Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json)
Hash identifier: XTzMhI4KPb4PNXswIXlWDU03d315PsZOtS1db1IYFbc=
Subject key identifier: 20:A3:E7:38:D8:FF:ED:B0:26:E6:B9:76:97:8D:5A:5D:DF:DF:71:42
Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Certificate serial: 019CACB517E6F80E4128D22451D14D2917BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 04:01:15 +0000
Manifest this update: Mon 02 Mar 2026 04:01:15 +0000
Manifest next update: Tue 03 Mar 2026 04:01:15 +0000
Files and hashes: 1: GF0MLu9rUCMKqqUs-tw36g9XAm8.roa (hash: CGs8wTMFQfIv83nixyW2lwUi4DwWo83SvcVxQaC6KDo=)
2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: J9KPvyYySrXm6e2qQVY7KJ3Ozwz9KcJU5IQjt7/Fjek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:17:e6:f8:0e:41:28:d2:24:51:d1:4d:29:17:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Validity
Not Before: Mar 2 04:01:15 2026 GMT
Not After : Mar 3 04:01:15 2026 GMT
Subject: CN=20a3e738d8ffedb026e6b976978d5a5ddfdf7142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:a2:c1:26:d6:63:b5:34:a5:20:1c:aa:e1:
9d:68:d8:2c:c7:e4:1f:54:0c:b1:1b:bd:79:03:51:
b3:76:da:49:f5:92:51:2c:20:e9:cb:e4:62:1c:a6:
67:15:9b:fd:3a:45:99:bf:1a:a9:56:05:f1:b1:f1:
b2:0d:01:c2:99:4c:8c:56:3b:56:63:59:3b:39:20:
92:9c:c3:e7:ca:8d:3d:90:77:0f:c7:fe:00:e6:50:
80:0d:b5:f1:6e:f9:c4:ef:47:5d:b2:bc:47:0c:22:
11:65:b8:7f:5d:d6:54:a2:a9:58:dc:b8:fd:08:40:
5a:3d:23:db:c8:91:13:fb:bc:96:31:3e:bf:3c:69:
75:80:da:e3:0a:1e:46:b2:99:9d:49:6a:4d:12:75:
e9:2d:59:1c:96:d4:ec:da:53:cd:9b:8e:ba:40:56:
9a:7a:7c:8f:ed:ce:1f:f3:13:32:6b:46:4c:6a:2c:
ab:84:7c:5b:04:e7:a0:85:d9:d3:7a:9c:c1:83:16:
32:75:57:36:4d:33:57:1a:ee:af:71:6d:48:0f:15:
1f:75:a6:a7:c6:98:77:61:27:6a:d0:b9:0a:d3:ee:
88:da:01:dd:fc:21:1c:e0:cf:61:1b:82:0e:13:93:
05:63:91:14:e9:85:e8:ed:e6:70:61:77:8d:af:eb:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:E7:38:D8:FF:ED:B0:26:E6:B9:76:97:8D:5A:5D:DF:DF:71:42
X509v3 Authority Key Identifier:
keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5d:1e:f5:a1:67:e7:c3:89:e5:03:4e:ee:82:1f:97:20:cd:
0e:77:b2:74:38:43:28:a8:7e:4d:eb:c5:ae:9b:c2:f3:d3:14:
b6:3e:14:ee:dd:e1:83:94:e8:11:d3:f8:41:15:91:07:11:57:
dd:f3:6c:0e:c2:b7:c0:c9:8b:c7:ba:f4:0a:fc:47:f3:50:b2:
55:a3:94:49:f8:85:48:aa:75:19:03:d7:18:0b:13:82:e2:5b:
3e:93:f5:d5:ee:b7:27:b5:3c:fb:94:a1:7d:ac:dd:16:5b:a2:
14:83:0b:d5:08:6d:0b:f3:72:99:7f:c8:92:2b:b9:11:bf:67:
f3:36:d5:65:1f:a7:f5:30:aa:a4:e1:f0:76:16:7f:8b:65:e4:
4c:76:4c:4e:52:df:23:54:33:23:e3:75:80:b8:8f:ee:68:08:
52:85:e8:b3:48:eb:f3:fb:53:67:03:21:d5:5d:a0:cc:48:6b:
a8:04:0d:2e:76:3d:a2:3b:6c:39:50:b1:82:61:ae:12:6b:1a:
a6:06:a6:58:2b:10:64:21:cc:0e:09:c4:4d:45:d4:ec:4e:79:
b7:c7:71:39:a3:a9:e8:f5:37:5c:f0:8e:c7:10:3e:58:d9:11:
b3:22:7a:4f:c6:74:af:d8:5d:97:38:f7:47:75:d1:07:9c:2f:
8b:16:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:40 2026 by rpki-client