Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: dxm9j7OLjeWuKPryXAWVYoBcUSq6S+LBhobqEYIr4Pg=
Subject key identifier: EB:63:00:E9:AB:E5:93:12:47:DA:8D:ED:C3:37:26:1D:C5:C6:F9:AB
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 019CABD8F7B0A6F27B2552476D963716FF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0E9B
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: g9IkxZGc3iV8CHXeP1N74Ttw+ncrzo0R7vGvRE4kFOo=)
2: ob7F2VCJOAAsHnye3Fkfiw3LDrA.roa (hash: 73dBJpgeQaRvDu0bCVr2PUKhwsl+BWtyqsuA67uRjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f7:b0:a6:f2:7b:25:52:47:6d:96:37:16:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=eb6300e9abe5931247da8dedc337261dc5c6f9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:d4:4b:aa:b0:bd:7f:d2:73:4d:28:85:c6:
11:d0:c8:46:64:4a:be:a4:4b:e9:42:b7:eb:3a:11:
2e:62:b7:1d:52:75:43:21:23:14:47:f3:98:a8:68:
7d:f2:fa:0e:3e:5b:22:76:9a:57:e2:1e:7f:ed:3d:
9a:ee:e8:65:b9:b3:77:c9:46:a0:93:dc:55:f2:7b:
94:27:68:7f:37:68:11:80:f3:df:72:85:b3:ba:77:
35:39:a5:96:46:33:53:ee:49:65:22:3e:23:39:41:
21:1a:bd:72:0a:be:f9:4b:11:24:3e:e9:6e:04:31:
16:5e:1f:b3:82:21:a1:81:78:61:c3:3b:da:bf:e7:
6a:2b:21:bf:75:bf:16:4a:05:80:47:d7:57:8d:f1:
26:2f:83:48:e6:53:04:b8:e1:35:98:b1:6b:04:c5:
b8:8b:2f:4e:4b:ac:a7:53:3c:de:64:20:6f:c1:f2:
20:25:02:23:47:b3:09:b2:94:0a:75:b1:cf:7d:bb:
63:98:47:4d:18:1c:98:ee:09:87:79:de:5d:1d:23:
64:ff:b2:38:48:3e:a2:de:d9:ff:63:55:25:e8:39:
f0:a2:26:da:50:06:bf:93:fc:cc:bd:55:86:07:6d:
e9:6e:82:3a:a4:72:16:c6:32:16:07:b5:6b:b4:4e:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:63:00:E9:AB:E5:93:12:47:DA:8D:ED:C3:37:26:1D:C5:C6:F9:AB
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:c2:fd:97:f6:49:2a:2e:02:0c:22:47:96:4e:f2:20:ce:
d8:8c:29:b5:c7:9b:9b:5f:4f:62:65:f1:f4:fb:13:9c:f7:14:
34:54:2f:61:df:d7:1e:13:ba:12:6d:af:74:93:58:06:78:71:
23:8e:05:67:67:f7:3c:16:9e:be:7d:53:fc:88:e8:0e:9c:1c:
41:ae:7d:0e:68:a9:06:af:74:c7:92:74:0f:2d:15:93:35:df:
17:75:05:46:2f:68:73:c5:63:5d:d4:31:45:cc:3e:63:32:6a:
8a:51:93:ed:b9:f6:4c:50:fb:da:6f:a2:d1:e9:5c:de:48:04:
a1:63:9b:c3:9f:f3:84:c6:9c:66:18:58:ec:ee:ff:e6:0b:d7:
28:d5:31:a6:5b:82:df:e0:39:46:3d:20:af:45:eb:c7:7d:1c:
95:ea:c3:1e:b6:df:3c:10:16:e3:61:7f:0a:1f:32:1c:4a:ec:
07:c9:7a:26:fe:e5:cd:cd:ef:c4:3d:19:84:4f:07:cb:3c:9e:
f2:7d:9f:ea:21:7c:f9:e8:2b:0d:a7:7c:41:90:d7:82:28:49:
7d:b6:a0:1e:a0:32:e2:c7:92:63:75:d1:b6:49:c5:03:eb:31:
a1:c4:36:19:5d:ac:81:6f:25:2a:e0:16:ad:c7:83:b4:ea:b8:
a3:ef:be:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:40 2026 by rpki-client