Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: J1j8P0TkBb1PCci+XaazKpYHFWog1K9xSACRAHKmEJA=
Subject key identifier: AE:B9:84:36:91:B1:F9:BD:E0:DA:06:F3:3F:A6:DB:F6:43:00:84:98
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019CAAC6CF986B9EB107EC6FD16E86CFD6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 1588
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: 9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa (hash: wE6I1csBO6GEmAQaIzNTh2tvdzqwUCjixq3m2Z3pzSw=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: JFDhpw+Pqq+ldmr1Ea/JcatcwzgH8s4Q6xRnCW+NZ24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:cf:98:6b:9e:b1:07:ec:6f:d1:6e:86:cf:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=aeb9843691b1f9bde0da06f33fa6dbf643008498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:a9:63:9a:dd:e5:30:e1:ef:21:ad:8a:40:
81:dd:4e:65:75:5a:be:71:c2:8f:fc:3e:04:cb:41:
d7:c8:89:cf:52:82:85:b8:c2:1b:8d:30:93:03:08:
73:d5:85:27:78:fe:bd:f5:e9:d0:b9:1d:8c:77:86:
11:d3:ee:07:92:5f:6e:c3:b1:f3:e4:df:85:a6:d8:
4b:52:e0:5a:65:66:53:47:88:13:c6:1d:df:97:e1:
13:8c:92:fe:be:5d:b6:ba:8f:3b:fb:f1:85:55:f1:
0f:06:1f:f4:71:62:a9:2b:68:f7:af:3e:c7:d9:54:
9e:3f:73:a7:60:61:d5:20:11:67:19:31:73:8e:4a:
eb:68:a3:9e:c7:12:68:c1:53:05:94:df:82:85:4a:
a4:66:71:33:80:22:80:fb:af:25:60:c8:37:82:99:
78:4c:a0:fa:43:8e:c7:ad:89:ae:5d:e2:14:70:d3:
ef:da:bc:97:69:e4:94:f5:eb:46:a3:c0:38:a1:a6:
c1:cc:01:0e:21:a2:fd:b3:d9:72:fa:68:bc:0f:96:
92:e3:6c:59:a6:a8:23:fb:d0:62:15:33:62:8a:ab:
b0:29:e6:68:de:bb:f9:1b:b7:ca:a4:d4:e4:a2:05:
7e:22:69:71:f6:35:db:50:a1:d3:cd:c3:ea:be:9b:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:84:36:91:B1:F9:BD:E0:DA:06:F3:3F:A6:DB:F6:43:00:84:98
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:69:f4:bc:b2:a3:6d:20:13:16:e9:c5:e0:5d:71:09:f3:
11:de:62:6e:6b:1a:9d:7c:9b:4d:44:b3:f0:cc:fd:79:ee:45:
36:48:8c:c6:e6:f6:ed:d8:57:2f:27:91:58:fa:47:6c:33:9d:
9d:a5:1d:e1:fb:18:d6:40:db:6c:da:cd:94:e6:6a:fc:5d:ca:
36:d9:3e:3e:16:71:f8:30:10:16:cf:48:fe:c9:82:0b:e3:36:
f2:e8:63:92:46:19:82:47:7a:c0:32:e1:6d:19:dd:d3:7a:5b:
ee:bc:26:cb:cf:ac:a3:47:95:43:b2:6b:db:f5:8e:7a:49:86:
07:0d:68:21:f8:e7:45:8c:5b:35:d8:3d:87:92:9c:a3:ca:58:
20:8d:d7:f4:11:03:62:b2:2f:9c:f6:8b:75:78:4b:76:ad:6c:
36:d1:ea:12:3f:00:0c:9b:9d:58:8f:24:bf:62:45:bb:a0:6d:
82:8b:4e:01:31:40:79:73:39:27:98:a3:97:de:4d:ac:1b:33:
3b:bf:d3:8b:c9:21:9a:5e:16:5e:ec:27:72:34:e2:f2:32:95:
92:d4:de:66:1c:48:79:62:53:28:6d:48:58:83:31:70:59:67:
b3:28:be:56:f1:27:77:fe:d5:0d:a5:41:ee:73:c4:17:46:21:
0f:d4:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:39 2026 by rpki-client