Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: XSheV1Pe+K8qbL8T1IGzCaWZ1rApDk9um4sUi8v64ec=
Subject key identifier: 93:49:AE:E3:11:88:A9:C9:CE:D7:D1:AB:B6:51:9D:7B:3C:EA:DB:EE
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 019CA9EB76F463B593A2ED55ACE9738736E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:01:46 +0000
Manifest this update: Sun 01 Mar 2026 15:01:46 +0000
Manifest next update: Mon 02 Mar 2026 15:01:46 +0000
Files and hashes: 1: 4k6D88-Mglvm1b3SeMgt30G2VwI.roa (hash: XMgdcG2fobHQupndrORqC3NlYthXxCSVasK7qXxsXZo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: wKnjJx3tvm6KE5DMrykPF4zZp1ltYqDxPYZhuxxLuTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:76:f4:63:b5:93:a2:ed:55:ac:e9:73:87:36:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Mar 1 15:01:46 2026 GMT
Not After : Mar 2 15:01:46 2026 GMT
Subject: CN=9349aee31188a9c9ced7d1abb6519d7b3ceadbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:0c:5e:41:aa:30:a8:44:21:88:07:1a:a3:
61:df:0c:ed:31:a9:de:6f:ce:3c:0f:bc:40:9d:01:
6f:8e:21:4c:e2:e5:70:73:9a:d6:13:ed:67:fd:d6:
a8:39:f7:eb:59:02:3e:ab:69:44:9f:a7:e4:ea:33:
49:a3:3b:e6:f1:c9:a2:db:94:a8:bd:24:9a:54:ef:
68:f3:71:b8:13:a6:54:31:fc:a9:43:c8:83:59:08:
21:39:b5:b7:e1:cc:0c:51:11:8b:af:81:91:ba:8c:
e5:9e:ac:63:05:a1:8f:e5:45:5c:3f:1d:43:1b:a6:
60:f4:7e:59:47:62:b3:4b:d5:9e:30:9f:79:ff:d2:
26:74:7e:2d:7f:61:24:91:b6:0d:11:21:c1:ad:f8:
c0:09:5c:3c:99:5d:86:48:26:93:c2:2c:0b:91:3f:
7a:e7:be:05:12:73:91:e3:6a:33:fa:1e:69:34:f8:
1d:76:c4:c0:5d:4e:22:1a:de:98:7a:ba:9a:97:c9:
e2:c7:ed:4b:96:ec:80:fa:4b:e7:61:02:8f:a1:be:
1e:55:b3:d7:f9:cb:cc:39:bf:fe:cb:2c:cc:8d:53:
bd:34:50:c5:6e:6a:e5:8b:97:0c:0d:b7:5a:81:d6:
43:87:35:46:d2:1e:93:22:60:86:65:56:24:82:d2:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:AE:E3:11:88:A9:C9:CE:D7:D1:AB:B6:51:9D:7B:3C:EA:DB:EE
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:d0:12:e8:71:db:f8:74:93:c8:03:7a:67:b6:b4:a2:fe:
ae:f4:c0:04:f9:01:13:98:5b:99:7e:4b:d4:29:ca:6b:36:58:
77:7b:fc:8b:fc:f7:c7:bc:cd:73:50:11:07:8a:0c:db:43:c8:
39:9f:4c:2c:50:bd:54:c6:47:a3:dd:7f:03:e4:c3:69:7f:05:
be:04:28:d1:5a:37:5e:9f:99:91:fd:cf:eb:4e:4b:45:8c:47:
20:8f:ac:67:3e:af:92:ea:31:56:70:6a:0f:a9:fe:30:0c:94:
9f:c9:4e:e2:3d:c4:22:c2:23:c7:31:3c:1e:91:71:b1:2c:cb:
4a:eb:ab:bf:73:f5:42:96:63:35:f0:e5:fe:05:69:aa:23:da:
03:c1:da:2d:ef:0d:c1:79:dc:e3:b4:c8:e9:00:d0:0c:77:32:
38:58:34:87:76:bc:2b:7a:7c:03:03:5d:4d:38:fa:d3:32:fb:
fa:fd:ac:65:9a:bf:ff:7e:33:9e:cf:bc:8c:0e:db:b1:93:0e:
65:7b:0b:14:93:32:0d:f4:8c:3b:35:0e:30:01:2c:f5:f2:9a:
2e:cb:87:80:ca:b0:61:f6:19:56:41:32:45:aa:51:c1:e9:3f:
be:45:cb:9e:c2:d4:9f:70:a4:84:ea:32:79:41:d1:39:83:2c:
81:9a:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:46 2026 by rpki-client