Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: bt6Y/1WC1xhrttC2DrdwiyGVSp407RqSmbCJEB9ESYE=
Subject key identifier: 1F:97:E4:27:C7:2F:B7:F5:A0:A5:1D:04:1C:AE:48:E6:C6:6D:F5:79
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 019CABA1FE9B8C3E2A1DD71A846CCCDDED3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: HYaYWiPUwPT0J3PigGh4W9Dq_LE.roa (hash: p4mpafcbeyykks8+AH1sHGrQUM/Z36qBp4nJtDWe3lI=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: EkOBQvDnB0DORTueOJUaWe127UTdKTCTvhbq5E2uZ8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fe:9b:8c:3e:2a:1d:d7:1a:84:6c:cc:dd:ed:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=1f97e427c72fb7f5a0a51d041cae48e6c66df579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:47:f8:5d:46:8c:6c:a5:c1:7d:29:57:ff:
dd:f2:de:90:21:30:a2:72:fb:50:8d:b2:cb:cf:3a:
ab:20:6c:c8:fc:95:89:cd:83:d1:45:d4:a7:76:f9:
b7:89:3e:e1:70:93:1c:88:78:cf:07:27:1d:73:e2:
b8:80:27:6f:fa:cc:1f:5a:c7:17:b2:50:bd:b9:73:
69:ab:58:9b:29:7a:57:59:42:31:25:57:23:2f:a9:
ec:f3:49:aa:11:92:16:90:bf:69:c9:40:78:7f:03:
a3:3b:8e:15:73:91:79:33:43:11:ea:84:7f:db:73:
60:a2:25:24:d9:6a:93:88:cb:94:cd:51:a2:1f:ac:
d1:20:07:aa:e8:63:69:a5:a1:1e:26:12:d1:e1:3e:
4b:e6:00:18:40:06:f1:d3:4e:73:16:1c:96:c8:6c:
1b:05:70:71:b0:8f:26:6f:fa:c7:ea:0f:08:21:01:
36:a0:c7:f3:01:7f:76:e2:8a:41:94:5a:e3:1e:9d:
4c:9b:5d:6f:d6:05:ef:eb:ac:62:6d:83:f3:3b:d4:
77:e3:c5:fc:9f:ee:4c:43:a6:b5:55:f3:c8:16:6e:
6e:c7:fa:3c:d5:41:c2:53:c0:1b:85:41:b4:f7:89:
68:c3:0d:f3:33:c3:52:52:10:5f:36:01:82:69:40:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:E4:27:C7:2F:B7:F5:A0:A5:1D:04:1C:AE:48:E6:C6:6D:F5:79
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:c0:af:b6:91:ab:dd:bc:46:b9:0d:67:e3:75:3c:21:6f:
2c:0c:0d:c0:f7:b1:6e:2d:8b:02:c3:aa:77:a9:e5:0c:4e:76:
d7:b7:e2:cb:55:1d:30:07:dd:f5:4f:a3:5d:6d:fc:9f:df:bb:
fc:b3:f2:66:c4:3e:7f:a2:2b:b8:58:c0:2e:0c:cc:1d:86:28:
75:17:43:1f:21:3a:21:84:58:76:4a:1f:87:78:e9:d2:54:19:
ca:e7:92:dd:57:d6:1c:17:ae:59:de:f5:c1:f1:51:26:be:79:
69:5e:11:87:e2:97:30:e8:01:f7:fe:95:00:54:7f:4a:47:a1:
72:44:a7:d6:d3:93:6e:ac:8c:11:3b:bd:e3:0a:e6:57:80:a9:
c5:ba:6e:5b:1b:ab:2c:97:99:73:c4:7c:80:00:66:94:1a:8d:
f8:cb:a0:a8:73:a7:26:8b:48:56:da:2b:91:e5:6c:4a:b1:9e:
4f:bd:27:6b:33:1d:f5:21:66:e6:98:c2:6a:0d:1f:2d:18:03:
a3:15:c1:fc:1e:c4:9a:61:46:c0:53:05:2d:ca:58:a2:06:1a:
d9:9c:2a:4e:22:58:ab:94:98:61:1f:32:6f:44:36:c3:05:3c:
54:63:59:2d:95:ad:72:77:52:9c:10:31:14:59:eb:f1:9f:55:
07:c8:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:23 2026 by rpki-client