Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: i4SbmZ9dnh4yhu0vTepbDlXTcigp6jeEWbg9Pk1q0tU=
Subject key identifier: 13:8E:4E:6A:62:E4:1C:74:75:50:CE:15:16:6E:37:7F:FA:8C:E7:0B
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019CAC7DB2120C0229A39C24C297A0CA3A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0AF7
Signing time: Mon 02 Mar 2026 03:00:44 +0000
Manifest this update: Mon 02 Mar 2026 03:00:44 +0000
Manifest next update: Tue 03 Mar 2026 03:00:44 +0000
Files and hashes: 1: 1-w9hWaB0Y-QZTijfEO33ePRZy0.roa (hash: SgY+1sZqpVCfIbnHknsFg6v2g9JFPjHBp5HxZb7l6VM=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: dnys6wd8mj0Ux9Qh2vOS5XCg66CMPV4Y8E4CIRSlra8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b2:12:0c:02:29:a3:9c:24:c2:97:a0:ca:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Mar 2 03:00:44 2026 GMT
Not After : Mar 3 03:00:44 2026 GMT
Subject: CN=138e4e6a62e41c747550ce15166e377ffa8ce70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:78:d1:41:aa:ca:b2:f5:88:5a:64:d5:db:
60:17:1e:4c:fd:65:ec:45:fa:5f:45:b3:c6:d9:58:
a5:97:ea:4d:54:ba:dd:74:59:a8:69:22:11:a6:9e:
b7:58:3b:47:ec:24:7f:3b:a4:10:48:c5:9d:0c:33:
6f:07:2e:e2:64:48:7b:f8:5d:a6:3c:93:a3:82:3d:
09:1e:4c:49:37:0d:2f:3d:6f:ea:80:c7:4f:d4:ff:
2e:5c:89:63:d0:08:e4:9c:ce:5c:4c:45:97:9b:da:
31:08:ca:2a:a5:4e:09:42:a1:e1:e3:19:9c:dd:e2:
a4:72:bb:e7:e3:97:66:e4:94:16:e5:a2:4c:f5:e8:
1b:c0:e3:7b:1a:dc:74:89:f0:1a:1f:29:a2:89:3f:
8e:89:65:4f:96:d2:34:43:7b:77:f4:18:ba:3e:cf:
19:56:74:d0:95:74:8e:15:60:2f:2d:df:6e:e1:1d:
58:c2:92:67:f9:69:24:7c:28:23:c7:bc:1b:42:a7:
e5:a4:fd:98:b6:15:f6:6b:4b:2d:00:29:b9:36:f5:
4e:dc:46:cf:30:44:c9:83:76:83:f3:6f:2b:90:34:
fb:37:be:26:e1:f7:6d:9a:6f:40:0b:5a:62:06:7c:
03:e1:8e:60:06:a3:cf:58:0d:95:18:db:38:34:3c:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:4E:6A:62:E4:1C:74:75:50:CE:15:16:6E:37:7F:FA:8C:E7:0B
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:3a:9c:68:e5:80:49:84:72:2e:a7:36:b3:9e:a0:bf:f0:
b6:6b:88:10:c7:cf:dd:24:68:79:58:bb:eb:0f:19:f4:67:8c:
ce:c5:3d:0d:99:c7:fd:c1:dd:21:dd:18:1e:16:8d:fb:87:5f:
a9:f2:12:96:d9:19:89:b8:42:b9:99:b8:0c:3d:c3:62:20:da:
db:d2:64:67:3a:74:df:1c:94:80:05:05:df:0e:be:fc:9d:4f:
d4:99:59:39:bf:3e:e0:89:b1:6f:69:cf:52:71:8b:81:52:8c:
15:3c:70:be:10:cc:4f:b1:b3:05:a6:74:d0:0e:45:fd:93:90:
47:3c:17:44:83:ff:2f:85:29:08:6a:db:0b:92:de:fb:b1:ef:
a3:8b:96:2d:a3:64:1c:ce:62:c6:09:c1:39:91:17:e6:05:da:
69:eb:08:e7:1a:fc:df:f7:96:9d:fc:1c:d4:31:8b:f9:70:81:
d0:05:bc:b5:e8:3a:6e:ed:d4:03:fa:91:26:ff:d3:62:b7:ea:
d7:32:2a:88:b5:eb:b4:7e:c2:b6:3b:70:17:fa:65:4d:dc:31:
f2:8e:f4:0b:15:a6:8b:7d:e6:6d:ec:32:ed:b5:3a:67:d7:67:
78:c6:64:bb:97:2b:8f:05:12:f7:da:5e:16:b6:dd:04:33:14:
5c:66:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:07 2026 by rpki-client