Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: lQPda/ctAk8QseZ2bDcxd8ZPnRtAHB4Yf7+YRtEC8/w=
Subject key identifier: 2D:49:85:97:3D:5C:98:03:A0:B3:54:B6:93:BF:74:C3:0B:0F:D9:8C
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019CABD9E34C6CA680DFF5116317CB2A34F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0732
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (hash: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI=)
2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: PywcHfEq3PW3sApQwPSYcvPa5iYK34l1E3NZkfac6bQ=)
3: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (hash: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY=)
4: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (hash: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e3:4c:6c:a6:80:df:f5:11:63:17:cb:2a:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=2d4985973d5c9803a0b354b693bf74c30b0fd98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:d9:86:a0:f6:dd:64:3b:c6:38:bf:e4:76:
82:98:67:29:ac:14:11:01:6b:f8:53:7d:79:f4:10:
bb:ea:aa:da:0a:80:d5:85:cf:24:94:cd:86:f0:d9:
08:c3:bd:b6:63:a2:95:a6:56:3d:55:2a:72:d0:1a:
47:3d:90:24:69:9f:b9:c2:5b:d5:c6:b6:ca:17:50:
58:22:00:0e:b1:81:49:6d:93:9d:2d:3b:ce:08:b6:
91:fb:db:e0:75:23:09:1c:25:1f:e4:8c:0b:a8:03:
30:d8:2e:97:3f:cd:bd:9e:3f:6d:ce:02:31:0f:84:
5d:65:e1:ff:e3:81:f3:cc:39:1d:11:24:3c:3c:8e:
3b:27:44:af:a7:02:02:21:9e:59:e2:21:18:bd:35:
bc:fc:7f:95:8f:35:5a:d2:d4:10:ea:8f:79:05:76:
ba:a1:f9:da:ac:24:25:4e:33:e1:15:71:8f:eb:4d:
e8:de:43:91:25:ff:55:8c:6a:f4:72:5a:34:9d:0d:
dd:c4:6d:b2:99:10:dc:00:d9:ea:7e:77:e0:fe:2e:
79:a6:70:72:c0:e2:17:21:a4:72:1e:94:21:c4:ba:
01:1e:12:23:d6:4c:3e:a6:7b:20:f2:5d:d5:0e:7b:
bb:22:cf:82:34:77:c1:52:f0:54:34:2d:ad:3e:79:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:85:97:3D:5C:98:03:A0:B3:54:B6:93:BF:74:C3:0B:0F:D9:8C
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5c:ae:9d:64:60:02:eb:9a:6b:cd:dc:df:69:79:5f:b8:bb:
b0:b1:08:f5:83:26:aa:0d:c6:a4:37:27:f6:d9:0a:1d:5b:98:
22:17:76:7e:61:20:16:f9:b7:d2:53:32:a2:d6:32:86:fa:e6:
f9:7c:49:50:64:b1:51:ac:cc:b8:2f:81:43:51:20:65:a4:10:
1f:a9:32:f7:6f:93:01:4d:b9:c0:ec:53:a0:14:05:57:5b:8b:
96:de:cf:0c:1b:44:b9:56:d8:9c:28:2a:5d:f8:69:0a:a2:87:
05:ee:4d:15:5e:de:21:e1:70:33:1f:0d:dc:49:05:e3:d9:34:
6b:22:71:8b:f1:6a:87:7c:b4:1f:5a:7f:d8:69:39:ab:00:ea:
df:1e:f3:4d:6f:22:e8:0a:4b:5c:21:9e:70:93:1b:8a:ac:fa:
b9:40:c7:01:a2:b9:f4:12:39:9d:92:4c:e5:21:68:9f:bd:bd:
13:db:99:4f:e5:bd:74:e5:c3:a9:85:7e:2f:d6:2e:37:dc:35:
98:25:e6:1f:d5:d9:62:d3:06:00:8b:36:86:13:03:5f:5f:74:
4f:fd:6e:c4:42:ce:83:91:ad:34:e0:e9:55:a4:17:83:fa:d4:
e5:0f:89:bc:b9:f9:50:f4:7c:0b:3e:07:64:12:64:ce:2f:88:
63:01:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:15 2026 by rpki-client