Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: bodkFYtM/GKiimAvOBPLEz9h+xADZFR4wv1cVgp/qdM=
Subject key identifier: C9:C8:99:57:61:72:D8:90:B0:2B:69:EA:D3:13:CD:8B:99:86:27:A9
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019CAC46E985521A94822E4D4155286216C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: wuy1hEISOsKGQ6n4d6HzRGJO9FtvPn+jQebc3NfbzOg=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e9:85:52:1a:94:82:2e:4d:41:55:28:62:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=c9c899576172d890b02b69ead313cd8b998627a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:ab:b3:24:2b:6f:ad:43:20:e9:ef:b7:9e:
f8:d0:d9:0f:f3:bc:a0:c0:7f:2e:9e:62:28:8b:12:
f3:4b:80:bc:1b:97:33:ae:0a:2a:0b:fb:8e:af:24:
de:f9:07:60:64:47:df:3e:76:84:43:7c:40:51:7f:
84:46:d9:58:66:9d:ca:8e:e7:4f:a8:2e:dc:53:92:
b5:45:ec:6c:88:10:bb:b5:d2:d8:07:06:01:91:4f:
13:b5:1d:5d:2e:5e:ad:14:22:d1:13:62:5c:03:0e:
63:81:99:94:bd:a9:9b:e6:5d:24:f5:3c:8b:f8:b9:
2b:14:f6:e9:66:16:4c:20:2d:17:5a:a3:73:1e:64:
44:c7:10:24:d0:36:f1:5b:bf:38:d4:17:16:85:a3:
63:38:54:c9:51:3d:50:fc:0c:55:79:ba:29:7e:03:
22:76:6c:f9:14:75:cd:8a:88:0e:d5:2f:d7:7c:e1:
4c:a7:9a:ae:30:36:1d:0a:37:bb:f3:58:7c:4b:51:
7b:93:26:da:22:30:b5:df:88:34:64:de:61:2c:79:
77:30:dc:7d:28:30:64:5a:2a:b1:9a:24:27:88:7f:
0c:99:3b:c8:6b:f5:2a:65:a4:32:4d:ad:6f:a9:f4:
38:4d:8c:2c:6f:f4:b3:00:36:8a:93:e1:44:8e:ed:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:99:57:61:72:D8:90:B0:2B:69:EA:D3:13:CD:8B:99:86:27:A9
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:b7:10:90:a6:b8:55:ce:e6:da:f8:c0:4d:ed:d2:85:1a:
49:88:d6:e2:b8:70:5a:e7:51:b6:95:09:09:b3:e9:0d:be:1f:
57:39:ab:d8:a8:c9:da:7f:ec:82:83:71:7d:80:41:2f:db:b3:
eb:3f:4b:14:5d:fa:47:f6:0d:4d:62:51:a3:c9:47:3b:84:32:
e1:db:a7:6c:7a:ed:0a:60:59:f7:95:0b:7d:7c:43:af:51:4f:
11:12:4d:64:52:43:30:97:4e:ad:e8:0a:cf:37:b6:bc:cd:19:
24:cb:65:3f:8d:25:4d:4f:06:d2:e4:29:c2:82:ef:3d:60:fc:
01:fc:a6:cc:70:1f:a6:2c:3c:78:fb:c2:a1:ba:68:b9:06:1a:
f3:2e:79:e8:54:e7:94:56:85:89:43:9c:da:ea:c4:4b:d0:df:
04:71:96:8e:4d:23:de:af:82:bd:59:1a:98:a4:74:e1:ab:8c:
d6:42:8e:ab:16:93:3e:7d:eb:7e:b1:9d:f1:86:00:3b:41:26:
a9:f8:3a:08:1e:04:9a:1e:52:0c:7a:95:fc:ce:6a:4c:b3:99:
b2:82:1f:9d:bc:ac:01:cf:a8:c2:5c:b7:55:26:2a:34:b4:88:
ce:ff:ec:66:b3:89:61:e2:d8:87:b5:70:b9:13:9d:15:13:5d:
20:1d:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:39 2026 by rpki-client