Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: Igh+t8vjAHKL0kGRJ93sKcA/GyJWxempKE02zNSvzxI=
Subject key identifier: 53:89:7B:45:2C:17:94:98:C6:47:FF:01:EC:FF:0B:DB:9C:DE:04:C3
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019D984FCBA99ACEDEC71985015CFD4700CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 1603
Signing time: Thu 16 Apr 2026 22:00:59 +0000
Manifest this update: Thu 16 Apr 2026 22:00:59 +0000
Manifest next update: Fri 17 Apr 2026 22:00:59 +0000
Files and hashes: 1: 9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa (hash: wE6I1csBO6GEmAQaIzNTh2tvdzqwUCjixq3m2Z3pzSw=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: 7dWBGSRja4ZWOg6GTQ80oLxNzC2i7CT+2YqDCHQddE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:cb:a9:9a:ce:de:c7:19:85:01:5c:fd:47:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Apr 16 22:00:59 2026 GMT
Not After : Apr 17 22:00:59 2026 GMT
Subject: CN=53897b452c179498c647ff01ecff0bdb9cde04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:1a:93:0e:f5:32:a7:d4:98:74:2e:38:67:
3c:11:87:d3:88:af:96:f4:3a:db:8a:ad:c9:b1:28:
49:ff:47:b8:08:7f:88:e2:95:b9:07:7f:7e:56:48:
ac:26:3d:d7:4c:12:39:81:1c:9a:dd:f6:de:f6:87:
da:f9:3d:16:69:83:9c:e9:14:9d:63:d8:b7:52:80:
9d:ca:14:0b:18:cf:29:70:4e:28:92:0f:53:e0:93:
a3:93:6a:77:b5:b7:4c:ff:20:47:fe:d7:86:cb:ed:
98:b6:31:cb:ab:60:a4:49:54:43:6b:40:e8:60:fd:
ee:31:e0:bb:03:c0:27:87:23:d7:ef:b5:b4:70:d7:
7f:31:75:30:e0:99:33:90:80:79:99:f0:ab:fd:89:
f5:87:8d:4d:55:b3:f8:b9:e7:05:9e:8d:04:1c:10:
35:61:9c:4b:2d:a7:ce:86:4a:9e:f6:f4:68:7f:e9:
82:23:5f:91:36:4d:03:28:78:85:b1:1b:c3:9a:83:
a2:83:f2:c1:5e:fb:ad:ff:6a:88:d5:6d:d5:d7:db:
47:38:67:cf:a9:73:f1:eb:97:24:ae:f7:4d:76:62:
fe:78:d5:a6:bc:36:b6:b2:6e:2f:e4:2f:a1:8b:70:
37:97:b4:2d:44:f3:08:4c:52:9b:3f:9d:19:c6:8a:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:7B:45:2C:17:94:98:C6:47:FF:01:EC:FF:0B:DB:9C:DE:04:C3
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7c:b4:e7:de:18:f3:1b:52:80:b0:57:6c:1e:24:83:92:49:
52:c6:52:eb:b9:2e:87:fb:72:79:31:20:a6:2b:5f:f9:1f:a5:
58:d0:80:1e:b5:15:a5:11:f3:a3:0c:66:48:6b:c7:0d:b7:8a:
87:8a:f3:4f:5c:cb:c2:61:73:15:08:6a:37:d5:62:0b:16:65:
ee:46:e8:4d:da:4e:81:6e:c7:9a:5d:96:79:c8:c2:d1:39:30:
3f:dd:ef:13:e9:a5:28:24:7a:81:bf:4d:1a:89:28:f3:69:e0:
09:66:cb:04:9a:1f:0d:3c:43:ef:f5:b3:c5:f9:41:1f:14:50:
9b:47:c1:73:82:24:40:a6:17:48:31:1c:16:99:0e:11:3c:a5:
56:19:ef:3a:bf:06:46:6e:b2:6f:04:79:09:89:57:23:af:c5:
a6:07:8e:b3:72:85:27:82:52:b3:c8:2a:d2:4c:be:7c:8a:82:
8d:ec:33:48:94:75:8f:be:96:f4:71:6e:31:34:39:ff:05:a8:
5b:90:2b:5e:69:08:88:bd:ff:93:71:4a:3e:26:e3:cb:54:e1:
6b:00:94:d8:8e:7c:33:aa:1a:b4:d6:75:f3:17:aa:01:5c:be:
f3:e3:0e:d1:c0:05:79:11:c5:f1:43:a3:cc:a8:10:7c:59:84:
10:05:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:26 2026 by rpki-client