Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: K9xCHiJLxbdKaLw9IMdAz0ZV8RSdNpTs24H3CMEJrAQ=
Subject key identifier: 11:44:7F:1D:F5:E3:DA:D3:A8:8D:1C:52:4B:D1:79:E4:25:89:8C:E2
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 019D27E0762F9E09AB65F3B0EEB5628688B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 0A42
Signing time: Thu 26 Mar 2026 02:01:54 +0000
Manifest this update: Thu 26 Mar 2026 02:01:54 +0000
Manifest next update: Fri 27 Mar 2026 02:01:54 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: GRY+nxfLZjpzUx9dpLmrErDpqd+Nh/fBkOGO/sxCO14=)
2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:76:2f:9e:09:ab:65:f3:b0:ee:b5:62:86:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: Mar 26 02:01:54 2026 GMT
Not After : Mar 27 02:01:54 2026 GMT
Subject: CN=11447f1df5e3dad3a88d1c524bd179e425898ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:7d:cf:b8:3b:08:da:03:25:6b:7a:42:64:
30:53:99:c1:54:c0:30:22:b5:c6:e4:20:fb:26:96:
a6:69:50:de:10:14:f4:b5:59:10:69:45:d5:d6:44:
44:5c:fe:71:a4:af:d9:a8:b0:07:8f:6a:61:38:9e:
b4:20:dd:0b:88:d3:3f:e9:01:6e:45:d3:ea:d9:21:
71:5d:dc:87:df:d8:3f:31:c1:6b:6e:6f:1b:22:f0:
b2:d3:08:aa:b7:28:1f:e1:fc:49:9e:d5:dd:d3:10:
99:a9:43:e4:93:d4:37:34:94:ea:ba:72:f1:94:1d:
07:dc:e3:a1:8b:6f:54:a4:3d:5f:75:6e:ab:a4:d0:
e5:b5:c2:7b:f7:3a:2a:f9:49:e4:eb:2f:4b:0f:de:
73:b1:d6:58:4a:41:1c:c4:37:af:44:ea:3d:a2:ff:
2d:8d:3f:2b:e5:d1:77:f3:76:e7:db:65:79:db:eb:
5c:46:6b:90:61:30:11:c1:53:3f:be:cd:64:95:6c:
a0:c6:ec:f7:b9:86:46:70:18:69:8e:17:23:fc:0b:
59:e8:c9:6f:7b:a4:ac:db:18:38:f6:f2:39:90:fa:
f4:c0:18:3d:e5:0d:ba:55:2d:63:d2:e5:74:a6:dd:
85:2d:ff:7c:58:cb:03:2b:95:57:66:f6:69:0e:1e:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:7F:1D:F5:E3:DA:D3:A8:8D:1C:52:4B:D1:79:E4:25:89:8C:E2
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:12:44:0d:74:61:be:bc:b2:f5:d8:ca:32:bf:c1:45:0e:
47:51:12:e4:74:5d:40:d3:07:e4:29:23:52:cf:3f:35:59:55:
13:99:93:60:c8:ef:31:ea:e4:63:85:08:a1:41:07:8a:65:a7:
36:44:0a:7a:d6:5d:67:b3:24:0f:38:6d:83:94:21:8d:07:fc:
75:4e:8c:92:f1:d2:3b:a0:fb:0b:4c:d6:2e:c6:b3:51:5c:18:
f9:4f:7f:df:84:dd:f3:7d:1f:99:17:ff:06:b8:01:15:36:4c:
6e:34:9a:58:3a:9e:1e:a7:d2:8e:d1:84:8a:34:8b:f5:13:5e:
a2:09:56:6f:8f:ef:fb:62:6c:15:a9:d6:0d:a7:a8:56:37:d5:
14:95:2b:2b:d4:0e:65:ef:5b:2f:44:13:54:20:ba:e3:ab:e8:
e5:79:3d:08:d6:a2:4a:7b:85:bc:fa:94:68:dc:21:90:34:4c:
b0:c8:47:be:28:97:89:94:1e:15:3d:59:3c:be:50:c0:99:65:
b1:b3:86:03:4f:39:08:47:61:18:5a:97:53:6e:9f:26:42:aa:
1a:dc:2e:ce:fb:38:98:42:e4:c9:d0:ed:9c:0c:38:e5:32:ca:
11:72:53:8a:63:52:39:96:32:a4:be:0f:c7:7a:df:d3:3b:e1:
68:16:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:43 2026 by rpki-client