Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: ALffYKGYL9oQtE1vim4piWajhcVQlz+AsBNqhcyJT4M=
Subject key identifier: CB:9F:EE:43:0F:C8:E2:F1:EF:E2:B5:BD:3C:17:4F:FC:6E:6B:27:B2
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 019CA9EABC3AFEB5C95BA3A87B08E6A9C16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 1149
Signing time: Sun 01 Mar 2026 15:00:58 +0000
Manifest this update: Sun 01 Mar 2026 15:00:58 +0000
Manifest next update: Mon 02 Mar 2026 15:00:58 +0000
Files and hashes: 1: blMjfRyOLEyojLj42XPxwXwFTD4.roa (hash: jrLQeO+lNASlqC6IDejHJLnMTZ65htbv+psssgALK6g=)
2: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: 0q5n6n4+XbJZ8FhZtcU0LUZX78b0L5LHl0f+IT+flFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:bc:3a:fe:b5:c9:5b:a3:a8:7b:08:e6:a9:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Mar 1 15:00:58 2026 GMT
Not After : Mar 2 15:00:58 2026 GMT
Subject: CN=cb9fee430fc8e2f1efe2b5bd3c174ffc6e6b27b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:a6:23:6c:63:f3:a3:04:86:a5:b3:16:e5:
93:99:9a:22:6a:b6:f1:78:dc:9b:4d:8c:e2:11:73:
5a:4d:f3:0a:be:72:2f:e9:d3:b0:f9:21:db:79:4b:
d4:35:0e:30:14:cd:0e:9e:4d:78:c4:c1:df:46:7a:
96:b3:12:aa:78:34:b3:97:e5:9a:db:0f:c1:81:67:
9d:25:77:f2:23:70:e0:45:30:99:09:0b:cc:cf:ba:
01:b0:08:88:de:63:d9:a7:4a:f6:a7:b9:fa:67:71:
9e:64:38:7d:89:69:af:e2:22:78:17:2f:5e:ef:9b:
b7:a1:d3:19:ce:dd:37:51:dc:f4:a7:86:a8:a3:76:
54:ba:44:99:4d:eb:20:01:0d:81:35:27:d3:76:88:
0b:42:5d:13:3a:95:01:04:70:42:d2:b3:8b:28:41:
3d:89:9c:26:0c:61:d1:d7:ba:d2:75:40:09:a1:00:
83:dd:2d:d5:8a:61:0b:06:2f:1c:ce:dc:8c:c8:98:
87:70:bc:a1:23:e3:75:da:ad:08:67:40:bd:eb:f1:
af:b8:ce:17:3c:f5:bd:e6:de:ca:4f:cb:f4:8d:b8:
35:c4:67:1c:64:f7:90:4d:62:ec:82:51:a8:93:4b:
58:71:70:c5:e2:9c:19:dc:97:fb:c2:f3:ed:9c:58:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:EE:43:0F:C8:E2:F1:EF:E2:B5:BD:3C:17:4F:FC:6E:6B:27:B2
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b8:08:cb:c0:2d:38:cf:2e:cb:a1:a0:03:ed:fd:47:3a:2c:
4d:fe:e3:70:42:2e:24:a5:c4:df:b2:65:23:03:0e:cd:2d:02:
fc:f3:17:17:92:2f:4b:18:f0:1d:92:44:c7:0c:33:e6:59:af:
12:b5:f2:d1:87:22:10:a0:be:c3:4d:21:c2:7c:f5:7f:37:16:
0c:98:7d:11:4e:53:a8:58:cf:b7:e6:e2:09:5d:ab:d2:25:29:
05:f2:98:f5:58:e8:2c:eb:9f:35:1c:9a:9a:34:b9:ef:19:e6:
2b:a9:a6:39:20:92:cf:d0:ec:c3:3b:ff:72:10:7c:57:af:15:
e7:4a:31:a6:ce:f7:ed:b0:00:a4:f7:ee:99:42:16:5f:9e:bb:
2b:73:5e:7c:5b:23:5f:2a:44:2f:ce:6e:17:69:c5:33:74:79:
de:32:69:40:d5:f2:65:73:6a:13:11:97:2e:ea:35:2a:ef:8e:
88:71:d3:18:33:4e:75:c3:28:a9:c9:cf:ac:e8:5c:f2:a3:48:
69:f7:88:3d:2e:78:49:8f:3b:42:f2:e2:8f:56:7e:81:f7:21:
33:70:2a:0a:92:50:75:9c:20:91:3b:4a:dd:23:24:8a:cd:80:
fa:d7:81:0c:5a:36:3c:93:e0:9b:6c:36:fd:3b:b9:4d:e1:be:
7f:92:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:43 2026 by rpki-client