Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: INHqj1eAYNqkQLpZ4Ge/FtRdR8ppVle8sRc1+YGKM7Q=
Subject key identifier: 27:A8:D2:BC:E1:04:6C:33:34:51:4E:92:4D:56:F4:43:BF:62:38:4A
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019CAC10147F45AD7EA4EC397287CD83BA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa (hash: yW7YhSTGjTCd5hdSGTzNJGlqpUw27PcefgpccczhLt0=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: n2jYyFXsHyoyxTgkE5m8iQSXoB9virQR3NxoJXJ0+KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:14:7f:45:ad:7e:a4:ec:39:72:87:cd:83:ba:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=27a8d2bce1046c3334514e924d56f443bf62384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:74:b5:82:21:a3:54:fe:cb:c5:1c:51:b9:
b6:8c:2a:13:53:7b:03:e4:7b:d7:70:47:43:bd:3f:
02:c6:c9:7c:d9:25:62:25:99:ee:09:80:91:9b:ac:
65:ee:00:17:6f:77:f2:ad:b7:03:b7:c1:ba:b9:d2:
9c:e7:6d:84:79:fd:5b:46:76:a9:cb:79:d8:11:f4:
b0:74:01:f0:4f:f9:7c:7e:ee:e2:6f:23:4a:f1:2e:
e7:48:6f:63:32:e5:38:1c:77:25:2e:05:b5:2b:cb:
45:5f:7a:12:60:b6:27:81:58:26:84:bf:93:a8:cb:
ef:e3:ab:08:54:9f:d8:56:5a:92:e3:b8:22:9b:cf:
aa:56:5a:74:45:d6:53:ee:23:24:ca:46:5b:a2:70:
3c:5a:87:75:08:d0:36:1e:63:1d:78:0a:37:f2:0c:
20:7c:45:99:ac:e9:60:5e:3a:2a:06:73:b1:8d:53:
ab:4f:4a:ba:0e:d6:91:5b:cd:4f:54:e1:16:ed:1a:
b0:1a:9c:1b:73:84:b5:32:a0:28:10:96:e1:76:6a:
f0:4b:b0:1c:28:d9:4b:ff:5c:ac:61:35:d1:4c:66:
04:b3:1d:ae:63:b6:da:8c:1a:87:79:a0:df:c8:55:
bb:f0:2a:1b:bb:35:11:21:c6:77:36:69:24:f3:78:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A8:D2:BC:E1:04:6C:33:34:51:4E:92:4D:56:F4:43:BF:62:38:4A
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:81:49:f6:5f:20:15:b8:86:3a:1c:c4:5b:0f:d8:a1:5c:bf:
65:b7:97:41:05:6f:53:5b:db:88:f4:d3:f9:cc:63:4b:c0:43:
91:90:a1:49:01:c6:73:95:60:b3:86:b9:18:ee:62:69:8f:7a:
5b:23:fe:ab:f3:90:7e:a1:ff:46:b0:8d:74:ac:63:85:9f:8d:
47:28:06:fc:1a:50:80:d6:09:13:f6:e6:25:87:79:0a:34:c7:
40:69:55:7e:ce:7f:17:e8:96:35:da:b5:02:d9:7d:9c:22:39:
3d:4d:cc:cc:85:2a:60:16:fd:b0:e6:e9:69:dc:b9:ac:16:6a:
3b:c8:e1:bf:d3:c7:2d:0f:dc:45:d8:e4:a9:82:42:25:c9:9e:
e8:cc:45:25:46:92:43:74:1a:7d:12:ae:fa:a4:42:b6:62:4a:
69:9c:c4:85:29:47:9a:6a:be:8c:9a:97:94:36:08:ed:a0:d2:
e4:9f:8a:1e:ec:ed:d2:5c:96:49:72:cc:a9:fc:57:ee:70:16:
0f:b8:b4:04:de:75:70:99:1a:c4:69:e2:41:74:01:24:0d:93:
23:fb:eb:cf:9b:9b:f3:ad:41:5e:14:5d:b9:ec:ce:13:0b:2b:
ed:64:15:ac:32:a5:e9:24:73:d8:ff:e2:f8:05:5e:a0:cd:e9:
f4:bb:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:32 2026 by rpki-client