Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: t9Oz+tFWCgOpzXro9+idGalX84HviKMdZ9CAtg8NT9Y=
Subject key identifier: 7C:4A:08:C5:C8:C2:FC:0C:1D:92:1D:43:2C:46:D9:E4:1A:E1:C3:A0
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019CAA58D473747DAE7993228ADDBD219B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1794
Signing time: Sun 01 Mar 2026 17:01:13 +0000
Manifest this update: Sun 01 Mar 2026 17:01:13 +0000
Manifest next update: Mon 02 Mar 2026 17:01:13 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: fRrYaY5y3bApJQnXhPgiJ7aaaKDvbQH81yYtSfd8wZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d4:73:74:7d:ae:79:93:22:8a:dd:bd:21:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Mar 1 17:01:13 2026 GMT
Not After : Mar 2 17:01:13 2026 GMT
Subject: CN=7c4a08c5c8c2fc0c1d921d432c46d9e41ae1c3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:87:0b:59:82:78:6e:ed:8d:5e:1a:0d:75:
4e:1b:5e:7d:59:bb:dd:aa:30:29:25:23:00:f8:04:
ec:5c:4a:d9:0f:78:cf:ca:10:43:d5:f3:1d:7f:65:
c3:9a:56:ef:23:a3:2b:89:b7:08:71:5c:49:5f:7c:
8f:37:f2:5c:a9:65:49:d4:49:ad:fa:db:c5:fa:89:
af:72:4d:25:09:5c:a2:8d:53:3f:ce:21:1f:8f:4f:
85:cf:3d:d9:45:2a:f6:82:5d:0a:d4:d4:a9:cd:aa:
5d:7b:e0:d3:71:41:d3:1e:f6:60:77:69:f7:0a:62:
db:56:09:38:43:e5:fa:2f:a6:38:4a:1a:ca:8f:79:
09:c4:af:0c:79:1a:b3:0c:66:d1:2f:9d:d5:49:3b:
07:fa:9c:c6:a7:e6:e8:67:45:85:e5:06:cf:e6:d3:
26:81:61:9a:8b:44:f0:a3:b2:5b:d4:e3:a9:48:0a:
d5:3f:ae:de:f6:58:36:3f:a2:28:6d:77:a5:14:8b:
e7:14:50:33:1c:7e:c5:0e:33:a2:4f:d7:6b:07:8e:
48:f9:cc:ed:d0:04:a4:8f:5e:94:53:42:b7:59:37:
c7:c7:11:e4:f1:df:0e:49:ba:b3:5c:08:82:97:75:
fd:fb:3c:7a:ff:3a:08:37:62:4c:30:0e:dc:ca:41:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:08:C5:C8:C2:FC:0C:1D:92:1D:43:2C:46:D9:E4:1A:E1:C3:A0
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:cd:72:6c:9a:39:3d:d9:4c:a5:cf:94:5b:f4:6b:f7:aa:
cc:84:ae:a5:35:5c:bd:8a:a1:14:62:fd:82:ba:4a:36:8a:41:
93:3c:9e:fb:03:2f:53:f9:2a:92:1e:85:2a:69:7a:7c:8d:67:
4e:73:d0:e2:c5:f9:97:2e:d5:4d:5d:54:af:56:a2:d6:ff:a6:
76:9b:76:77:d8:e6:5b:8a:a7:7e:90:1b:5b:bf:2b:5b:67:a5:
85:f4:44:99:3a:c4:51:a5:a5:d9:09:c3:6f:55:56:22:0a:d8:
a0:e1:1f:87:89:22:8b:46:68:b2:c3:f9:88:fd:95:72:c7:02:
99:9a:21:2d:55:87:88:96:28:e1:83:70:98:ae:26:1d:a6:63:
90:a0:f8:53:25:17:b3:df:9c:16:5d:75:64:b3:c7:ee:b3:7e:
19:aa:30:8e:a5:f8:65:b1:e0:df:93:f7:44:33:18:64:c5:0d:
17:26:d0:30:ac:03:33:3f:a7:76:b7:72:8b:f3:13:5c:af:49:
b6:55:75:51:64:e9:2a:62:87:6b:ed:76:44:d3:f9:cf:46:6a:
99:cd:9b:40:cf:ad:74:93:b8:bf:78:04:33:6d:09:a9:69:64:
63:17:e1:51:fd:d7:88:21:bc:df:81:3f:5c:09:1d:fa:28:b7:
84:04:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:18 2026 by rpki-client