Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: bK8XAmwLZtp5aOijTHsZx/6ZVbLO2EV3PNWO61OCBTs=
Subject key identifier: 01:39:19:92:C3:F2:B4:EE:3D:C7:F4:5A:12:8C:B7:7D:A0:0C:16:7A
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019CABD961861947A6FB6B652D2C6D2DB997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 140A
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: _ywMYxiU8NbIN1CGjVxjq4SDazI.roa (hash: epZRiBRCbCpE9Pbvl3sOJJDu8ewPmMS8D3a+HxpVf0g=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: QQj0m6SHY35BlGnMoXvVmYXWaaLluFnrPuthxxoglaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:61:86:19:47:a6:fb:6b:65:2d:2c:6d:2d:b9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=01391992c3f2b4ee3dc7f45a128cb77da00c167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:5a:76:0b:cd:bd:7d:68:62:f3:59:28:a3:
76:a4:e7:8e:ab:28:39:e5:be:26:85:3c:65:b0:bd:
0e:57:73:90:0e:bf:e1:ca:8f:51:6f:54:da:26:db:
94:09:af:59:1e:8c:f1:74:71:20:23:37:74:03:5c:
d5:18:ba:64:8b:af:5b:1d:17:e2:c8:a1:f7:bf:51:
0d:c8:6f:1d:11:43:f6:e7:a3:67:16:eb:1d:e5:80:
76:d8:ad:c6:45:b6:55:e7:b3:7f:2e:a2:67:a1:cd:
04:97:96:4e:d8:9a:05:7c:95:69:77:90:f3:a0:66:
37:3f:8e:d3:16:34:fe:e2:0a:7a:70:6d:59:4c:98:
b8:c7:7a:56:d3:f3:e2:e1:59:3d:f5:8d:79:24:e4:
8e:7c:46:c0:b3:e6:14:dd:ad:0c:6c:2d:3f:ba:26:
a1:36:b5:02:63:a4:10:12:32:8a:52:02:58:2c:a8:
b5:42:fd:5d:4b:d0:9f:b1:8a:00:3d:d6:be:dc:a8:
06:bf:c6:ee:9b:fd:62:c2:22:de:ae:db:2f:31:f3:
ea:dd:dc:d6:65:6e:32:b5:77:f9:2f:ae:51:1d:c1:
fc:0b:6c:96:81:54:51:55:1f:5c:96:5f:ed:0b:cf:
2c:ea:ca:d3:f6:6a:3c:50:9e:e0:19:bc:bb:a1:7e:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:19:92:C3:F2:B4:EE:3D:C7:F4:5A:12:8C:B7:7D:A0:0C:16:7A
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b3:f0:db:57:db:7a:67:46:64:5a:09:26:94:8f:45:96:ff:
81:7f:aa:db:1c:78:d2:2d:5b:79:83:93:44:72:36:e5:e4:34:
68:51:25:6b:55:b7:ce:78:2c:2e:55:2b:dc:3a:65:4b:fd:2b:
b8:49:d2:3e:1f:68:c6:a6:c5:a8:fc:15:fc:19:3c:a7:f5:d7:
8a:46:dc:a9:a4:dd:8d:6b:7e:31:68:e4:23:9d:2a:4d:1c:45:
5c:d1:82:09:d2:27:9f:5d:57:68:28:18:cb:25:5d:cf:2f:85:
ce:96:c3:a7:3a:e9:ce:76:8b:a5:32:5a:0d:bf:32:ea:a3:7d:
6d:10:f9:90:6b:ed:75:5e:83:2c:96:e7:33:06:2d:b8:79:ef:
98:7f:26:49:45:e1:54:00:83:85:64:15:43:5f:e5:1b:50:de:
73:1e:a5:61:a1:18:09:90:7e:7e:37:a9:47:35:87:04:09:36:
c8:18:67:03:48:51:e7:d3:96:16:17:76:d0:74:d2:44:b8:54:
50:2f:50:5e:16:c0:78:0e:dc:d8:4f:4a:a7:cb:0d:1d:1e:c1:
d5:79:c8:3f:06:27:b5:a1:7e:36:dc:3f:6e:5a:59:f6:cb:12:
68:a8:93:e6:74:bc:2b:ee:93:b1:02:ae:fe:f5:37:9f:43:0a:
8b:ac:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:46 2026 by rpki-client