Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: YJDzDKuSsUtCGRLEwYjYSHmz9sjlsHbeoFx7xDFicM4=
Subject key identifier: B6:40:A1:AD:B8:69:BC:1F:07:ED:90:8D:47:A3:D7:56:39:D8:5A:13
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019CAD22D142BF0B0383CF29AB32CBB0BEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0ED6
Signing time: Mon 02 Mar 2026 06:01:06 +0000
Manifest this update: Mon 02 Mar 2026 06:01:06 +0000
Manifest next update: Tue 03 Mar 2026 06:01:06 +0000
Files and hashes: 1: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (hash: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: U5p8/CKTUuLjDAxLdQTDODmxjghmdS8Lgagk4cvjBaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d1:42:bf:0b:03:83:cf:29:ab:32:cb:b0:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Mar 2 06:01:06 2026 GMT
Not After : Mar 3 06:01:06 2026 GMT
Subject: CN=b640a1adb869bc1f07ed908d47a3d75639d85a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:f9:5c:dd:28:14:a9:ce:f6:ea:36:4f:f7:
33:b4:bd:68:6c:e2:1a:14:c4:56:34:c1:73:f9:34:
c4:2e:31:d6:49:d2:e8:bd:e0:50:13:eb:4e:4a:82:
a0:03:ab:3f:31:e9:2e:d7:f5:22:fb:98:ac:2a:1e:
45:25:e7:0f:fa:f2:74:07:db:43:67:cb:fd:c4:f3:
45:be:63:32:19:ab:97:80:02:9a:51:88:49:00:c3:
e9:d4:cc:79:ac:0e:11:2a:76:02:27:e5:6f:d1:f1:
36:07:ad:00:65:41:d1:f3:c1:bf:df:4a:00:60:3d:
4b:b4:bc:e0:08:bf:20:a7:b2:60:a6:9f:c5:0d:c0:
c5:f5:ea:ff:fb:a0:a2:98:66:3d:31:c7:b4:db:2f:
6f:bc:f4:0c:4d:a8:5d:42:2e:9d:e4:da:25:76:bd:
ff:d1:79:f5:2f:9e:3d:97:1b:b7:44:f5:56:2f:cc:
25:f8:29:7d:61:24:d5:aa:d6:6a:02:7e:99:52:c2:
c5:2e:92:69:f3:98:ad:24:3f:84:60:da:46:82:ab:
b4:d9:ea:d0:60:b3:eb:c6:ff:2c:18:15:28:ad:68:
f4:e8:3d:fa:b8:09:c6:55:e4:de:8d:8c:bc:74:22:
35:01:ef:95:21:d8:63:b9:9d:ab:08:0e:dc:4c:7a:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:A1:AD:B8:69:BC:1F:07:ED:90:8D:47:A3:D7:56:39:D8:5A:13
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ec:c4:df:73:10:ea:76:1a:af:81:c5:ab:b2:6f:b1:f7:8d:
8d:5c:17:e8:40:f7:73:11:e7:0a:c0:7b:4d:32:f9:00:db:b3:
e8:51:c4:29:51:da:7d:ef:3e:17:41:0d:24:02:ce:d2:1d:15:
79:96:3c:8b:83:9a:6c:f5:7d:7a:01:1d:92:e7:b2:3d:29:99:
5d:74:8a:ed:a8:25:7c:03:0d:24:38:d7:9d:e7:89:25:05:dd:
56:db:36:1a:b9:8f:17:91:54:49:99:7e:a9:52:01:bd:63:0d:
92:41:5e:4b:70:94:9c:da:b6:b2:31:f7:36:0b:67:b2:ac:56:
9e:2e:3f:5f:16:67:09:b1:b6:7d:38:3e:3b:ed:9c:f7:1b:ed:
5b:ca:e2:2e:e8:c4:17:18:73:df:d8:7a:12:34:f6:f6:c1:e7:
5e:7b:b8:75:31:59:3c:1a:ca:09:b1:63:45:f6:7b:43:4f:97:
5a:12:b2:b5:89:9e:25:b5:54:ae:1a:44:73:d9:b3:a8:f9:12:
64:25:65:31:42:65:13:b3:0f:5d:0b:89:14:86:99:99:90:4b:
9b:39:32:a3:75:d5:fe:67:11:82:fb:e6:a2:bb:47:5a:a7:6d:
bb:84:f7:fd:9f:c7:03:0d:07:4a:96:29:e9:81:fb:e8:31:5a:
a3:2f:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:07 2026 by rpki-client