Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: 6LeWU3rOY/fOeCQHmx2YTdVvGK8AlkI4LdCFefn6+0A=
Subject key identifier: E8:19:85:64:81:09:93:12:2A:B8:40:4D:7C:3A:0A:3A:D1:8C:6F:5D
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019CAE35A19BCB5C6FE0BDD713E8A7C53AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 034D
Signing time: Mon 02 Mar 2026 11:01:16 +0000
Manifest this update: Mon 02 Mar 2026 11:01:16 +0000
Manifest next update: Tue 03 Mar 2026 11:01:16 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: X5/LOGt/bo6tJe/X1bdixi9r363SIuHWv0rNKJZH+s8=)
2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:a1:9b:cb:5c:6f:e0:bd:d7:13:e8:a7:c5:3a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Mar 2 11:01:16 2026 GMT
Not After : Mar 3 11:01:16 2026 GMT
Subject: CN=e8198564810993122ab8404d7c3a0a3ad18c6f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:cc:94:4f:72:9a:c9:2c:06:f8:2c:2d:82:
d7:4c:a4:6c:b6:15:82:17:1b:80:38:b3:f7:30:b1:
50:85:27:dc:12:c9:cc:b5:6c:5f:9a:81:ef:e4:1e:
a9:c6:fc:a7:85:d8:6e:6d:60:b6:75:95:09:39:ef:
db:36:18:17:28:ef:36:38:7b:19:a5:20:ef:3b:e4:
0d:71:92:f8:0e:a1:c1:86:8b:93:d6:17:d6:3b:6d:
7f:02:83:73:33:e7:2b:6c:27:62:d5:ab:ce:4d:c0:
64:a9:c5:e8:12:23:f1:19:cf:39:c3:dd:fb:2b:9e:
1d:88:b7:37:a4:8a:64:11:10:93:8e:49:04:a6:64:
60:84:f4:60:83:51:e5:34:d1:7f:49:92:6d:4e:4a:
8c:69:a7:1c:6e:11:c8:91:76:ff:05:cb:20:12:e8:
a8:be:b0:f4:f3:cb:b2:16:fb:05:50:d5:c0:0a:a2:
91:2e:4f:10:07:c6:0b:4d:ae:9e:33:71:50:32:d4:
be:5f:8f:b4:91:81:99:af:4e:aa:4f:53:b4:ef:15:
ea:ff:48:e4:b0:92:ce:c8:43:2b:43:65:52:8e:19:
72:de:02:aa:0e:5b:46:ed:bf:0c:d1:c9:a9:f0:82:
5e:17:fd:b1:c8:97:fd:20:e3:7f:6b:49:d2:11:26:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:85:64:81:09:93:12:2A:B8:40:4D:7C:3A:0A:3A:D1:8C:6F:5D
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c7:f1:dc:06:20:ee:00:28:26:69:81:5d:22:ca:e3:3c:32:
49:0f:bb:5b:c0:72:d9:90:45:6f:03:57:a8:76:ac:2b:77:e3:
61:0b:3f:90:07:82:5c:d8:77:f5:0d:c0:a2:d2:67:78:48:1d:
07:b3:d1:89:0c:8f:ed:96:9b:e8:9f:3c:28:7b:2a:f7:35:e3:
f1:de:e0:34:a5:19:33:ae:5d:77:f8:4c:37:49:3d:e3:97:a4:
b8:c6:3b:ea:28:c6:55:5e:fc:88:15:7b:1c:c6:6f:d1:6d:2f:
2b:d8:be:ef:83:e1:81:f4:1a:54:41:ab:77:85:65:59:83:b8:
c0:52:ae:2b:44:13:e7:35:5d:43:43:98:00:b5:49:2f:22:d7:
e0:3f:5d:a5:57:65:8a:78:83:f4:29:2a:77:72:9c:58:7d:00:
87:50:ef:0c:19:73:0b:92:14:54:ce:a5:8f:01:fe:38:05:6f:
c7:16:8f:bf:9d:ef:4f:d1:22:d0:0d:03:3b:7e:6b:62:8d:f6:
21:a0:64:40:f5:e0:d1:5c:fc:b0:64:7f:97:1a:9b:e3:ed:0b:
c3:07:78:b7:79:bc:30:9c:96:6d:eb:1d:00:99:40:b4:24:32:
09:fe:21:62:6c:10:68:b3:e1:18:ae:70:34:07:ae:81:a8:48:
ed:17:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:46 2026 by rpki-client