Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: tNcUoFex3MiyRpnW+APgF4g19UTmwlKA269fJuBqXRU=
Subject key identifier: 45:B0:F8:4A:EA:D6:97:92:9E:AD:FF:2E:AD:0A:AA:7B:BF:25:04:BD
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 019D26CCFF2B17135F3C3B37BCFA8A328A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 1051
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa (hash: PJ4tHS8apGhvLe8TYz2cpr3MotUGBCPTkvdJ0n2/4ow=)
2: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: 3i/wfb65BtezXrp6JRTqneRzolZJatwRvKpD1BTh7o0=)
3: osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa (hash: uL7wqYgThc5bmPjNZmNt1te0zFr+Z2xMdvjLAunveII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ff:2b:17:13:5f:3c:3b:37:bc:fa:8a:32:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=45b0f84aead697929eadff2ead0aaa7bbf2504bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:0f:e2:9c:9c:3d:24:c4:26:34:b0:cd:09:
91:5f:b2:78:bb:06:05:19:a2:e8:55:d6:8e:ca:f5:
4f:03:83:83:34:e6:74:63:fd:3f:f5:cd:ef:72:c7:
06:8d:47:9e:a2:84:30:61:e5:32:b7:39:d5:97:35:
da:91:bb:7c:02:0e:ac:7f:71:78:15:56:08:78:c0:
6d:44:37:9b:fd:f5:21:90:89:d6:43:e8:98:fb:af:
8c:fe:81:fd:9e:49:61:39:bf:b8:cd:2b:ed:f6:ce:
d2:d9:61:c0:76:08:c4:5b:7b:53:85:5d:49:b5:5f:
d0:a3:ed:ff:2f:fb:45:31:0f:3f:10:08:a3:4e:f5:
21:57:57:b2:8d:dc:72:02:64:b7:9d:2c:6e:63:0f:
ca:d7:eb:4a:65:a5:5a:a7:6a:13:f9:2f:2e:b2:1c:
e2:6d:98:a1:51:45:78:c8:0a:b2:31:5b:0a:b0:41:
34:30:76:63:96:83:a4:82:05:4c:9f:e4:39:0f:f4:
48:f6:86:e4:75:bd:96:2c:e8:72:74:15:ac:6a:0a:
9e:60:9d:87:3d:3b:a5:3d:23:3d:b4:74:97:46:06:
c9:20:41:a4:56:0e:66:dd:4e:4b:bc:bf:78:d1:a5:
65:ae:fc:a4:91:0a:5d:1a:e8:d4:42:e1:bd:4d:11:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:F8:4A:EA:D6:97:92:9E:AD:FF:2E:AD:0A:AA:7B:BF:25:04:BD
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:22:c8:30:62:9f:e6:61:e5:0c:b1:07:6d:05:d6:82:42:c6:
7c:aa:2a:b6:19:6c:e4:83:61:fe:ad:af:2b:4f:42:c9:03:78:
5b:76:80:a7:bc:e0:0d:06:61:60:99:5f:c9:f4:d4:25:c1:04:
5d:5a:55:4c:6c:09:6a:df:cd:85:8a:93:3c:a2:bf:40:f4:d4:
c3:17:36:07:6c:95:52:bb:e7:aa:4c:7e:c9:b0:9e:97:ca:13:
5c:48:99:c5:ec:81:c4:ab:86:06:66:5c:15:28:4a:2b:be:9f:
7e:7b:1e:f1:8e:4e:1e:a2:95:05:05:00:41:5d:c7:dd:bb:ea:
c4:67:00:c6:25:8b:cd:c0:fe:26:75:62:f9:25:c4:f1:5c:3c:
6a:2e:66:3a:8e:b5:15:19:29:5a:59:27:7a:63:62:7d:dd:64:
09:76:81:0f:f0:ca:d7:07:90:3f:56:6b:c1:c3:5d:c7:19:d1:
37:7b:a4:ca:36:5c:18:2e:1d:48:a7:1b:bd:7f:2d:0d:79:5c:
a9:2b:78:15:a2:c1:38:b3:1d:99:8d:90:e5:4b:63:d9:dd:29:
1a:82:d6:a3:79:de:6c:3e:e5:a7:c3:75:a2:a9:99:ef:86:6b:
2f:e8:e0:6a:00:84:2e:84:c5:01:8e:c1:b1:95:4e:29:1a:6a:
16:5f:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:32 2026 by rpki-client