Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: hPvMx+iN7mVSwgCNSEdNBko4N2OM4UlT3FIZ7ka8QCo=
Subject key identifier: 9E:E7:C7:03:DA:14:9B:8B:33:3C:E0:A0:51:A7:06:45:A2:EB:4C:B0
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 019CAAFD9D667383E9ED51F2E272243723A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0BE0
Signing time: Sun 01 Mar 2026 20:01:13 +0000
Manifest this update: Sun 01 Mar 2026 20:01:13 +0000
Manifest next update: Mon 02 Mar 2026 20:01:13 +0000
Files and hashes: 1: 8RN053bCakTRVXui6gfU_pQN-CU.roa (hash: /BriY1IgAGYn1GmZT5ixDLcg1lGG6kDvV6LZLM2uCJQ=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: VL+Y6vKOXf8jUx5ZNvSlRrT6EFMe9dw1NYNlXUhkKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9d:66:73:83:e9:ed:51:f2:e2:72:24:37:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Mar 1 20:01:13 2026 GMT
Not After : Mar 2 20:01:13 2026 GMT
Subject: CN=9ee7c703da149b8b333ce0a051a70645a2eb4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:f9:a9:47:84:98:b0:67:ff:b7:72:b9:0c:
a2:78:46:36:24:73:af:77:97:1c:72:30:1d:f0:c8:
d4:b3:c9:e3:58:dd:90:f3:2f:bc:88:fa:e7:05:80:
49:87:4e:b0:b8:5a:ce:5f:29:0a:cc:e2:f9:f3:7e:
32:97:9a:0c:5d:4d:f5:f4:92:96:3a:2c:78:2f:02:
a4:b6:55:f8:7f:1d:e0:52:a2:33:11:fc:32:45:e6:
f3:dd:bc:98:07:03:c5:58:0f:27:5d:f8:dc:ee:05:
66:a6:f2:54:07:21:31:99:21:62:bf:5c:00:09:be:
3e:a0:2d:76:85:18:69:1e:0b:48:44:73:73:1d:1b:
5a:a7:d5:06:dd:f8:1f:08:93:58:3a:2f:ae:bf:09:
55:e4:c1:ce:6c:07:0c:f6:c7:8d:88:02:c6:75:3d:
1d:34:f8:89:30:ff:8d:61:c9:07:9f:af:b0:75:31:
4e:91:92:02:5b:21:17:92:d9:c3:57:f7:91:bc:e6:
1a:c3:a3:05:b2:85:05:8e:52:ca:37:57:c0:80:c4:
f8:e0:3c:73:88:8c:f1:cb:75:7e:fd:d3:aa:b5:21:
10:2d:96:d3:97:69:92:88:07:a6:1b:45:34:fd:87:
4d:67:46:a4:e2:ce:81:8c:64:7f:6d:6a:b0:aa:3f:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:C7:03:DA:14:9B:8B:33:3C:E0:A0:51:A7:06:45:A2:EB:4C:B0
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c7:88:4a:e2:15:48:87:0d:de:31:75:55:2f:00:36:db:0b:
e3:a8:2a:58:56:f7:d4:9c:10:28:73:15:b1:d6:fc:14:bc:5f:
d9:8a:76:ad:22:5b:87:8c:6c:48:fc:6b:bd:5d:ae:96:1f:36:
b4:55:e5:ed:d3:92:07:2e:a3:e4:18:f6:91:68:72:98:02:c4:
27:b0:f3:25:32:6c:fd:dd:5c:bb:9c:81:e8:0c:3f:cd:1a:58:
08:c3:89:81:3d:83:f6:4f:e1:e4:e7:3e:25:b0:9d:f2:71:a8:
6d:ce:25:95:1b:9c:ea:88:4a:ac:dc:46:03:76:91:d8:b9:6c:
88:b1:37:bf:d3:be:1a:25:c7:cf:35:7b:9a:6c:52:5a:0d:00:
6f:57:08:35:e8:30:f6:73:5f:ae:a2:ca:e4:51:bd:4a:3b:33:
dc:30:71:85:d2:a6:06:fe:21:3c:92:4d:9d:0d:95:16:7f:ea:
93:f4:9a:a4:a3:20:a8:50:35:73:40:74:42:28:2a:10:3e:67:
cb:09:26:9f:83:c4:b3:a5:06:02:60:37:0f:6a:d3:eb:68:b4:
1b:54:dc:8c:71:30:9c:04:61:ce:41:7d:ae:cd:bd:a1:63:ff:
01:91:d1:79:79:88:31:cc:44:ea:54:5e:ee:58:e3:09:24:24:
91:04:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:20 2026 by rpki-client