Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: pknjJzcswpMz/Jvzys4t6cDUyi/gKcjhehQun54QIFg=
Subject key identifier: 23:05:A2:20:79:F9:5F:7E:ED:2A:50:54:E5:25:4B:B2:AE:10:0E:68
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019CAD22E3E029A929D76A50DA7750D5F879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 1171
Signing time: Mon 02 Mar 2026 06:01:10 +0000
Manifest this update: Mon 02 Mar 2026 06:01:10 +0000
Manifest next update: Tue 03 Mar 2026 06:01:10 +0000
Files and hashes: 1: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=)
2: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (hash: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko=)
3: _K2f6DqGYftLvCgaU9NJUnwx5uI.roa (hash: +bNWQeR+tOZFOesz+uNPp44EnwcVKTlHLLbRiXOcV/w=)
4: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=)
5: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=)
6: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: GnguCHs8zbu79Hnf4Z4QjeFtLaymViPZbWnWbdfGOUY=)
7: pVWucn62UZlUYEkLwtnRBuH29Ec.roa (hash: fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=)
8: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=)
9: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e3:e0:29:a9:29:d7:6a:50:da:77:50:d5:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Mar 2 06:01:10 2026 GMT
Not After : Mar 3 06:01:10 2026 GMT
Subject: CN=2305a22079f95f7eed2a5054e5254bb2ae100e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:d9:61:7b:34:b8:9a:02:8e:c4:f4:c3:59:
1d:4b:0c:1f:a8:46:81:1f:10:92:d3:87:2d:5d:66:
e1:ef:ba:52:e7:d2:be:03:57:f2:85:7f:9f:2e:c7:
20:4e:43:a9:5e:5b:35:07:74:41:b3:96:34:ca:fd:
e3:43:67:c4:2b:51:2c:3b:96:41:37:7c:91:6b:48:
68:2c:d9:63:cf:5e:1d:1a:37:3f:5f:66:60:ad:94:
dd:dd:9c:97:7f:35:60:97:2c:aa:fb:ac:1e:ea:1d:
fb:03:e3:84:dc:ed:79:85:52:3a:d9:2f:ad:93:81:
b4:e2:c3:13:0b:f8:fc:88:2a:9c:d5:48:a2:bf:0e:
db:d1:4d:77:dc:d1:34:1f:6a:e3:a7:32:f8:15:22:
cd:79:b3:f3:01:93:f0:73:f7:92:fb:f2:dd:4a:4e:
68:75:ee:76:53:3a:5c:5f:5b:bb:06:9d:60:c4:15:
88:d7:9c:d8:f7:53:ea:a0:b7:88:90:92:0f:8e:f6:
96:27:8b:c2:f8:f5:4b:8f:e2:3c:44:53:42:b4:05:
4b:e3:d4:35:8b:45:b9:40:09:ce:2e:27:c5:88:12:
77:26:68:0a:d4:6a:28:56:d4:69:42:33:7d:03:6e:
d9:f5:74:12:57:ba:3b:0e:4d:f8:a7:b7:ec:ef:45:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:A2:20:79:F9:5F:7E:ED:2A:50:54:E5:25:4B:B2:AE:10:0E:68
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:d4:d0:cc:3e:f2:bd:d7:ba:54:7f:b8:68:d3:e6:41:53:
f0:7d:76:53:aa:d3:e2:ad:99:49:2a:89:e7:e1:5b:a6:61:98:
ec:19:1d:d9:d8:db:8a:c9:28:16:a1:4f:98:0d:5b:01:a7:46:
35:87:b3:49:24:7b:52:b1:f2:20:91:6e:9e:c1:1b:41:f6:a7:
8c:b1:c4:e0:0f:e0:41:3f:da:09:77:a1:db:b3:db:83:a9:6a:
dc:c7:47:72:20:66:cb:fb:7d:89:f8:7d:39:c3:ef:95:97:5e:
42:36:f3:50:80:0a:c8:3b:ab:3e:18:84:ed:f4:32:f5:23:28:
cf:9e:72:7e:7f:23:e6:20:6d:33:da:70:8a:16:be:5f:f7:53:
10:28:25:19:22:56:86:84:97:65:73:91:c5:48:b3:54:12:ba:
3d:31:ae:31:e2:05:2b:de:cd:6d:52:d1:b4:c7:d2:63:5c:1e:
a4:75:bd:63:2f:70:1c:a2:92:af:19:89:ab:38:a7:d4:70:bd:
03:71:62:b3:63:5b:05:70:88:21:07:6a:4a:57:16:f6:3a:23:
f7:81:26:2b:06:92:0d:c6:55:9e:78:e3:46:08:75:f9:93:5e:
d1:8d:ed:fe:42:2a:5e:3a:ae:58:e1:85:69:da:03:03:0a:83:
89:ff:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:16 2026 by rpki-client