Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
File: nzbQijzYpC9Goslt_XLtjO4nlHc.mft (raw, json)
Hash identifier: VP7EPcL3BUaV9shT4AhbDjjvqFrBQ20kvb5KROWUJV0=
Subject key identifier: A1:55:A8:50:FF:22:82:C4:90:4D:7A:AC:D5:4A:82:3F:4A:67:93:83
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 019DA378126C7035B474E65308043DDFDDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
Manifest number: 0ECE
Signing time: Sun 19 Apr 2026 02:00:48 +0000
Manifest this update: Sun 19 Apr 2026 02:00:48 +0000
Manifest next update: Mon 20 Apr 2026 02:00:48 +0000
Files and hashes: 1: 5u7r-95wuuMX-2fZHuvG2UHWlXU.roa (hash: tBKl8/BRqmf50ldsgxKlxVMabmpWuazrAadJJugrD/I=)
2: nzbQijzYpC9Goslt_XLtjO4nlHc.crl (hash: hEmwmkIlBCF+MnnHLorgTUsfJc8Lz78xBFdcd8lQoho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:12:6c:70:35:b4:74:e6:53:08:04:3d:df:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Apr 19 02:00:48 2026 GMT
Not After : Apr 20 02:00:48 2026 GMT
Subject: CN=a155a850ff2282c4904d7aacd54a823f4a679383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:66:e6:47:08:48:ad:59:0c:f9:24:bf:ad:
8d:a8:03:94:26:d2:60:04:5f:0e:3b:58:5c:d7:45:
60:5b:f3:6d:a2:4d:83:b8:00:de:52:37:40:32:a1:
d8:48:2b:10:c5:dd:6b:67:96:8a:73:a9:8b:07:83:
13:3d:62:c9:78:2e:ee:09:fd:d7:0c:1a:8f:1f:19:
d4:cd:4d:37:c3:54:c9:06:56:8a:a1:75:aa:fe:3b:
99:ed:3a:4c:ed:14:ff:46:4f:64:90:3d:25:01:80:
04:b0:d6:38:e9:b6:05:0f:6d:43:3b:77:89:07:ea:
ea:40:76:4b:d3:80:c0:57:48:4b:e9:59:08:e4:95:
4a:19:74:33:31:e5:02:30:83:30:a4:7d:a0:a4:e5:
ab:65:d8:6f:9d:29:59:ba:79:7f:ff:43:c9:14:8f:
d7:1b:7c:8a:d4:40:df:d2:1c:69:c6:15:65:ad:22:
07:c0:2e:21:5a:c0:26:40:5a:5b:5d:f0:0b:fb:c9:
bd:5a:a0:cc:92:a0:eb:d4:49:aa:bc:65:42:b7:aa:
13:c5:e6:a7:b2:0d:d4:b2:ae:75:a1:b4:e8:aa:3c:
7c:3b:51:9f:63:02:e9:2d:52:af:dc:1c:6a:db:21:
9f:c2:c6:43:ad:86:dd:ac:03:5b:3e:7b:db:de:d8:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:55:A8:50:FF:22:82:C4:90:4D:7A:AC:D5:4A:82:3F:4A:67:93:83
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:9c:c5:9d:12:00:fc:51:4a:c1:02:e9:76:9d:0d:84:05:
a7:5b:3d:c7:81:5d:c8:a9:63:8b:d3:41:f9:7e:bf:08:21:db:
c1:58:98:36:36:90:24:40:53:a9:7c:c6:a1:a6:72:28:b8:a6:
e5:d1:a3:9b:db:f5:c1:b5:4d:4c:81:e1:aa:1d:c2:6e:dd:49:
e8:46:84:65:1e:96:20:19:fa:cb:ce:c5:e9:d1:31:f8:d8:f9:
71:32:0d:ee:b8:12:a5:bb:d6:25:33:c7:50:a5:48:d5:f5:e7:
69:82:e9:2c:d0:4b:82:c7:c8:f5:cb:78:ad:64:34:15:1f:8f:
39:f2:39:a1:9f:61:d3:34:a5:fc:59:66:9b:41:b6:3c:d8:b7:
b7:d3:85:f6:0e:d3:4c:92:13:b1:32:f3:05:b5:b3:9f:6e:a3:
b2:10:16:14:45:2d:2d:2f:85:13:81:db:b0:44:bf:c6:ec:3d:
ed:06:f7:b7:1c:3c:d1:73:90:66:e8:5f:fe:a2:76:a7:41:08:
e7:43:fa:bb:35:80:91:8d:a6:3e:5b:22:58:ab:27:be:36:df:
21:04:73:fd:87:46:63:30:9c:46:df:db:29:8d:7f:a7:8d:9a:
b1:a6:13:be:e0:c8:27:96:f9:6a:bf:30:18:c4:da:33:66:08:
05:6c:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:12 2026 by rpki-client