Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: LHdHBXMy2v8qDjBqadLFGtKCNUUY7MgloEqszBMGl4E=
Subject key identifier: 39:D3:F2:F3:98:51:AF:06:C8:0B:14:47:FF:C3:20:91:0E:DE:A6:2C
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019CAA21A3C80A0B0E3DAC6EFD51CF275863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: xL0XgspU8Obtjv3RO7MBLk+9lt1myqEutpneTXyhmZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a3:c8:0a:0b:0e:3d:ac:6e:fd:51:cf:27:58:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=39d3f2f39851af06c80b1447ffc320910edea62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:a1:6f:8e:bb:f7:90:dc:00:d2:b8:1e:a4:
ce:bf:9e:6f:a5:bd:ea:81:73:aa:63:2a:f1:b9:3b:
8a:03:39:92:ac:2c:aa:d1:d4:a4:b3:9b:de:20:76:
09:2e:66:18:1f:d3:92:47:c8:09:46:81:a0:40:52:
50:c8:20:8c:73:8e:81:cd:ef:3e:6b:fe:44:59:7e:
b3:f4:70:06:27:ca:91:48:cb:a1:2b:1a:af:3e:c9:
9e:8f:7e:bf:c3:e5:e4:18:8f:be:34:02:56:74:ff:
df:f0:9a:1e:31:06:d0:a6:af:11:38:1d:2b:bf:5c:
c0:0b:79:d4:6a:d4:77:a2:21:e8:3c:9b:02:21:02:
66:c5:c1:46:88:b7:3e:8f:a4:dd:df:64:e4:8f:f2:
41:1b:89:dd:71:db:fb:7e:a9:d6:03:c1:fc:a5:df:
c7:31:68:73:33:99:e1:01:31:a9:95:ba:fc:93:ae:
cb:99:a7:6a:bc:5b:4d:79:4e:bb:50:d0:3c:c5:4d:
f3:4b:33:70:25:4d:c9:9d:79:1e:39:48:be:6a:ea:
eb:8b:69:61:40:0b:7e:50:9d:ba:13:57:55:cd:1a:
47:4b:29:42:4d:22:81:e6:4b:6c:5c:36:14:a2:c8:
53:c2:3d:2f:b5:b4:d1:39:0e:76:5a:21:e8:45:c6:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:F2:F3:98:51:AF:06:C8:0B:14:47:FF:C3:20:91:0E:DE:A6:2C
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:98:fd:98:f6:96:bb:56:de:75:d9:20:8e:8d:45:a0:e4:d3:
07:ff:ed:c7:97:6e:f2:74:24:87:73:9c:de:96:4a:0d:46:26:
42:5a:96:10:7d:74:10:f8:0a:78:77:86:85:9c:70:e3:f0:e8:
e6:54:0d:24:26:49:6f:21:5d:01:36:85:e1:cf:fc:9e:13:ec:
94:91:f5:64:b6:59:ff:a5:74:bc:f3:ca:81:47:4c:61:6f:68:
a4:b1:18:3d:26:3a:c2:92:26:1c:6b:73:f5:d5:5f:9f:da:c3:
de:d7:07:7b:dc:6b:ba:3c:04:5d:e9:33:d2:75:d6:8a:05:0e:
53:85:ee:40:d7:fb:69:cf:aa:b8:fa:ab:95:fa:3c:0b:12:d6:
aa:52:cd:03:1a:d6:6e:e9:dc:21:3c:46:6e:f0:bf:ae:75:3c:
67:5e:3d:1d:24:fd:78:94:0e:f5:5e:12:4e:10:92:b1:c1:56:
85:b5:98:61:5b:05:cf:b3:7a:39:6d:23:c7:3f:c5:21:94:26:
e1:6d:14:f5:fb:06:ee:0c:af:e2:8c:3b:17:28:90:9e:16:e9:
b9:d3:30:fa:2b:22:57:b9:fb:2f:28:cf:b5:e4:92:1e:19:16:
13:bc:f0:d7:68:6d:21:26:86:2b:8f:45:94:63:04:45:c8:1f:
ae:6f:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:12 2026 by rpki-client