Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: /fBXS303SAXkBiDkdtLKPJ0UFgxNdwS0U4rw03eevyQ=
Subject key identifier: D6:B6:D2:8E:BE:0A:C0:9B:C9:08:E9:A1:C0:E6:EF:C4:CE:A7:E7:EE
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019CACB541D353A3424491B53AD4E0E07B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 17CB
Signing time: Mon 02 Mar 2026 04:01:25 +0000
Manifest this update: Mon 02 Mar 2026 04:01:25 +0000
Manifest next update: Tue 03 Mar 2026 04:01:25 +0000
Files and hashes: 1: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: LNJSmdVG+NoGdhNmGk42oy86fE+TOYov+RUE13K1JAE=)
2: zX13-oU7cBG6cIg8ROGm1tDQrik.roa (hash: iojJpLqSVjV4cIjGJVDdqQHg6vG+JzagzhFK3HWdZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:41:d3:53:a3:42:44:91:b5:3a:d4:e0:e0:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Mar 2 04:01:25 2026 GMT
Not After : Mar 3 04:01:25 2026 GMT
Subject: CN=d6b6d28ebe0ac09bc908e9a1c0e6efc4cea7e7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:de:1f:2b:cf:a2:3f:ca:44:66:df:de:c7:
62:81:5f:4e:b9:36:26:32:40:9a:32:b1:fd:fb:74:
bd:15:85:97:4a:68:0e:eb:c3:8b:72:f0:8e:c8:6d:
eb:8c:d5:1c:3e:2f:7f:59:f8:35:8e:95:0c:21:b1:
e8:e0:bb:37:16:57:d4:c5:4d:44:55:bb:83:e9:ae:
62:32:7c:6e:ca:ce:d8:f2:1e:63:f9:06:03:34:32:
51:00:ae:c7:c6:ab:1f:6f:f4:00:2e:5f:5e:2d:4b:
c0:82:93:b9:67:eb:c8:e7:8a:94:fc:46:0a:80:cc:
cd:79:0a:b0:1e:df:74:29:68:20:b5:8e:e0:aa:bc:
6e:fe:30:45:ca:8d:62:e1:ad:07:06:b0:fd:1a:f0:
f7:bd:b7:45:9f:c5:63:01:df:eb:e0:cd:ef:fa:60:
56:73:14:0f:6b:2c:c5:46:8d:fb:8d:3e:4d:c5:d5:
32:89:ea:21:1c:d1:39:5a:a0:a4:27:e1:aa:31:0d:
d8:6e:b3:c0:c7:8d:ad:76:a0:7e:d4:49:11:80:0f:
ae:cb:1d:f4:03:94:6b:75:96:19:69:33:ee:83:da:
eb:b9:60:c9:d1:2c:bd:2e:27:70:38:4d:ec:16:49:
d0:5c:84:b0:08:f8:11:db:6b:33:0a:d2:39:6c:07:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B6:D2:8E:BE:0A:C0:9B:C9:08:E9:A1:C0:E6:EF:C4:CE:A7:E7:EE
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:60:25:66:e6:27:da:ae:99:a6:45:c9:ca:4b:aa:1b:68:cd:
f5:c2:09:a3:8e:79:ed:c5:a3:2e:de:e0:18:15:0f:1c:80:6f:
7d:8d:b5:4d:20:ec:ba:17:a6:86:9f:f2:9d:97:61:0b:ab:c1:
fa:87:8b:56:cf:75:25:10:a3:11:81:ab:84:cd:e4:e3:1a:60:
0f:d5:44:81:6e:30:c7:bf:9a:4d:d2:87:4b:9a:41:d4:aa:e8:
e1:fc:13:35:da:ff:0b:69:cd:8d:07:e7:95:e6:f3:fa:bc:9a:
30:4e:34:50:79:24:46:cb:91:7d:f4:17:5b:05:8e:00:2e:6a:
ca:c3:0b:79:7d:1c:f9:56:b8:b6:53:29:94:4d:b7:11:82:3f:
a6:be:2a:13:7f:62:9a:7d:1e:20:89:ad:82:4b:fb:52:ef:b0:
d6:5b:a7:62:0f:ec:88:32:f7:96:30:9f:17:6d:8a:fc:e2:fd:
7e:d3:9b:45:64:a7:42:55:fe:d3:f4:3a:2b:d8:38:93:9e:21:
8c:e9:be:a0:c2:c0:87:bf:6b:bf:5d:54:ae:df:cf:df:0e:58:
ff:6a:1b:d0:a6:c7:16:fc:8c:9b:05:3c:ed:de:7f:32:8f:4e:
cd:59:79:cd:16:50:fa:0b:50:b3:4d:49:e2:64:1e:29:ff:a6:
b8:b6:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:59 2026 by rpki-client