Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: 8fe23cvzsJCLQs1parKdxlpP070EO0l7UphIWdzdpQg=
Subject key identifier: 4E:8D:1F:1E:23:7B:98:84:81:A9:AC:0D:11:B1:59:A8:00:E7:55:7B
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019CAC478C491020DB36AE8D8CBF8F3BB4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0B7A
Signing time: Mon 02 Mar 2026 02:01:35 +0000
Manifest this update: Mon 02 Mar 2026 02:01:35 +0000
Manifest next update: Tue 03 Mar 2026 02:01:35 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: RM1MWdfSxqeEMQmbUEEPtrtP19YzjN0jAW0V2GbqQLs=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:8c:49:10:20:db:36:ae:8d:8c:bf:8f:3b:b4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Mar 2 02:01:35 2026 GMT
Not After : Mar 3 02:01:35 2026 GMT
Subject: CN=4e8d1f1e237b988481a9ac0d11b159a800e7557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:57:85:d5:00:cb:9b:a5:80:ce:9c:a8:22:
11:cc:3c:3e:5c:a8:6e:b3:48:22:7f:c9:4b:69:c1:
cb:a2:3a:98:ba:81:71:d3:b7:93:21:95:48:11:9f:
04:89:71:55:25:34:d2:05:2f:f8:7d:7d:47:0d:54:
2c:5c:fc:d4:fd:18:d6:22:47:53:74:27:2f:ce:74:
8a:e3:0d:76:4e:d5:3d:38:ea:a8:f2:69:09:0d:69:
7c:6b:fe:9e:48:8c:22:fc:7f:8f:13:b0:9c:d4:a7:
54:48:0d:0f:0e:cb:b4:f1:f3:74:0f:d7:52:d4:31:
b4:ba:9d:d1:be:70:06:e6:32:ff:d8:0a:e1:7e:09:
fe:e8:6e:29:31:02:7e:ce:f8:16:f6:63:45:98:b4:
c0:91:5a:d4:cb:00:a4:7f:02:ce:58:27:76:68:3c:
dd:40:96:18:29:fa:92:91:fd:6b:9c:b0:61:22:39:
d2:83:48:53:c8:66:3b:8c:9f:90:c4:b4:1f:3a:81:
0c:80:ec:3b:6f:3e:3e:02:9c:ab:b8:5c:d8:02:86:
ba:61:7c:76:fe:be:d4:b8:02:1c:b3:72:33:38:7f:
91:10:04:25:8e:d7:16:91:71:7b:69:ec:fe:bb:b8:
32:f1:d4:41:45:67:00:43:0b:bf:49:ac:17:a7:20:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:1F:1E:23:7B:98:84:81:A9:AC:0D:11:B1:59:A8:00:E7:55:7B
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8b:3f:7c:32:9c:11:57:85:39:0d:39:54:e5:8c:55:58:bf:
5d:1b:ac:ec:a7:62:b7:86:cd:29:59:ec:31:e5:9a:33:ec:e4:
69:55:c9:c7:9b:a0:94:5d:69:c9:ef:8c:0d:ad:fe:5b:7a:13:
5d:3d:47:0f:52:f6:1d:03:ae:20:04:b7:c7:fb:33:af:d6:ad:
0c:c4:2c:2d:af:9a:9e:84:82:ab:99:25:bc:02:47:77:5d:0a:
be:a3:b9:b5:b9:2e:10:35:7b:27:94:aa:53:7a:88:c0:ab:a2:
4f:f9:09:12:73:a1:12:16:ca:17:8c:c5:99:93:22:94:42:4d:
0b:60:c8:8b:50:17:95:50:be:50:f6:91:f8:8c:04:50:f1:ae:
a3:d1:a7:c3:85:5d:03:e7:7b:96:01:f6:9e:b6:5e:2f:66:a5:
39:37:7f:18:e1:cc:82:3a:4f:1c:0f:52:b8:47:90:a9:ca:a8:
1c:12:f8:bf:f0:f4:12:00:ba:99:14:ac:ee:3a:9b:fa:90:2a:
61:d1:21:69:c1:69:55:e7:76:7f:8c:10:60:ce:ed:d6:92:b0:
06:79:8d:4d:bd:9f:4e:fa:a2:a7:87:22:28:d5:86:f0:38:9a:
fe:fc:18:c1:4f:e9:cb:94:36:16:5a:fb:f9:23:6b:e2:c8:b5:
8c:7e:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:29 2026 by rpki-client