Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: hOC1AKY88+c+KvKBBz83IMxlktEIhf3K0VPitioAqGE=
Subject key identifier: 26:B4:E4:26:8C:94:70:FA:C8:3D:23:71:46:10:30:F0:FF:CC:46:45
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 019CACEB96CDC70D58C7F86E9057D8445624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 1146
Signing time: Mon 02 Mar 2026 05:00:46 +0000
Manifest this update: Mon 02 Mar 2026 05:00:46 +0000
Manifest next update: Tue 03 Mar 2026 05:00:46 +0000
Files and hashes: 1: 9UL_7FkS2vsJIq4mulwmPO12qgU.roa (hash: PMgAFWeEqNxOYIt76P9bkFAoNa2Je/9TmNXR3UwPjvg=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: CFDvRmpiZVsfZjsa3clqTg8/59NlqTSD8qrPQy4hQ84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:96:cd:c7:0d:58:c7:f8:6e:90:57:d8:44:56:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Mar 2 05:00:46 2026 GMT
Not After : Mar 3 05:00:46 2026 GMT
Subject: CN=26b4e4268c9470fac83d2371461030f0ffcc4645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:3f:7a:6d:5e:ff:19:cb:f2:70:62:73:ca:
c3:9a:c9:c6:6c:73:e6:30:99:b3:1c:2e:2e:2f:36:
d1:a0:ed:ee:13:08:1c:4a:89:69:e2:84:71:84:d3:
70:1c:89:19:2a:a1:69:28:fd:b5:48:bb:96:2d:91:
61:82:3f:89:65:dc:fe:d1:62:c8:47:1f:6e:0a:31:
3d:37:74:f5:11:54:80:59:a7:0f:c8:2a:c1:98:48:
bb:d3:d8:12:a7:dc:e2:95:22:be:b9:25:97:8d:39:
b7:93:59:40:8c:76:75:9c:40:9d:60:c5:bb:e4:f3:
2b:c1:e0:35:bd:c3:24:a1:f7:1a:e0:64:46:e3:b3:
b7:8b:79:21:d4:89:72:0e:3a:fe:c9:43:fb:4f:fe:
a9:4d:c4:7c:04:1b:64:12:7c:d8:ba:1c:5a:28:f5:
c0:cf:3f:ad:77:a3:3e:b1:af:da:e2:6d:22:a6:9e:
eb:2a:23:8b:d3:78:be:b2:93:1d:db:36:62:f3:55:
65:c1:1d:dd:1b:a2:c8:7c:d8:9e:bd:56:d6:ba:d6:
d0:51:63:06:8f:f1:f9:64:79:7a:6a:1f:30:83:fe:
72:53:d2:a9:5d:9e:95:c9:5e:cd:55:53:02:e4:3c:
8c:0e:8b:67:82:98:37:1d:c3:51:e9:d8:80:6e:30:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:E4:26:8C:94:70:FA:C8:3D:23:71:46:10:30:F0:FF:CC:46:45
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b9:61:a2:3e:4c:9a:9f:5c:19:ea:0c:a3:3d:2d:86:87:fe:
48:03:69:51:9f:16:23:ee:84:a3:35:43:2c:62:2c:d1:ee:18:
16:98:45:25:37:1d:74:52:9f:be:f0:9c:70:57:6f:78:87:81:
6f:86:47:46:c3:29:41:db:ee:fa:57:11:38:3c:db:ce:41:e0:
5b:cf:9f:12:87:e0:2d:70:4f:87:a6:08:5d:c3:9f:6e:06:87:
5e:a5:34:b0:6e:22:8f:5f:81:ea:d8:45:71:f5:da:7d:f6:12:
61:f6:a3:a0:3d:34:27:55:e2:11:2d:90:c1:5a:5b:1e:be:d5:
64:d2:15:0d:04:6c:1c:5b:02:2e:e8:51:27:1f:25:03:64:b8:
41:ac:d8:28:9f:51:83:2c:4c:2d:91:6f:27:31:3c:11:26:60:
b4:17:cb:1f:4a:ba:34:2d:45:af:89:06:bb:9b:f7:82:c5:4c:
9d:e3:68:c5:51:5b:de:17:da:32:24:83:81:d4:56:45:8a:5f:
06:9b:61:52:06:fb:cb:e0:dc:7d:04:0a:50:ee:c4:ee:fa:9e:
40:58:89:a1:70:95:11:3d:9b:ec:32:d1:ff:9f:3c:86:fc:88:
db:a1:9a:06:e8:9c:79:3b:2b:94:78:aa:68:da:25:6d:f5:48:
54:9d:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:31 2026 by rpki-client