Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: igv9CMpVrop5cJL3pjTiO2wrjVp33565aFtNifo8VJ8=
Subject key identifier: 89:F6:6F:A8:48:43:C8:37:12:BB:DE:5E:A2:B5:6A:24:72:EC:BC:B6
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 019D28BB8453624014F3B8D493AAA90072BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: 9mN_oHf4GD05-BUH6BsB01tvt3Y.roa (hash: ZuxdvlwmVs1w0KroWX43G/v/gBodCt7QRPbyICFM9A0=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: 7Xux6JRCv7MlJGCPAx/vrraHZ26iUkEsvrO7UfE2JIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:84:53:62:40:14:f3:b8:d4:93:aa:a9:00:72:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=89f66fa84843c83712bbde5ea2b56a2472ecbcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:c8:7a:85:35:23:21:b4:1f:b9:cd:14:86:
25:4c:3b:e5:72:e1:81:7f:05:cb:66:fe:51:aa:5a:
8c:2e:fe:d3:8a:d0:b3:70:7e:f6:af:c1:2d:74:68:
20:4b:c3:19:2d:eb:4a:cc:c2:54:1c:44:69:b8:f1:
63:e2:61:c7:57:63:72:38:8d:af:e8:9b:25:71:c0:
c2:21:0f:b6:9f:c2:f6:30:3d:f9:2b:a3:04:82:c6:
1d:32:7b:e8:45:b8:8c:ee:00:33:5b:3a:98:63:63:
bb:f3:de:0a:72:60:0e:d5:f0:34:5d:11:75:08:68:
ac:72:e7:37:b8:af:a9:fa:18:f1:55:8b:d3:6e:71:
bd:0b:36:fd:bc:10:a1:10:2d:5a:59:8e:32:f6:07:
ee:f8:10:44:21:4a:8e:eb:e0:d5:bb:f5:a3:92:58:
70:fb:71:25:70:69:f6:ae:1e:95:f1:4e:dd:d0:d8:
ca:4a:58:c4:b1:d5:d4:8f:c5:a0:cf:4e:64:81:57:
e7:e5:8b:71:fd:ac:88:7e:53:a2:86:3b:cd:2f:2b:
74:42:d9:66:d7:1b:03:b4:7e:13:5c:60:ab:82:75:
0d:35:c5:cc:bb:bc:3b:91:af:a7:da:32:bd:6a:f1:
c3:96:d3:b8:f2:c9:9e:8f:bb:c8:bc:bf:cb:58:ee:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:6F:A8:48:43:C8:37:12:BB:DE:5E:A2:B5:6A:24:72:EC:BC:B6
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b9:d3:ac:a6:90:28:8a:28:f0:49:46:1d:09:45:20:43:83:
7f:7e:c2:31:79:0e:2f:34:8f:9c:85:7f:5e:86:b9:60:62:38:
9b:ac:2d:d6:6a:c2:2e:7d:85:30:5c:1b:d7:61:a9:28:08:c5:
1c:04:06:0d:0b:7a:95:48:66:fc:84:b0:7e:a6:7a:2f:d0:f9:
64:6f:5e:3d:f8:d6:c9:53:9f:96:02:41:af:87:33:5a:1f:7b:
65:35:f7:9a:a1:93:81:1d:b3:dc:0c:38:8c:8d:2b:2b:3f:22:
f2:7b:02:47:c2:06:ba:17:6e:78:45:eb:ad:18:75:1b:59:ac:
7b:b0:d8:8f:d0:ef:e7:22:1f:b3:7a:09:c8:1e:bd:35:08:2c:
a6:17:16:9b:d9:fc:1e:78:01:61:b6:1c:a4:60:9d:f7:6b:eb:
7b:7e:e2:58:01:67:d7:63:61:e4:20:64:90:df:fe:37:e6:1c:
1a:d2:94:00:34:1b:77:f3:ad:13:32:c0:db:b2:3e:8f:9b:5b:
20:fc:90:83:ae:18:5a:5f:a0:ca:ad:be:1b:9e:12:87:0c:f0:
76:14:be:f2:ee:8b:1c:77:6c:d0:7e:08:0a:22:2c:f0:ea:ca:
e9:5c:78:a0:32:73:5c:a4:92:79:c9:bd:65:c6:c2:83:3b:51:
e1:d8:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:37 2026 by rpki-client