Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: wAAvFmHr9qFN6OAcK738pkaajsNISOov/4yw9zUPlkw=
Subject key identifier: B8:30:5C:65:50:18:52:4B:79:B1:EE:FD:14:80:55:95:34:FD:98:29
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019D2695C7E6E012B615EB77D8046285D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0E98
Signing time: Wed 25 Mar 2026 20:00:43 +0000
Manifest this update: Wed 25 Mar 2026 20:00:43 +0000
Manifest next update: Thu 26 Mar 2026 20:00:43 +0000
Files and hashes: 1: apqOufkzZC3hvfLS0yrWU54SWG4.roa (hash: bdicC57sTedPfwJhANjdpge4Xu2b5dLjhbZNF/3RXQM=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: sHqtsWmeOLOCSjp1N20egMitck+Sz8/tihB3m7KalUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c7:e6:e0:12:b6:15:eb:77:d8:04:62:85:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Mar 25 20:00:43 2026 GMT
Not After : Mar 26 20:00:43 2026 GMT
Subject: CN=b8305c655018524b79b1eefd1480559534fd9829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:cf:f7:bd:67:b7:bf:64:f3:a4:fb:90:c2:
94:81:ee:06:a1:96:76:49:61:ff:ff:f6:5f:7a:92:
3b:77:99:ac:23:04:79:ff:0f:b4:b2:d8:26:30:2a:
29:c6:e6:6d:9d:8e:e9:52:89:ce:e8:8d:d8:84:1b:
5c:71:a7:ed:03:a8:e3:5d:82:ea:36:da:8e:62:45:
64:d6:2d:97:7f:01:21:26:20:b8:7f:d1:77:a6:6d:
e6:69:c9:7b:09:1a:b5:35:51:e8:fd:e8:97:87:85:
e9:c7:8a:41:54:13:f6:8e:4a:53:4f:ff:9e:e6:c8:
32:e7:05:9b:37:16:54:bc:59:ab:07:ab:d0:ec:be:
4c:00:6f:df:c9:d2:e1:44:70:21:40:04:9e:e5:47:
5a:9a:28:3f:88:ab:d6:c5:28:99:8b:fc:9a:64:fd:
3c:94:f0:8d:4f:6d:16:aa:52:67:92:1e:57:30:dc:
8d:a9:6c:7d:c1:8d:8e:9f:fd:e0:3a:b9:aa:87:98:
52:c8:e2:4b:e0:c8:1d:4f:5d:5f:dc:c3:67:50:14:
f2:9d:8e:7d:31:0c:0e:02:7f:e2:bf:66:4a:e8:79:
32:86:c9:d4:67:76:68:3d:51:5b:be:b6:ab:9b:c9:
f8:4f:6a:59:9d:18:55:84:2a:2d:55:c1:87:3f:f0:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:5C:65:50:18:52:4B:79:B1:EE:FD:14:80:55:95:34:FD:98:29
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:b2:c9:d0:f1:1a:c0:d7:bc:2c:5d:f8:d2:e3:85:c1:a3:
6d:d0:a2:4f:e6:74:6e:20:4e:45:87:bd:87:a9:1f:f6:25:5c:
06:bb:ad:de:12:e3:dc:4a:20:b8:ab:93:f1:b8:34:9b:6e:30:
6c:69:74:f5:7d:48:a4:0e:e6:82:4a:27:90:8f:ff:03:95:13:
9d:e9:e9:6a:76:dc:a7:5b:10:a9:93:04:24:17:88:a4:ae:8c:
fb:9d:81:83:e3:15:ae:78:53:db:1d:ce:dd:25:40:81:c9:96:
0f:e4:61:68:b0:bb:fe:66:a5:f3:f9:23:76:67:99:5d:61:e2:
89:46:16:0d:4c:96:9c:1b:a2:4f:40:c2:78:39:3a:dc:d3:94:
1c:15:81:bb:f4:a4:b9:44:cc:11:57:e8:aa:ac:a4:b5:e1:d5:
48:57:07:05:0a:fd:4b:a5:13:7c:77:e4:d3:ef:f6:9c:a7:9a:
e3:ff:62:00:1a:fc:bd:71:58:cb:cd:11:d8:58:e6:08:e3:5b:
80:3b:9e:42:bf:0f:67:6a:94:3e:a6:ef:64:37:35:b7:d9:2a:
50:66:38:73:e7:6f:c3:2f:ed:58:dd:a7:70:b3:d4:8d:19:e5:
3a:16:a6:ab:2b:78:c0:fb:37:30:aa:f5:5c:c8:e6:45:69:b3:
7a:28:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:27 2026 by rpki-client