Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: 8hB1SBvNR/dyjUN83IIwmeNUgnzyVCDBOpHb5V/zYtw=
Subject key identifier: 87:F5:E7:91:52:C0:30:1E:83:E3:6F:9A:39:F4:34:36:7E:15:2D:1F
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 019D27E05F45DF3CE236E2D6084A14EFA48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 1445
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: G0aKcDsl1PqdjVR3FQskokbeFo4.roa (hash: 1L7mF5eSE/OQ8Z7D7J6lT/W3zitG2LYDWe4kI69m0FM=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: Ub119DUfuwlot6VYkU7GBsgtdHJNaBgHjbksDum9o3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5f:45:df:3c:e2:36:e2:d6:08:4a:14:ef:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=87f5e79152c0301e83e36f9a39f434367e152d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:fa:e2:f3:47:61:3c:40:b5:98:f5:20:02:
f7:1f:79:86:09:ab:fa:1a:0b:97:29:91:af:f7:7d:
c9:0e:79:55:58:93:b4:64:e6:5e:fd:98:6b:7f:3b:
37:8a:ca:00:0c:4b:15:a6:5a:e8:d8:6e:2d:c7:19:
f7:96:fe:53:5e:48:62:fc:39:03:5d:f1:40:83:14:
a4:e0:1d:94:21:68:62:8a:d2:bd:02:db:4d:f6:db:
3f:17:7f:42:76:7d:15:de:97:6b:06:38:9f:f2:0a:
55:99:30:96:7a:6b:db:39:7e:54:d2:fd:58:6a:27:
4d:17:39:41:28:82:85:f8:56:92:98:3e:d2:f0:1f:
57:8a:d0:ba:34:6a:a8:3f:29:77:51:8a:a8:ed:df:
12:6e:54:d7:ca:72:88:de:10:4b:20:b3:0b:1a:db:
2d:bb:29:ec:2f:b5:ac:83:71:e5:cc:59:0f:a1:29:
c7:08:b7:af:38:61:b3:ea:73:2d:e0:6a:d2:1e:04:
8d:3e:55:da:6c:d1:6c:1c:c9:dc:76:a7:12:b1:a0:
2a:46:8c:3e:0d:77:a8:23:8d:a5:b7:b8:85:b3:e5:
82:d7:06:e8:66:26:dc:c6:6b:83:c2:e5:66:cf:8a:
e7:e8:a0:a7:26:0e:de:b1:c4:c0:01:a4:7c:7c:79:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:E7:91:52:C0:30:1E:83:E3:6F:9A:39:F4:34:36:7E:15:2D:1F
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3f:1d:b1:a0:19:6a:31:6f:24:66:7f:f6:df:be:d0:59:70:
fa:46:f8:d7:5f:bc:d2:cf:20:d4:6a:fa:4d:2a:20:9c:29:b3:
8f:18:04:cd:d1:fc:a2:97:0b:e7:d9:28:f1:f3:6f:55:9c:a0:
bd:96:fa:84:62:65:a2:ff:dd:7e:fb:29:7d:4b:64:53:a2:18:
94:ce:b6:73:09:18:a1:fb:80:65:84:4f:ad:3e:71:23:8d:a5:
a1:e6:01:e7:6a:8e:b0:c5:a0:19:a7:13:0e:0b:31:ec:40:3f:
42:e2:fe:3c:94:9d:b1:33:fc:f4:89:97:1f:dd:06:21:f9:64:
d5:67:ef:d2:34:02:b9:f9:52:81:f8:fb:aa:ef:5e:96:b4:19:
f2:46:f0:3a:40:e3:c0:41:ff:3b:e7:ff:a3:30:aa:f9:d4:65:
e5:d5:54:72:69:05:24:74:08:c2:da:9b:4b:da:0d:de:52:ff:
63:ef:eb:ff:3f:9c:47:8f:08:37:f9:91:a6:a0:44:96:24:84:
2c:16:7b:14:1a:1f:51:44:c8:0d:08:01:c4:50:72:a8:1f:f2:
d7:dc:38:81:5d:8f:2a:51:50:56:e8:02:44:f8:6c:90:53:cb:
33:63:6f:c5:5f:77:d3:c8:b7:05:d3:f5:df:5d:a0:d2:6e:0e:
36:72:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:36 2026 by rpki-client