Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: jcoNYaR3bu6GodL+hmtpEDTIZS0j/wXrAXr5YVjEpIo=
Subject key identifier: 3D:D2:EA:D9:CB:19:CE:6D:CC:74:E9:E7:EF:96:7D:8C:0E:E3:15:26
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 019D27043F759DFD07EF0F137A635746B6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 0461
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: 87sPgGS78gNXnDIuF37apaMYRbQ.roa (hash: gwbpEBETTamHMzi2lyqeLf+vpyBZoN6/hFjwP/nt39I=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: xKa7CorDqu5esAlPcNsoccIRTLqfX0LRfAiLFLRtHkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3f:75:9d:fd:07:ef:0f:13:7a:63:57:46:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=3dd2ead9cb19ce6dcc74e9e7ef967d8c0ee31526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:e1:74:30:cf:8b:e0:c5:2a:b3:3f:0c:3f:
26:b6:08:8b:cf:f5:fa:85:ec:81:a3:4a:9a:22:1c:
6d:22:3b:8a:c4:76:45:1a:70:64:13:5d:ee:91:eb:
0a:62:9c:9b:d5:fe:0a:8d:bd:21:f0:89:ee:98:93:
b7:e4:ca:17:1b:14:16:e0:15:b6:dc:d0:8b:d2:18:
c8:90:f3:7d:ec:db:24:dc:92:e8:46:eb:83:db:fa:
02:51:fa:06:1b:ba:7d:25:c8:00:fa:17:f9:0b:d0:
b3:c9:a2:5a:fc:cf:b9:d0:88:62:fc:71:f3:ca:c4:
52:86:9f:bb:83:77:5c:59:db:1c:55:bc:36:b7:e7:
79:c3:ef:41:72:8e:cf:99:44:84:46:6e:24:19:43:
c0:f2:25:33:3a:8f:e8:df:ed:6a:42:cd:f5:8e:9d:
5d:7a:62:b0:d4:34:7b:c1:af:1a:eb:86:ee:05:2d:
9e:7b:64:93:e7:22:1a:0d:9b:c5:ec:3b:32:99:df:
26:93:3c:37:65:70:87:53:a1:5d:09:3c:e7:bf:4f:
8c:ca:01:4c:3c:8c:54:76:6f:71:cc:34:7a:2f:43:
75:a0:51:d9:2c:a0:f0:4b:e8:87:e3:89:2c:78:b2:
11:db:ca:47:9a:6e:23:e2:91:20:1b:98:0b:cf:13:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D2:EA:D9:CB:19:CE:6D:CC:74:E9:E7:EF:96:7D:8C:0E:E3:15:26
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:75:a2:09:89:d6:11:7e:ad:3d:19:1a:00:f1:5e:4d:63:b4:
72:8e:31:7f:dd:ed:df:94:17:89:29:b2:4f:23:33:d5:41:b6:
81:4e:6a:44:1c:30:70:ca:1b:6c:7b:45:dc:15:6f:7d:d5:fe:
74:1a:52:74:06:eb:a7:97:d8:c3:cf:23:ef:84:e3:cc:5d:6a:
64:8c:e0:8e:30:b8:4a:5b:27:b9:88:33:6e:2b:45:9f:52:ee:
5b:13:7d:cb:e5:61:d1:b9:0c:41:84:19:45:32:a5:9b:9c:f7:
0b:9c:8b:6f:ae:34:1c:f6:53:cc:94:ab:87:64:ba:24:bc:d0:
9b:31:13:e2:82:a8:13:d7:5f:e2:53:8e:68:d1:67:51:bc:86:
3b:d0:aa:ac:16:9d:32:59:9b:ea:63:f6:03:20:31:4b:56:67:
1f:48:c9:aa:62:13:87:8d:91:f5:21:ff:03:4d:cb:86:4f:8d:
78:9f:f2:ff:31:21:9b:7a:b3:e5:dc:a2:b1:4f:1f:41:ec:e1:
6e:b3:33:0d:60:1b:ac:00:d5:8f:0d:5b:a1:cc:50:ed:e2:6a:
97:c9:ab:83:9b:0e:20:57:0c:be:82:20:aa:25:ae:36:cd:8f:
ad:04:36:bc:67:84:d1:ae:a4:f8:8f:52:92:77:00:1f:ab:87:
30:92:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:36 2026 by rpki-client