Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: RaNYRZDYuJrrLJ+HTW5OEuZuAD0MSBvbGd0huuJlqsQ=
Subject key identifier: B7:73:0B:8C:10:B0:C4:22:43:AD:43:D1:C6:9A:9D:3D:9B:2C:D9:02
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019CAD5A132E0E3554096297CBC29420391C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:27 +0000
Manifest this update: Mon 02 Mar 2026 07:01:27 +0000
Manifest next update: Tue 03 Mar 2026 07:01:27 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: i8qSERVtLDQtrbWLzB+XGOe3+cClgVHsTR8zDnuiKGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:13:2e:0e:35:54:09:62:97:cb:c2:94:20:39:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Mar 2 07:01:27 2026 GMT
Not After : Mar 3 07:01:27 2026 GMT
Subject: CN=b7730b8c10b0c42243ad43d1c69a9d3d9b2cd902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:fa:df:f2:ea:67:9b:d0:68:6d:bb:56:7a:
e9:11:23:29:d3:94:d5:5c:ba:33:71:65:2e:63:ce:
33:85:06:50:62:09:b0:06:48:8c:a1:38:6a:95:e4:
6f:16:38:45:fb:bb:a8:0f:09:03:6b:dd:5b:05:71:
2a:25:79:93:83:5c:e7:ae:d9:72:bd:f5:47:0e:17:
4a:5d:23:a1:d6:70:02:57:a5:85:ff:bc:7c:34:0c:
13:c6:54:51:1c:42:36:e3:be:6a:ef:6e:5c:c3:c2:
c2:96:c6:45:47:62:8c:e4:ae:a0:ca:0c:53:ab:ae:
26:1d:54:f1:b6:e0:10:e5:af:99:69:8d:2a:ae:ba:
92:06:3f:6c:cb:b6:01:af:92:d0:76:42:5f:30:54:
a9:92:18:e8:86:64:62:39:18:62:3f:de:5a:63:86:
a6:bd:b1:c1:18:0d:1a:b0:b1:60:7b:5c:d7:ee:00:
c2:1d:1b:5c:bb:74:c6:49:13:21:29:7e:60:d3:95:
eb:b3:fc:ee:3a:65:ab:11:34:35:d7:5e:bc:4a:02:
0d:23:b6:b0:cb:4c:01:f6:b3:17:df:8d:e8:f3:84:
80:bd:f8:f0:d1:1e:43:3b:8b:9d:63:95:80:5d:15:
2c:56:37:0b:8a:0e:ab:8c:25:43:62:c9:ca:23:2a:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:0B:8C:10:B0:C4:22:43:AD:43:D1:C6:9A:9D:3D:9B:2C:D9:02
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:13:18:20:dd:c9:27:fc:29:8b:69:b0:0e:b4:b8:41:4e:
3c:bb:a3:4b:b7:43:17:38:a7:01:46:46:06:f2:93:1b:5a:f2:
03:2e:f3:50:e6:50:f8:95:68:9f:a6:f6:a7:1a:00:da:ba:3e:
ea:94:57:02:a8:c0:7c:1f:26:48:39:51:21:b5:17:49:ac:95:
b9:57:3c:ed:09:8f:fd:83:ae:2e:cd:22:38:e2:64:b9:2d:fa:
b5:b2:d6:7d:8c:46:ad:63:b0:13:ea:b1:74:37:83:3f:b4:15:
73:a7:c1:3f:20:8e:ee:56:a7:d5:e6:0b:cb:73:31:65:15:11:
88:0b:df:1f:a7:ec:c2:f0:71:42:d3:c9:1a:4f:23:10:f6:79:
51:00:32:d2:14:f4:9a:3c:a3:4f:4b:db:46:7e:c3:d3:19:2a:
5e:31:4d:94:8b:e7:ff:24:b8:02:28:b2:37:a3:ef:3c:39:ed:
7c:01:0d:94:f3:c5:6b:56:38:40:38:50:0d:62:6f:02:c5:db:
92:1a:db:90:e4:f2:c7:e0:23:ec:98:2d:8f:4e:3c:52:0d:72:
23:4b:55:c6:ee:ec:bf:6a:df:6f:ec:2c:2f:ee:9f:6c:1e:65:
07:f2:61:4a:27:6c:89:f5:3e:4d:8b:86:40:b5:40:1b:5a:f6:
c0:36:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:07 2026 by rpki-client