Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: XSb1iCVQVByVOfqID4ztUsq4pD6WI1NFJvuzgJyZLjU=
Subject key identifier: A4:5A:74:1E:BE:4A:96:FF:BB:32:52:B0:92:69:33:8C:C9:12:41:C2
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019CACB5633A73EEE7EDE937E314B24ADE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 0822
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: +dSrTVFr0+kynvaxVzSUvRAKaow3qJ/5dzcG9R+FiC0=)
2: cGNM2kUYGwh1pqp3KDfnuGuO-40.roa (hash: RBzO91NF0DSPBv6o+tDtIFzqxm7krs8U6K6aFGD7SjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:63:3a:73:ee:e7:ed:e9:37:e3:14:b2:4a:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=a45a741ebe4a96ffbb3252b09269338cc91241c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:3e:c9:dd:e2:33:a7:b6:fe:5f:b1:c6:b9:
10:b1:8c:ee:75:9c:97:73:04:8b:e9:98:83:9f:da:
c4:1e:24:a5:c1:ff:fd:b7:a2:68:b8:a2:b4:1a:97:
38:38:80:eb:ec:f1:17:dc:5a:25:60:73:34:5e:86:
c8:9b:fd:40:35:44:db:9e:54:cd:79:2d:ab:1f:c8:
4e:85:69:88:5d:b5:d0:9c:e6:5a:d9:40:42:48:61:
13:28:b8:0a:96:5b:73:fa:45:61:d5:cb:fa:02:f8:
c4:6f:b1:3d:80:20:67:76:2d:03:c9:a0:93:0b:cc:
af:be:ca:01:a0:56:d8:eb:85:c9:08:22:71:cd:08:
e2:0d:5b:de:ae:0b:5c:96:f8:b4:ca:8e:6e:c6:05:
5b:4a:45:d6:d4:2e:a2:06:dc:9c:0c:0a:ca:ea:d0:
f7:0b:75:6e:c4:35:25:5e:04:74:0f:64:56:a0:76:
83:16:a7:a8:c1:26:c4:65:64:8a:e7:fb:68:ee:40:
3f:59:54:30:90:69:15:58:4a:71:21:dc:a5:72:81:
df:bd:1a:71:e0:ae:b3:a2:60:83:1a:8c:55:8e:39:
ab:c6:61:67:90:ef:23:a8:3b:a1:47:78:c1:71:51:
fd:81:ea:c9:bb:13:ed:e0:92:f9:44:43:5b:30:9a:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:74:1E:BE:4A:96:FF:BB:32:52:B0:92:69:33:8C:C9:12:41:C2
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:6b:88:12:aa:20:99:e0:51:bf:f7:f8:95:3c:a7:75:bf:
7f:ab:4d:1a:b8:97:61:43:d1:45:fa:58:19:0c:e5:a4:ec:61:
22:89:90:94:7d:f0:83:aa:85:6e:fa:9a:e6:a0:b7:cd:37:b9:
e1:1c:ee:cf:3c:9b:62:0a:82:86:ba:8d:a8:69:93:f2:b3:7c:
a9:96:c1:83:f8:59:9f:d9:74:cd:57:90:fd:9a:9e:4b:ae:73:
76:41:61:2c:0c:fc:65:9b:92:ea:59:04:95:ef:6a:4a:69:37:
e2:21:67:39:54:c3:64:7f:81:b0:e5:6c:0c:b5:25:47:54:f0:
b3:62:be:29:bd:80:fe:bf:c0:8f:da:93:f6:f6:ff:9b:0f:dc:
37:9e:61:bb:ad:da:fb:99:85:17:32:80:03:2c:60:4b:cd:2b:
86:0e:3f:ee:ae:fc:6f:24:d8:0e:10:a3:01:d4:ca:62:60:75:
7a:ed:0f:4e:20:97:a9:af:e3:a1:7b:d7:f5:ce:d2:22:93:e5:
e8:eb:00:2c:dd:4d:f5:12:6f:ef:d3:20:7a:97:9f:21:05:8d:
21:6d:15:23:ea:23:1a:39:06:c8:c3:09:16:00:20:e5:70:95:
4b:a9:8e:15:32:23:93:a8:1c:a5:be:3b:60:24:04:7d:f3:99:
36:f3:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:28 2026 by rpki-client