cd:16:01:2a:30:c4:68:46:cc:16:e2:
2b:8e:bc:a2:53:53:cd:72:06:69:22:2c:85:2d:4a:
a4:2a:7c:02:ce:62:bf:be:a2:02:57:8d:de:ff:9b:
33:cd:57:1b:57:f9:e3:ca:46:c3:8f:09:d8:ef:b6:
4c:31:be:cd:f7:d3:ea:93:18:ef:19:c8:e9:e3:78:
22:54:9c:2e:66:a6:36:bc:e3:30:ef:6d:4c:2b:48:
aa:62:73:23:58:76:62:e4:31:08:24:a7:9c:7b:1e:
73:cf:5c:65:6d:0e:eb:aa:83:98:29:e0:ca:49:d0:
5c:ff:cb:ba:94:63:80:1c:ce:13:0a:ef:9a:82:e6:
69:fa:e9:12:68:1b:17:da:2d:a3:08:00:3a:05:fd:
a3:90:72:09:b7:31:45:91:35:3f:4d:a6:49:48:54:
8b:55:c8:bb:74:d1:1d:2e:26:59:1d:43:6d:0c:1d:
82:2f:97:11:84:63:26:0d:2c:86:99:13:7d:ed:a0:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1F:B8:71:5F:D0:4B:E3:22:C8:02:4B:7C:E4:90:7A:66:FD:EC:14
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:ac:5a:20:a0:bf:f1:5f:92:67:33:8a:5c:e7:a1:fb:08:
e7:c8:aa:b7:a3:48:bc:43:f2:c4:0e:4b:ea:0a:fd:5d:64:66:
75:a5:29:f2:02:2a:f1:83:48:a7:fd:9d:74:ae:e7:f9:44:0d:
25:c6:89:08:9d:e2:f4:be:b9:74:27:c6:37:af:21:1f:df:75:
e3:9c:64:c1:83:ec:65:f7:0c:43:42:c4:72:36:c4:e0:5a:27:
c7:68:e8:e7:01:79:38:f0:3f:0e:29:eb:02:34:2f:bd:53:ae:
78:30:76:21:d5:82:ec:0a:38:c5:22:66:26:e8:11:74:cd:21:
08:0e:c0:6b:e7:fe:af:af:45:d7:b0:bd:7c:91:e4:59:e7:61:
5b:d8:b7:df:77:2a:fa:5d:07:d0:dc:0a:11:a5:f5:49:17:a2:
64:ba:c4:cf:de:17:0a:be:03:9d:05:a1:d2:0d:22:d0:08:c4:
0d:f6:c3:a3:a8:dc:98:96:2e:38:39:fa:7f:65:94:56:06:de:
67:d9:f8:ef:61:b5:8c:12:92:30:de:99:1d:e0:49:1e:65:da:
cb:76:a2:6a:7b:11:66:8f:4d:e6:e0:56:d4:87:63:9b:5f:8b:
ec:22:84:be:65:ca:22:3e:13:00:3f:50:a6:63:25:6e:3e:18:
5e:3d:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:41 2026 by rpki-client