Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: KUEPKyWHKm1FkFo7xYerSrxekOTrOmXp4bF/nFab6fs=
Subject key identifier: 62:F0:06:8D:55:08:26:9B:25:E5:D4:59:9C:47:1E:B2:ED:B6:8F:22
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 019CAA216F1A8BD5CF8F4BCF0B86F187EF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 131E
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: yI+R3JcN25gzdBFiipUnTTFYh8844hCcdetCX1oZHLU=)
2: yH0aijgaGO1sOyv5Jg6D95KfZ58.roa (hash: fSdLoz8/XDItScytuLveTLBHygsoLoVUMSB0Zg60LLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6f:1a:8b:d5:cf:8f:4b:cf:0b:86:f1:87:ef:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=62f0068d5508269b25e5d4599c471eb2edb68f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:5a:65:b2:db:39:a6:17:25:c3:6b:f5:06:
a3:bd:b2:a9:64:ec:9e:ce:28:a6:7b:00:a4:92:12:
cf:d2:62:1b:5a:a0:1f:d8:7f:e8:6b:9f:24:ad:9c:
ba:35:b9:fc:c0:48:d8:82:29:91:0e:0c:4e:61:ec:
8d:ad:92:c6:6c:7c:00:02:ae:6c:6b:16:b0:48:30:
a7:47:31:c9:38:a7:54:ff:29:5b:a0:af:45:d7:12:
85:ba:fd:c8:a0:69:67:45:9a:6c:ec:65:ba:96:67:
61:55:49:19:0a:89:8b:3e:30:20:71:c5:41:c7:bc:
c5:1a:77:70:2b:f9:b3:a9:82:93:5f:18:4d:13:97:
15:70:f0:f7:12:40:75:02:3c:20:9e:4b:dd:ed:52:
13:6e:97:0b:37:ba:a6:fc:69:b4:5b:8c:64:3c:3d:
e1:77:40:31:8b:eb:3b:e2:1d:ea:6d:b5:fe:58:21:
4a:6b:b0:da:29:21:a2:75:78:bf:9f:74:32:cc:ba:
3f:41:83:68:80:72:d0:d7:15:91:53:01:d4:04:f5:
cb:4f:7b:07:88:e4:fb:ef:fb:61:1a:a0:c6:6c:30:
d0:39:dc:37:86:47:15:e0:6d:5a:30:7f:3b:30:a7:
7d:a5:fc:6b:dd:13:5c:49:7a:da:8d:2a:aa:c7:78:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:06:8D:55:08:26:9B:25:E5:D4:59:9C:47:1E:B2:ED:B6:8F:22
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8d:47:09:b2:b6:74:d8:46:d7:f8:81:99:b4:47:87:86:82:
54:84:51:32:32:ba:43:8e:3a:40:8a:03:af:fb:7c:b4:a4:ce:
36:16:75:02:c9:98:03:ec:94:31:8e:cc:a3:23:b7:36:8f:f1:
29:fb:eb:72:74:fb:3b:cd:4b:e7:9a:44:b0:2c:da:dc:c1:27:
d9:43:56:f8:11:b7:2a:83:2f:26:de:7c:08:2c:48:39:23:8f:
0b:33:a1:a6:bf:f9:a2:86:aa:67:95:2e:70:c7:1a:94:1c:cc:
43:1d:92:f2:c1:fe:31:9f:c5:26:fb:c5:7b:3b:ba:c6:4e:46:
c0:17:5c:70:b6:a3:fa:1b:02:c7:09:58:08:12:00:60:9a:83:
70:20:95:7e:1c:04:0b:f0:63:b3:9b:77:64:69:7b:98:a2:24:
01:34:e4:76:d4:6c:0e:20:82:25:1c:2a:92:32:56:e7:16:09:
0d:77:3e:73:b0:c2:49:92:2e:01:9b:46:96:98:8a:dc:2e:8d:
f4:29:24:19:29:15:03:f8:8a:80:03:94:86:47:a8:9c:ce:26:
6f:d2:ea:49:1b:79:1f:56:59:25:11:4a:43:f3:a3:94:cb:3d:
44:b1:80:71:c8:3c:08:80:92:94:08:d4:fb:70:35:f0:dc:83:
31:16:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:45 2026 by rpki-client