Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: G9J1BEyTwYL4dHsYyvyszXl5B/5Ng6EsAGeJnReXsHc=
Subject key identifier: 89:16:7B:3A:F7:D4:77:95:D7:2D:73:54:12:66:57:14:6F:9C:79:A5
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 019CAAC6628669A09017DB17441C969CBC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 15C7
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: JNNPr4nhUWykWcwcfUehoIwNN/shVxE3e9An93FKCbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:62:86:69:a0:90:17:db:17:44:1c:96:9c:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=89167b3af7d47795d72d7354126657146f9c79a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:50:35:b3:da:2a:01:84:ee:c3:6a:08:73:2d:
29:29:19:21:b4:3b:22:77:62:ee:7a:2c:e4:fd:cb:
20:17:b8:a4:b1:29:17:cf:5b:c3:f2:83:a7:d2:79:
99:2a:26:09:6f:11:6f:3e:bf:ba:90:f2:27:4f:e2:
e7:8e:4a:63:3b:ba:39:fc:41:38:34:1f:69:b6:05:
90:d7:54:52:eb:37:b5:ff:e8:8a:f4:61:72:0c:d8:
7a:14:1a:5c:68:2c:85:ab:7c:9e:86:30:83:86:19:
54:da:90:ac:dd:f4:b1:e2:31:f7:99:d4:22:7e:d6:
f7:e7:36:75:58:da:07:11:cc:dc:9f:23:66:b7:28:
b8:38:89:99:55:b3:cb:38:80:01:d9:ec:9f:eb:25:
c3:34:74:7e:2f:9f:55:ed:5f:8b:6b:84:5f:e3:b3:
44:10:c7:51:a1:e0:aa:40:95:4f:28:de:9f:f8:ea:
c7:25:e7:40:e3:74:1a:c3:b3:00:8c:cc:af:07:8a:
14:d4:44:3f:ad:d7:e0:36:9f:23:20:e1:1c:6f:99:
fc:cf:3b:01:ab:d4:b2:3e:dd:6e:8f:15:52:cb:c3:
58:c5:c6:43:cd:7b:42:5b:b9:b1:b2:3e:9a:3f:88:
4e:13:99:32:bb:77:34:f0:2c:f8:89:e6:48:ac:39:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:7B:3A:F7:D4:77:95:D7:2D:73:54:12:66:57:14:6F:9C:79:A5
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:86:e6:85:48:0c:6d:0a:b9:65:b5:41:e3:e9:b3:d2:f7:f2:
dd:84:1f:a5:a1:8b:d0:17:e5:df:2c:c7:05:65:92:aa:69:f7:
cb:34:a0:79:2f:29:05:ce:7d:7d:9b:eb:fc:6f:64:c1:8a:ba:
0a:3e:e9:f0:b1:e2:1a:be:3e:99:cb:96:2d:5f:2a:a3:d4:b7:
41:b8:6a:e0:e1:24:46:e1:e6:b6:ad:e9:98:63:d7:5c:86:0d:
64:12:13:17:bf:b8:01:6b:08:87:b4:13:9e:56:d3:c5:61:50:
1c:24:b9:3e:61:31:ed:75:4a:c3:b9:c7:03:8c:11:3d:84:e6:
50:83:60:82:22:f5:18:cf:be:0a:8f:8b:a8:cc:59:c1:a6:ac:
f9:96:0d:9f:fa:3c:08:35:46:44:3d:52:cd:71:1f:5f:67:00:
7c:7e:71:2a:11:f5:b3:91:b3:33:e7:56:fe:91:43:21:66:8d:
98:0b:9d:2a:d3:1c:1b:36:3b:11:4f:7a:78:0f:a9:89:a5:fb:
22:75:7b:f2:ac:3d:ac:8f:5a:2d:2c:36:a2:04:13:6e:5c:9c:
7a:37:f5:9b:fe:3a:89:de:d2:cb:57:9b:b6:14:3e:6b:dc:bd:
62:6d:93:2a:03:da:97:84:0c:2f:3c:c3:b9:02:0c:d0:0e:de:
7d:63:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:44 2026 by rpki-client