Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: KjqFFP9a8RqjbpDp2RN57xZdLCPywUpQmZic/nvBlwI=
Subject key identifier: 07:78:DA:74:EF:BB:99:35:9F:AF:E4:3A:A5:76:05:80:FA:61:A4:0A
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 019CA9EB0FC09AE65CC037D0C5C77873E2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0C5B
Signing time: Sun 01 Mar 2026 15:01:20 +0000
Manifest this update: Sun 01 Mar 2026 15:01:20 +0000
Manifest next update: Mon 02 Mar 2026 15:01:20 +0000
Files and hashes: 1: 2XRNzdBMCTGrxZzPMC45UJSE_XY.roa (hash: MALdcoNe429xozLLjWrtiy10AbtWOLY2faCRujnB7oQ=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: lzDZzZZLVKdlpn6jsMH+Fg86nYAZ9djPqTHpHuqyNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0f:c0:9a:e6:5c:c0:37:d0:c5:c7:78:73:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Mar 1 15:01:20 2026 GMT
Not After : Mar 2 15:01:20 2026 GMT
Subject: CN=0778da74efbb99359fafe43aa5760580fa61a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:06:37:1f:ee:25:2e:e1:c5:4d:62:68:b5:
79:0d:f8:ff:4c:fc:56:14:77:df:95:26:8d:c0:e5:
15:c6:16:c6:1b:a9:28:95:dd:ce:91:24:16:1a:a1:
d2:53:97:0c:cc:b1:4b:34:f6:31:0a:59:2e:49:b0:
38:6e:41:07:ff:ff:f9:ae:11:b2:b3:b6:67:b9:56:
90:44:5e:15:de:7d:9c:a6:bf:2a:c4:b6:a8:51:02:
30:f5:39:e1:37:16:7e:60:ab:1e:02:76:f1:97:81:
a1:e5:4e:7b:f3:61:d1:d3:b2:4e:0f:23:ab:b9:f5:
4a:50:30:8e:cf:0e:98:88:00:68:62:c8:34:8e:e8:
e7:ae:2a:10:c2:62:73:aa:f9:8a:7c:79:92:74:bb:
3c:2a:a5:f9:a7:69:32:99:f1:a4:7b:d7:cd:f3:50:
33:e0:78:06:2f:a3:01:c7:4c:4b:e7:37:97:8a:ac:
11:72:7d:8f:1a:7b:f3:74:e7:a1:c5:10:61:82:ff:
39:e1:f5:41:04:da:59:26:b4:7f:de:cd:76:5b:36:
4f:64:ad:e9:5a:c2:2d:00:7f:1e:67:7c:dc:c8:7f:
5d:79:a6:a9:cb:eb:99:b3:d3:16:0a:09:e1:d3:cf:
fb:98:52:1b:d0:a3:21:d8:39:f4:63:9c:d6:a5:64:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:78:DA:74:EF:BB:99:35:9F:AF:E4:3A:A5:76:05:80:FA:61:A4:0A
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ac:45:fa:b3:71:10:c7:a7:f7:a7:1a:39:ae:5f:27:9c:5e:
a1:a3:ac:81:43:34:0e:85:e1:0c:d9:6f:8b:88:86:90:5d:51:
a1:eb:39:df:c6:ba:17:c5:b5:91:32:b2:86:79:93:c8:13:8c:
b8:bf:72:6d:bc:d0:80:87:e2:53:f7:5e:f9:bb:25:85:17:75:
6e:79:52:d5:81:18:c4:e9:cf:96:79:2a:be:83:6b:f6:d1:69:
8e:b5:cc:b0:ad:64:58:a7:ec:16:36:56:4a:aa:8e:5e:8d:5e:
30:10:72:95:c0:89:54:93:73:e7:dc:dd:72:0b:e9:49:c1:80:
82:97:57:ed:2d:7a:52:cd:a3:85:b5:c3:af:99:ff:d2:78:10:
83:b9:7d:48:b5:b0:6d:22:e8:22:f8:12:84:ce:46:33:ab:74:
eb:d2:a1:50:95:28:79:94:a9:7c:27:cc:44:95:0a:20:12:ae:
f8:43:88:3a:58:53:29:57:74:fb:0a:cc:9e:49:a2:db:8c:17:
a8:7c:b7:ef:f6:f0:fd:12:e4:c2:26:fb:7e:07:72:2c:d6:69:
25:f7:76:ea:9f:f7:e1:69:54:0d:6c:94:29:05:ce:62:35:8d:
71:59:38:8d:3b:d4:5c:86:b4:31:54:c9:dd:44:c2:2c:14:58:
41:4e:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:18 2026 by rpki-client