Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: +1EQDtqRB/ApKmoIuZA3OTXE5QBiOBznE/6NlUi5mYc=
Subject key identifier: 75:91:FE:AF:F2:BA:C6:F4:72:DD:1E:87:BF:04:3F:F3:84:45:CD:0A
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019CABA23E942866E49971938624F58740D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 0804
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: 5JGURvSqHz7QBtrWkTzEgQiqSWqAHpiB9jo6f1Kfz/g=)
3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3e:94:28:66:e4:99:71:93:86:24:f5:87:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=7591feaff2bac6f472dd1e87bf043ff38445cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:c1:3f:1e:94:fd:b8:90:fe:d0:a7:b1:47:
61:7e:11:46:86:6a:c7:15:8d:fd:65:37:5c:40:95:
74:69:49:93:c8:f3:22:ab:d2:24:78:bb:91:f8:15:
18:04:e9:be:01:d6:1b:a7:f1:09:e6:96:0c:72:5e:
91:58:96:1f:d9:1f:88:cd:90:ab:80:dc:b7:33:21:
50:91:89:df:ae:33:a5:45:36:2c:a1:a0:59:f4:39:
9f:2b:c0:11:59:da:f0:07:f3:03:ec:89:77:3d:37:
83:f3:94:81:6e:be:78:0c:f5:a8:91:98:8b:70:4a:
5a:46:63:40:5a:e6:dc:2a:61:72:09:5d:6b:dc:d0:
54:23:33:80:df:f4:7b:bf:0e:20:06:ab:b1:fa:a8:
4b:29:a2:fd:a3:98:50:ad:f9:24:22:d3:03:c3:09:
3f:5b:d1:88:75:b6:c5:82:da:c6:74:55:05:00:cd:
0c:1c:81:54:e1:df:7d:e9:1f:e1:63:94:1a:e3:b2:
ce:94:c1:0b:6d:16:aa:93:fc:02:2a:a5:84:22:45:
72:82:bd:f4:23:e7:fe:48:fb:1e:b4:71:dd:a2:3f:
0f:0b:94:21:1d:23:a8:2d:5d:5f:c9:b0:2b:51:55:
f3:64:e3:a3:3d:93:40:b3:dc:84:fb:e3:36:b7:aa:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:FE:AF:F2:BA:C6:F4:72:DD:1E:87:BF:04:3F:F3:84:45:CD:0A
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ca:43:b2:8e:d1:b7:d7:6a:7a:ad:25:da:42:08:59:bb:6a:
12:b2:72:ee:44:10:10:07:35:07:85:65:b0:ec:3d:4c:fd:03:
44:d7:ec:25:dc:33:14:20:61:92:98:e6:e4:17:01:6f:38:56:
31:bb:c8:e2:c4:4b:64:77:27:e7:93:2a:eb:9e:77:fe:1e:c3:
2b:39:9f:0d:cf:1a:0b:e1:ca:ee:d3:27:75:36:10:66:24:64:
c0:46:29:31:30:84:a9:9f:c7:3f:de:1c:14:35:ef:b9:d0:d3:
40:cb:60:30:67:c3:35:13:a5:fd:72:5d:af:4c:43:de:8a:66:
39:6b:00:c0:f1:35:1a:78:2f:0d:a7:dd:30:f3:5f:bb:c6:4e:
f5:36:f1:93:34:da:42:0c:63:67:54:e8:dd:b9:f9:6e:f4:ec:
f6:a2:c8:eb:b0:4e:9d:e9:de:a1:cd:26:73:14:ae:21:00:48:
79:d8:fc:d2:3a:9b:1d:52:20:6a:49:ca:f0:08:9c:80:80:7d:
24:3d:46:f8:b7:15:e2:94:84:2a:9f:23:83:3c:5a:cb:ff:6d:
c4:6f:75:ef:0c:a7:6d:71:e3:c2:3c:28:6c:df:3e:06:9e:77:
e9:89:af:ad:9d:fa:7d:7f:1e:9c:d5:ff:54:40:5e:69:d9:ba:
f3:68:7c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:11 2026 by rpki-client