Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
File: nzbQijzYpC9Goslt_XLtjO4nlHc.mft (raw, json)
Hash identifier: Rw4Z7VwvS+OxZFTxDtVkjY4AGb0bo64eDXDH49Ph3+o=
Subject key identifier: C5:DE:11:08:C6:D2:9B:5E:2E:6B:24:59:B3:58:A1:A9:DA:0E:AD:13
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 019CAA581CAAC36A43C1E4A2013B6A383F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
Manifest number: 0E4D
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: 5u7r-95wuuMX-2fZHuvG2UHWlXU.roa (hash: tBKl8/BRqmf50ldsgxKlxVMabmpWuazrAadJJugrD/I=)
2: nzbQijzYpC9Goslt_XLtjO4nlHc.crl (hash: Zej0Y7nNvExMIUNiy54ycAesW63UeyaZTC7auk9l4Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1c:aa:c3:6a:43:c1:e4:a2:01:3b:6a:38:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=c5de1108c6d29b5e2e6b2459b358a1a9da0ead13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:03:0c:5e:f2:73:2e:82:e9:61:7b:75:48:
dd:42:51:cf:fd:19:38:7b:a6:63:de:8c:48:65:9b:
4f:e2:84:fa:57:27:74:2f:45:b3:11:ae:9e:06:b8:
1e:8e:b7:26:4e:c7:f0:81:9a:ee:36:61:9c:62:b2:
ac:f6:b9:68:bf:d5:c5:91:17:c3:2d:01:31:53:17:
57:16:29:f3:d8:04:23:cc:63:3a:3f:0e:bb:6c:3b:
ae:c7:d2:40:05:f9:96:88:c5:5c:bd:4c:f7:8a:d8:
3e:23:00:69:ba:ee:6c:bd:42:23:63:b9:e9:db:44:
2e:10:1c:ed:f3:68:be:b5:5d:09:13:c8:5d:65:ba:
a3:85:b6:b0:7f:4f:b0:3c:50:3f:13:7e:b6:25:da:
18:45:e6:1e:8f:18:c3:4e:90:bb:e1:47:07:c7:02:
5a:10:30:ac:87:b3:a4:bd:ce:3b:d8:c3:3d:6b:c1:
54:9f:be:c4:9b:39:96:01:46:de:5c:3b:44:45:e7:
17:07:b1:58:02:66:5c:d4:aa:57:41:a2:54:ee:54:
c7:ed:77:aa:5b:88:96:32:ac:cf:43:82:6a:f0:48:
f4:e1:7e:33:05:80:0e:32:ab:51:54:ad:19:fa:b9:
f5:9a:aa:1f:bc:54:40:05:b3:dd:08:24:85:c8:69:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:11:08:C6:D2:9B:5E:2E:6B:24:59:B3:58:A1:A9:DA:0E:AD:13
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3c:41:70:10:e7:75:27:fc:74:4a:e4:b3:44:f4:8e:98:f6:
98:4c:c3:da:c5:04:67:46:26:73:fa:22:6f:c1:1b:90:00:24:
9e:86:9a:f8:70:dc:25:1c:39:22:1c:02:62:97:c1:b9:80:b8:
e9:cd:3f:3d:98:33:9e:fa:cb:11:50:19:3a:17:4c:67:d8:9c:
96:75:26:0d:75:48:e3:65:36:94:19:4e:1c:84:cc:35:fc:f4:
88:3b:8d:4e:7a:23:f9:d2:f2:6c:dc:d1:00:0c:4a:df:54:ae:
b6:f1:36:91:47:57:bd:77:b7:27:4e:de:05:1c:d7:ed:ae:fb:
f3:e6:60:15:fb:5a:58:21:d5:a0:be:3f:4d:e7:a7:d5:79:ea:
98:96:dd:d9:b1:9e:23:48:57:be:e5:96:e2:77:e7:fd:ad:43:
55:3e:47:b8:e3:91:01:55:7d:12:13:5f:1a:b2:cd:ed:f8:81:
c7:5f:87:fd:6a:23:77:b2:b4:0a:c2:c7:35:56:d8:e6:34:f7:
f7:57:8b:0e:4e:29:53:af:cd:51:8b:b9:5d:2d:e4:5b:df:f5:
c0:fb:70:c5:d8:f2:fc:8e:12:3f:ca:5b:15:f6:31:70:fa:55:
27:0c:f5:56:18:33:fe:ca:71:87:e3:ef:9b:a2:c1:d5:7a:2b:
ce:b3:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:58 2026 by rpki-client