Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: zIYmxRIAwnwPqevUUDi8bcF/TkWC5OaN/jN22MV2xC8=
Subject key identifier: DC:CA:4C:67:A1:16:40:4A:E7:E7:59:72:BE:9E:7F:39:07:58:02:EB
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 019CAC471E9227C9C5723A3CB4161F1A0540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:07 +0000
Manifest this update: Mon 02 Mar 2026 02:01:07 +0000
Manifest next update: Tue 03 Mar 2026 02:01:07 +0000
Files and hashes: 1: XjOsjbNyG_7Z0Y40E5Yh6TkZfqk.roa (hash: 9owU8FSQINO3lTfR9sqtsGohFZw4GCK7SpkPSGYFxPs=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: o1jNCFyI++JgniWb0eRtjj3SOICzEiIL+wEByK6VftY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:1e:92:27:c9:c5:72:3a:3c:b4:16:1f:1a:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Mar 2 02:01:07 2026 GMT
Not After : Mar 3 02:01:07 2026 GMT
Subject: CN=dcca4c67a116404ae7e75972be9e7f39075802eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:a5:7f:13:19:9f:2d:c2:1f:d4:d0:72:1d:
27:3d:b0:e5:ac:da:96:08:1e:e2:e1:bf:10:f1:09:
72:b9:d0:13:bf:a3:94:9d:18:b1:a3:1a:b0:9a:09:
73:ca:61:0a:3c:e8:fd:65:47:12:06:fa:ef:7b:45:
34:c6:9c:c3:c5:70:fe:70:e0:36:1b:ec:6e:94:77:
43:8d:a2:04:8e:bb:84:c7:6d:eb:10:da:fc:f6:06:
8e:b8:37:f1:55:dc:bc:a2:b3:9a:20:b3:6c:84:ca:
76:94:3f:09:72:d4:b2:0b:7d:44:f1:9e:d1:f5:a5:
ad:95:b0:ce:91:95:c7:aa:f7:0f:f0:b1:fb:2d:bd:
66:e1:2b:17:9d:28:7b:f1:ca:a8:ed:b3:32:e7:ec:
30:f3:e1:d0:01:ec:22:37:bd:cc:90:a7:3f:61:19:
a5:8f:fa:ac:77:b2:9e:86:7f:6d:e4:0f:77:77:8b:
71:ce:a2:e3:42:d4:c7:2f:81:8c:61:b1:30:28:b5:
0c:fb:20:32:1c:ba:ca:d3:2b:14:e0:7e:2e:6d:91:
10:6b:99:b1:f1:29:8f:a0:b6:75:e4:0e:3d:b0:4a:
54:ec:8e:86:34:78:26:40:7c:5e:46:e2:1d:05:b2:
35:4a:38:66:5c:da:d1:dc:1f:af:bb:8b:04:e9:16:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:4C:67:A1:16:40:4A:E7:E7:59:72:BE:9E:7F:39:07:58:02:EB
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:8e:b2:32:4c:4c:b5:84:00:b2:29:e8:58:3e:a9:84:10:
ef:a6:5f:14:0f:0b:58:bf:a1:0a:7d:68:b7:f1:c7:01:e7:8e:
9f:61:f0:c6:98:76:18:95:82:9f:9d:38:37:6f:b0:6e:ed:22:
62:d4:07:28:e2:a9:18:f2:45:a1:a9:5b:fd:b3:43:66:45:2b:
48:3f:19:54:4e:fe:c8:31:4b:fc:ea:01:5e:5a:71:0f:72:b2:
b4:8b:9f:86:6c:5a:34:41:d0:be:19:28:a8:53:71:29:8e:b6:
52:d6:c0:aa:c5:22:3c:82:48:10:04:c4:e8:be:94:a2:a2:47:
fe:63:b3:07:61:cf:2d:e2:8c:3e:84:d7:d1:48:de:73:44:ad:
46:4a:ea:47:e6:15:13:8d:d1:70:46:66:dc:48:b0:4e:c1:12:
89:ae:f0:2e:a0:c7:58:5d:52:2c:19:b4:e2:4a:f3:6f:dd:d9:
04:6e:4d:8a:1e:47:61:44:4a:3e:e3:94:88:e2:94:e6:c4:02:
71:d7:32:a9:0c:89:bd:8d:08:f5:42:cb:d9:25:0f:3b:5c:1a:
aa:52:1a:f7:bc:9a:a9:00:51:b7:b0:28:e3:42:e1:b2:37:c8:
3d:ed:e3:aa:70:0b:0e:70:4d:82:f3:be:1a:61:11:25:54:30:
e3:13:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:19 2026 by rpki-client