Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier: ZFTpeSws02q+j2AnKXWTKlLWF37Q5oewaMVGf5dDa3E=
Subject key identifier: 6A:73:81:EE:03:9A:C1:78:48:44:1A:83:7F:49:9C:F8:28:CA:61:19
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 019CB0C8A20B89939AE5801363440667B75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number: 0ACA
Signing time: Mon 02 Mar 2026 23:01:04 +0000
Manifest this update: Mon 02 Mar 2026 23:01:04 +0000
Manifest next update: Tue 03 Mar 2026 23:01:04 +0000
Files and hashes: 1: hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa (hash: 9sKjJMjkVL/S9kl3FSQOk76oCUEVM9PGOrM1vKQrGA0=)
2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: UHyouAwDTQpbufQzeOd+FGI/trvPpQA27QYAoOpOtiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:a2:0b:89:93:9a:e5:80:13:63:44:06:67:b7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: Mar 2 23:01:04 2026 GMT
Not After : Mar 3 23:01:04 2026 GMT
Subject: CN=6a7381ee039ac17848441a837f499cf828ca6119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:4d:4d:f3:9b:87:1f:7b:90:92:34:69:48:
4d:eb:dc:3d:74:b2:3a:2e:d0:12:94:92:5b:b0:2e:
e9:d8:3a:60:99:82:e5:ab:89:5a:50:63:0a:e2:ad:
18:96:51:91:97:25:07:6e:19:f2:39:55:a1:7b:93:
20:1f:b8:f3:d6:8d:ff:c6:5a:5b:3a:ec:21:ac:d9:
c7:2d:5d:1f:02:88:4b:05:34:3f:15:5b:8c:ab:65:
8a:02:03:fd:e6:c1:51:6d:98:18:7e:61:36:1b:2d:
43:42:9f:c1:82:2d:09:a8:37:d5:81:5d:c3:a0:68:
c1:2d:20:9b:9f:15:e1:55:0e:b4:97:b5:bd:79:a1:
5d:c8:d4:b0:a4:89:1a:50:d1:99:59:11:2c:cc:d3:
88:89:f7:8e:f7:61:38:23:97:5f:eb:75:09:be:4c:
4e:5c:28:8f:79:c4:17:80:d0:c1:3d:ce:36:d6:79:
bf:4f:d1:61:2c:bc:5b:d5:85:6d:77:56:76:d0:9d:
64:5b:99:68:f0:32:cb:33:16:59:31:3d:36:de:03:
dc:32:03:ff:64:27:df:8e:d6:56:0c:81:db:4c:9f:
07:c8:61:19:12:56:07:be:59:3b:e0:ba:fe:cb:6d:
18:fe:68:56:e0:13:85:ee:79:cf:c4:3d:08:e0:d2:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:81:EE:03:9A:C1:78:48:44:1A:83:7F:49:9C:F8:28:CA:61:19
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8f:78:af:b7:65:65:8c:bd:68:07:87:dd:ad:67:81:a2:10:
9d:b1:bd:ed:21:1f:9c:d0:42:ee:ab:5e:a2:0c:ef:12:11:6d:
af:50:35:cb:86:db:5e:f5:5d:0a:fb:e1:1d:27:23:f0:d8:ae:
74:85:3a:e5:73:c8:08:2e:dc:7e:9d:32:fe:04:8b:38:b5:68:
65:b4:6f:b6:a6:6f:fa:25:93:82:fd:66:3f:6c:69:eb:1b:63:
94:7a:23:e6:a4:c3:f0:8d:da:06:4a:9d:88:bd:9b:d7:b7:88:
77:6c:5d:fc:6c:96:32:57:b7:09:9f:92:a7:c1:8d:fc:12:c4:
95:6d:ef:8a:63:ed:fc:05:33:20:63:e8:be:c2:6a:f0:41:18:
96:97:91:95:2b:3c:ee:60:03:c9:bb:35:7c:bb:5a:ac:20:73:
0a:c0:11:ff:46:d6:9d:e6:38:4c:70:4e:da:75:cb:cc:37:8c:
83:f9:4e:de:b4:c1:a5:0a:5e:67:06:ae:71:7e:e8:a5:09:ca:
b3:1d:c1:52:1a:92:2e:9a:41:65:8a:d3:51:cf:03:55:43:fd:
0b:72:79:35:44:d9:1f:55:0c:23:27:a8:03:9a:14:a1:00:83:
fb:4d:1f:7d:05:dc:19:08:fb:53:3c:6c:f1:58:41:af:f3:58:
7d:fd:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:26:07 2026 by rpki-client