Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: TvAZharJ2QybPWi7OrUW8LDPsuNxZS2+UJiFVjitkic=
Subject key identifier: E4:40:A6:3B:3A:D3:16:FF:0D:73:25:70:33:8C:5A:0A:43:06:A7:F1
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 019CADFEAFC30DB2672443014B44DD704BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 09CE
Signing time: Mon 02 Mar 2026 10:01:15 +0000
Manifest this update: Mon 02 Mar 2026 10:01:15 +0000
Manifest next update: Tue 03 Mar 2026 10:01:15 +0000
Files and hashes: 1: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: VLtyKvdZQZBxmI0+FkCOboELSyTDwMvCUQ9fcFKU5LA=)
2: q45NW9ILWXRj7KEDEoB0elTRYN0.roa (hash: nnMWIhcjMTz5ErkFaNjKVileFt+Q5rGZenkw7duVHz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:af:c3:0d:b2:67:24:43:01:4b:44:dd:70:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Mar 2 10:01:15 2026 GMT
Not After : Mar 3 10:01:15 2026 GMT
Subject: CN=e440a63b3ad316ff0d732570338c5a0a4306a7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:fd:0f:c3:53:9c:62:58:e1:b5:ba:6e:0c:
ff:38:c3:43:f4:71:69:be:63:d0:33:82:b8:ab:6e:
20:6c:f7:be:2e:2e:18:6c:ea:35:74:c6:f6:04:6f:
4a:73:0b:ee:5b:7f:ff:7f:01:05:80:a1:20:5b:46:
e1:4d:b5:d5:99:2b:96:6b:1e:4c:b5:09:0f:d4:bd:
2f:8c:c2:78:c0:30:42:c3:25:36:b9:73:f8:79:48:
cd:91:c8:58:90:72:0f:99:f2:de:ab:98:b6:e3:3b:
fa:a4:5e:b5:82:9c:7a:dd:f9:fa:89:fe:28:6a:b3:
61:19:45:ac:c3:a4:eb:5f:be:50:cc:0e:1b:54:67:
af:2d:cb:2f:4b:5a:35:ec:bf:4b:63:10:e8:57:5a:
38:4c:6c:b1:2b:c0:7b:f7:dc:dd:43:77:97:e8:73:
7b:2e:88:f7:48:4e:bd:4f:99:b0:a0:10:e0:97:39:
79:f3:2e:30:e6:09:e0:13:ed:e6:b7:8a:57:2b:1f:
54:93:ae:47:de:46:0a:71:01:c3:e2:cc:00:76:07:
43:df:5e:7b:26:49:36:9e:24:a2:e3:20:d0:41:e7:
73:85:78:84:15:f3:f9:63:fd:7d:57:bc:5d:5e:b6:
cd:0e:9a:a2:44:1f:a9:75:35:55:a4:b6:c6:f6:35:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:A6:3B:3A:D3:16:FF:0D:73:25:70:33:8C:5A:0A:43:06:A7:F1
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a4:79:e7:a6:d2:ef:19:04:eb:ca:d3:f2:0b:7c:ea:65:92:
48:c0:8a:5b:2a:9e:71:e0:d2:e9:49:15:90:58:67:85:70:3b:
48:3c:71:83:b8:77:d4:2d:d7:06:40:a6:28:a9:e6:fb:88:56:
9e:ed:b7:d0:01:54:42:67:ce:51:54:04:fe:0c:67:57:1d:bb:
00:1d:ba:6e:9f:72:0f:5c:b6:67:99:83:d5:6e:de:84:df:01:
f4:3a:4f:5c:30:b0:4d:46:f0:f1:12:02:65:56:ef:0d:e8:c5:
f4:09:24:91:a2:b9:60:e1:bb:a5:51:c3:34:fc:19:70:d4:fd:
06:37:23:be:be:56:88:e1:35:f8:e1:8c:75:e3:8b:95:1a:63:
28:37:c9:70:02:60:29:da:6a:01:b9:58:b6:e3:7a:20:9b:b7:
9f:2b:cf:f5:a9:dd:6a:db:57:06:7d:ec:ae:81:b4:0e:3e:0d:
e2:af:74:5f:ec:65:4d:7a:b4:e9:0e:b6:83:29:53:08:2e:4c:
7c:d8:e3:1a:81:fb:63:4a:dc:b2:88:0f:f7:a1:f6:0a:72:62:
79:12:9d:98:82:7c:2c:7b:96:4e:2f:80:86:7a:08:f8:7d:40:
98:3d:ba:22:d7:1b:ec:a6:0e:aa:0d:8c:64:c1:4f:cc:10:ac:
85:5c:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:04 2026 by rpki-client