Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: QpTaRYU55JANfh9mUgXYMP2l0lHwGAgxsamGlKs8W8M=
Subject key identifier: 17:31:45:66:5F:51:F6:48:53:38:7A:83:E8:FF:0F:BB:D3:3F:5B:10
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 019CAAFD57B796D39312689E914C697103D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0E42
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: 8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa (hash: 4srsR9VRePR9yB/iD/hHMwN8fvofDELlgIaatI76q6Y=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: SvApby4/wJMpTL1z7RW0j3BGK/pvplBCk4s1bnpkx6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:57:b7:96:d3:93:12:68:9e:91:4c:69:71:03:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=173145665f51f64853387a83e8ff0fbbd33f5b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b9:4d:ae:ac:1d:b9:97:c7:af:37:4b:2a:cc:
05:e4:82:6d:6d:a4:9f:6e:56:4e:e8:c8:22:bc:dd:
17:3d:8d:c7:e5:3e:c7:7a:b0:dc:73:fe:8a:09:f5:
e3:75:b4:36:81:80:3e:62:75:56:5b:df:04:5c:4c:
c0:ec:12:d5:3f:0f:09:0c:ab:cd:25:30:a5:e7:3b:
4c:c3:9b:42:24:7d:59:35:2a:6f:ec:3b:9e:2a:0f:
3e:df:1d:bb:ef:81:ac:d0:d7:4d:f9:f9:ef:10:bf:
a6:81:bb:a0:99:e5:ad:a3:52:c9:63:f9:fc:3d:90:
98:af:e4:1c:fb:0f:1b:83:0f:a3:b1:46:9f:37:09:
99:f3:d3:3a:b5:50:af:50:ba:5b:7a:b2:93:08:89:
c8:78:6f:27:fc:10:e2:03:f6:34:a6:1a:ea:b6:d5:
84:3c:67:c4:44:6f:c3:16:98:d5:65:48:fc:ef:74:
54:4c:10:b8:7a:e1:43:6d:d2:6f:f6:2f:f3:0d:9a:
7f:1d:f8:5a:33:99:4f:ad:d2:03:2d:ca:5e:df:33:
25:7b:b2:c6:69:1f:3e:a8:01:a3:de:ca:dc:54:ed:
7a:4c:c2:a5:52:62:e0:60:6c:90:0e:59:70:f1:c5:
0b:21:69:c4:2e:b1:ad:e9:af:e2:df:f4:37:ad:97:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:45:66:5F:51:F6:48:53:38:7A:83:E8:FF:0F:BB:D3:3F:5B:10
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:1b:a5:13:ef:64:cf:0f:18:62:d6:8f:98:aa:7c:db:43:
27:2c:13:6e:2b:09:34:09:e6:27:79:51:65:7a:80:34:4e:d5:
f8:90:13:48:db:3b:03:6b:e1:0d:05:05:1b:9c:f3:81:0f:0b:
ca:43:cc:6d:c7:37:3c:12:4c:95:de:0e:43:88:5c:94:d0:05:
ea:d2:cd:85:ca:71:8c:a5:80:3d:be:92:04:ce:e8:36:0c:38:
9c:cf:b9:9c:f7:8f:36:42:1b:60:d5:e3:80:f0:59:18:ff:bb:
e9:d3:ca:cf:ec:20:ab:e4:20:33:37:6f:70:4b:5e:03:52:37:
25:4f:04:04:b6:83:39:e9:ed:d2:10:ab:f3:0f:11:b9:da:5f:
f1:9c:29:a5:48:4c:8b:93:b7:a1:ec:2b:ac:a9:81:8a:45:29:
99:70:bb:5b:cc:39:d5:bc:f3:3e:38:2b:b9:a1:56:61:4a:2c:
57:df:7c:5b:75:b0:37:34:e1:5b:15:be:b9:97:71:41:9a:9f:
d6:97:85:bc:b4:e1:da:14:a0:b5:e4:21:93:b0:fe:e1:49:12:
c6:c2:62:f3:d9:ab:f0:4b:96:03:4a:16:89:78:d9:b6:50:c1:
67:38:4a:a8:7d:e0:df:1c:27:19:e0:55:31:b9:ed:69:8f:98:
be:4a:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:23 2026 by rpki-client