Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: dQbu5K52NimtACKL4rJLUg6PkmcEGlU4ooK9kDQ8WuY=
Subject key identifier: 55:37:F0:FB:1E:C5:CB:ED:84:F1:DF:FA:87:F7:06:2A:FC:3D:C3:40
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019CACB55C930A3DE942E45EB3193D67EAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 052F
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: 1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa (hash: V7/89jWIsWgE5VYj0PiaT+PidNKfZz1SVPLmNchZNk8=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: zb3Xvq4diu8bFAkeKNCx3VrVWlQN4PrxHaycBYVJsPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5c:93:0a:3d:e9:42:e4:5e:b3:19:3d:67:ea:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=5537f0fb1ec5cbed84f1dffa87f7062afc3dc340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:86:06:38:3e:97:3b:e6:cd:2d:82:9d:e9:
fa:89:8d:54:2c:e2:d9:ce:28:06:c6:e3:ee:97:06:
93:31:66:0f:56:60:cc:9f:6c:24:4b:23:68:cc:98:
84:99:00:4d:71:cf:14:34:ff:36:30:ec:9d:93:b8:
87:b1:35:65:6f:cb:12:ca:32:55:59:3f:11:86:81:
3d:24:f1:3b:35:b7:7a:b0:78:8f:5c:8a:cc:ac:8c:
cb:c0:2f:ac:97:19:b6:fd:4b:12:ef:da:90:4c:8b:
97:b5:bf:5a:4a:5c:19:87:59:3f:f5:1d:66:0a:f3:
2f:04:e1:58:5a:45:0c:e2:40:a8:4e:84:9e:08:d9:
8d:44:85:36:f0:62:e2:40:04:89:bf:8f:cb:f3:09:
e5:1b:55:13:62:a6:06:10:76:cd:6e:a6:af:b1:8e:
4b:41:8d:98:46:30:36:14:cc:aa:de:c3:9d:b9:aa:
43:74:a7:e7:3d:f5:83:d2:3a:6a:a9:8f:a3:2e:39:
8e:4a:7f:f7:8f:ef:ea:52:79:21:bb:c2:50:6a:ce:
6a:98:8c:e1:1f:3e:80:fa:b7:3f:a0:90:5b:df:5d:
b8:d8:36:d5:b9:b4:60:89:ce:15:7f:78:ed:f7:ad:
71:67:c9:95:ef:99:a0:6e:f4:9b:2f:06:1b:32:e8:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:F0:FB:1E:C5:CB:ED:84:F1:DF:FA:87:F7:06:2A:FC:3D:C3:40
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c6:aa:46:94:1f:6b:de:ca:ad:5f:bf:1a:73:09:84:cf:4c:
7e:f1:23:9c:da:4e:e6:c6:48:48:7e:06:eb:b3:83:bf:5f:a0:
44:bc:a2:b5:f3:a8:d1:7b:b5:1c:de:42:fd:79:fb:9c:d7:53:
a7:0b:16:9a:17:5f:3a:de:a6:63:2d:ca:0c:a0:7f:f2:58:b6:
e2:2b:99:eb:aa:3d:30:e6:e2:52:e5:98:9f:9e:b9:4c:19:07:
8c:e9:5e:54:df:fc:28:0e:90:9a:10:b6:7d:3d:2f:25:dd:a6:
2c:0c:79:34:d7:83:32:85:68:05:bf:1f:30:e5:75:7f:5f:7f:
6f:b4:fa:2b:81:bc:2a:0e:ef:80:7b:cb:83:e0:2a:4c:d0:8c:
c7:01:64:27:85:cd:fe:7f:2d:08:bd:69:75:5f:0d:64:f4:3a:
18:98:33:b3:81:3e:cf:8c:0d:09:cf:3c:11:0f:86:e8:f0:ce:
6c:e9:e7:85:d9:f6:b7:43:a6:6a:28:ef:61:d9:ac:fd:44:b8:
2b:07:cd:1a:03:cb:de:21:90:36:cc:8e:da:8a:19:81:06:12:
b4:ba:31:de:f3:d6:8d:8f:cd:a2:dc:7e:09:7c:12:64:6a:33:
f7:b2:aa:80:33:cc:8d:ac:d7:7e:68:14:ee:8b:64:73:98:9c:
b7:91:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:35 2026 by rpki-client