
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
File: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft (raw, json)
Hash identifier: X6xxL5dIHrf3us72WqBpL7v9qxgB+Qyupi8pMFUPpXI=
Subject key identifier: AD:E5:19:C5:F2:C2:0A:44:BF:11:EE:43:C5:FA:CF:B9:AF:86:58:51
Authority key identifier: 9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
Certificate issuer: /CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Certificate serial: 019D33E3977EC3E39F810B3D4FB790013D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
Manifest number: 01AB
Signing time: Sat 28 Mar 2026 10:00:46 +0000
Manifest this update: Sat 28 Mar 2026 10:00:46 +0000
Manifest next update: Sun 29 Mar 2026 10:00:46 +0000
Files and hashes: 1: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl (hash: ItQS2ZsnYvjrZ/0uIGw3tS0aXR+Rwuuc2MpYYd2w01A=)
2: pnGOn8liKT666FoyADjTDFWrQPM.roa (hash: sCPE61kJy1tWNU9B8wscAHYWozWTd1ojRy1LFF5QEjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:97:7e:c3:e3:9f:81:0b:3d:4f:b7:90:01:3d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Validity
Not Before: Mar 28 10:00:46 2026 GMT
Not After : Mar 29 10:00:46 2026 GMT
Subject: CN=ade519c5f2c20a44bf11ee43c5facfb9af865851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:c9:56:51:92:13:20:20:8a:0f:5d:69:11:
8e:ca:a0:66:7a:0f:4d:2c:aa:77:86:ee:a3:29:31:
1b:3c:a2:3d:5d:81:bb:3c:09:71:14:48:cb:c2:56:
62:95:38:44:dc:e0:1f:d2:62:b0:5c:f9:c1:e7:f0:
68:87:b5:8f:aa:59:93:6d:03:ee:7c:cb:8b:e2:db:
ee:4c:5f:4e:a1:bf:7c:aa:82:bd:d5:b3:56:22:96:
a4:32:f3:3e:4c:5e:4e:c5:8c:58:31:50:3c:c4:87:
99:d5:f7:e8:3e:f3:31:35:4b:75:78:c4:72:e4:08:
92:3c:a9:64:11:f2:44:36:fe:aa:72:0f:f8:cd:30:
89:22:91:82:d3:f3:ad:ad:c0:21:7d:80:be:da:9c:
90:18:8f:ff:08:bb:4d:88:a4:b1:e0:a9:50:52:36:
18:ab:3a:a3:73:d7:f4:5f:45:44:e2:a5:7c:f5:0e:
5b:3c:20:3b:1c:e7:12:9b:95:98:a8:96:ad:ea:c4:
7b:36:81:4d:0e:26:17:91:88:1c:d9:ff:56:03:4e:
bd:3b:2f:ca:e8:ba:d6:2e:eb:f2:6d:55:68:b6:40:
b9:6d:78:41:09:ac:4c:77:b5:4f:ef:96:1e:8b:e3:
40:31:25:08:39:e2:53:8d:ad:02:2a:66:5c:50:d5:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E5:19:C5:F2:C2:0A:44:BF:11:EE:43:C5:FA:CF:B9:AF:86:58:51
X509v3 Authority Key Identifier:
keyid:9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:da:f2:22:38:b3:f3:37:8b:92:96:ee:57:da:47:a9:00:9b:
84:81:90:7f:a7:82:48:9e:54:4b:48:ab:41:da:d6:f5:16:56:
c4:53:1c:55:09:15:f8:15:8d:1b:4e:ff:44:c5:c0:66:f5:5b:
3e:9d:93:f7:bd:4f:34:fd:89:a0:49:cb:5f:aa:b2:58:c5:1a:
31:44:72:b7:cb:7d:44:3f:8a:59:40:cf:bc:bf:e5:a1:be:32:
9b:04:88:47:d0:9c:14:26:f4:cb:01:65:6f:ed:01:a7:54:f8:
91:23:3e:c9:d2:8d:f2:a0:e3:19:79:46:40:4f:79:4f:ab:c8:
70:de:5b:c7:29:72:ae:1f:b4:6d:68:a3:2c:b0:e6:e7:b1:55:
de:4c:de:f4:50:db:4c:7a:92:78:88:2e:b2:3b:cc:8c:eb:89:
45:83:1a:f2:a0:54:ff:54:ac:73:cc:7c:a9:ea:73:8e:0c:76:
91:d8:c0:a6:e0:17:45:bb:27:c5:5b:e8:aa:24:f6:21:11:e2:
7f:10:21:5d:88:06:e9:ad:17:b1:65:b9:bc:69:f0:f1:ff:17:
4d:62:b8:60:83:b1:ea:47:f3:ef:94:60:21:9a:fe:2f:90:b7:
dc:aa:2d:00:b4:e2:d5:b0:f4:55:eb:2d:60:4f:11:a1:d2:3d:
9e:44:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:54 2026 by rpki-client