Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: IRgOc3wTHTgLOwIdDxMk53ToCOvXNh/9pjwtcDb9YLc=
Subject key identifier: 48:C4:A4:EE:A3:0F:2C:AF:24:B7:F8:76:52:02:1A:A7:93:B5:C8:9F
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019CA9B3A95DB813C1067F5AE09F0DE4130C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 14:00:49 +0000
Manifest this update: Sun 01 Mar 2026 14:00:49 +0000
Manifest next update: Mon 02 Mar 2026 14:00:49 +0000
Files and hashes: 1: N4O6L8wZNEXMElPASpRMOUmUr7w.roa (hash: QXAq/udQzlw3nbGli8BGmWpVXE2xd5fftRn8FB6H/Dc=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: ASxwT2Fovxs/+MVh/AXCN8crIv/5RfkbGbpyinOKK0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:a9:5d:b8:13:c1:06:7f:5a:e0:9f:0d:e4:13:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Mar 1 14:00:49 2026 GMT
Not After : Mar 2 14:00:49 2026 GMT
Subject: CN=48c4a4eea30f2caf24b7f87652021aa793b5c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:56:14:d5:99:c3:5c:7c:a8:2b:00:93:4a:
d9:57:da:7e:c1:87:95:44:cd:5c:8b:f8:6a:34:ce:
8f:f0:af:fc:cf:fb:77:46:56:00:61:da:49:1d:c3:
19:5c:dd:63:94:ea:c2:23:73:d4:be:75:42:74:90:
65:1c:e9:a5:86:aa:16:10:0f:a9:3a:1a:d3:d8:f2:
95:a6:ba:a2:24:d3:7f:ea:80:e2:bb:a6:a9:38:86:
52:ad:28:5c:86:6e:9b:09:60:b9:e6:26:d3:32:60:
e4:ed:9f:ae:e1:47:dd:18:fa:60:7d:8d:c9:ba:63:
ac:cd:ca:38:ea:44:b9:aa:1d:83:c1:87:a0:0d:92:
a6:65:ea:fb:76:63:1c:bc:6b:85:f6:ac:81:32:d9:
72:49:3a:34:a1:9b:ca:4b:54:42:63:f5:70:b1:f6:
f2:74:75:ab:1f:c4:d9:c7:0b:3a:fa:5c:8e:60:e5:
9e:0b:50:8b:cb:1b:36:d4:ff:4e:33:92:7c:c8:24:
20:e4:ad:21:20:e8:54:e3:62:3e:cb:6a:08:ed:72:
3c:00:ed:23:27:30:a1:7e:46:38:bb:ed:e4:27:e9:
67:36:84:28:4d:11:13:5d:3b:4c:41:dc:aa:bb:18:
00:86:ae:10:82:8b:97:0c:12:f1:51:e4:62:5d:f4:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:A4:EE:A3:0F:2C:AF:24:B7:F8:76:52:02:1A:A7:93:B5:C8:9F
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d1:65:44:c5:01:e7:2b:87:84:f2:4a:76:d9:02:1a:6a:09:
02:d7:ec:db:ae:77:1a:b6:12:19:84:a7:33:05:68:b3:f2:41:
d5:2e:05:05:06:93:6d:00:39:85:5f:2c:d7:3e:e1:99:d6:8c:
40:49:64:45:2c:aa:07:f8:61:ec:54:6f:00:fe:c8:3f:79:19:
82:09:e6:43:7b:36:17:f6:10:54:20:19:93:ed:db:1f:17:41:
3f:9b:c7:09:4c:68:0f:b5:15:39:67:e5:bd:b5:70:a2:a2:d2:
cd:57:d0:0d:80:09:fd:83:78:94:13:b3:36:e2:10:6e:09:b9:
ef:a1:6f:5e:a2:6f:c1:ba:22:86:3f:fb:b4:52:18:04:19:77:
50:40:4a:e7:4e:a5:31:8e:bd:fd:f9:b7:c5:75:62:ed:1b:43:
5c:7c:d2:86:8b:34:6c:e2:8f:5d:00:2a:82:bb:5c:41:3d:7e:
a4:2c:42:ac:d9:c0:f0:5e:a4:fb:ec:40:9b:e1:41:7b:fb:50:
b5:2e:94:c4:db:45:1d:91:f7:4d:44:0a:2e:44:18:b4:ba:43:
26:94:41:7e:5a:af:f8:d7:a1:8a:6f:20:4b:16:c5:63:64:9c:
f4:bb:44:12:da:ac:e5:6b:46:0a:0e:a4:99:fa:5b:93:40:88:
ad:eb:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:35 2026 by rpki-client