Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: hJtNeUXmDsYEoG4xQRXId/uEzh30PrOvVhu6lllILpM=
Subject key identifier: 07:60:78:E0:19:5D:95:87:77:24:25:11:5A:BF:58:95:A3:64:B1:57
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 019CAC0FF9859D9A5F2EF424FC1250EC9F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 1430
Signing time: Mon 02 Mar 2026 01:00:53 +0000
Manifest this update: Mon 02 Mar 2026 01:00:53 +0000
Manifest next update: Tue 03 Mar 2026 01:00:53 +0000
Files and hashes: 1: PnOOh7fnmZFCfeOa_wMzgqjdxqA.roa (hash: ggogQletXZT21dYbTRV1SNWHwV2S6gHYiktJ4MjCyQI=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: OpSyqIoiIGc++fDu8PDoT1gWaqWWauDdjPY+lrVdF50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f9:85:9d:9a:5f:2e:f4:24:fc:12:50:ec:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Mar 2 01:00:53 2026 GMT
Not After : Mar 3 01:00:53 2026 GMT
Subject: CN=076078e0195d9587772425115abf5895a364b157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:1c:f3:6a:b9:8f:1d:32:a7:36:d2:38:39:
33:5e:01:3a:f7:a5:12:53:0c:03:97:00:b7:c8:62:
88:14:a7:6c:fd:36:66:f2:ec:78:7a:eb:21:60:45:
d0:24:22:05:97:6b:e5:3e:b1:b0:15:df:ca:82:00:
91:97:84:36:97:3a:63:de:3f:d4:1c:ba:d2:d8:3b:
bc:d5:59:8e:2f:db:9a:46:60:89:31:34:dc:ab:e5:
35:e7:fd:bc:56:f4:61:d0:d5:d4:2a:5b:5b:07:15:
95:c4:d3:4f:69:b2:69:c4:4c:7b:75:80:6f:79:65:
c3:6c:cf:92:50:dc:a0:f2:20:36:a4:2e:ac:ee:37:
88:b9:1c:26:e6:c8:64:ea:10:1e:81:30:a1:15:6e:
8d:37:7a:f7:d5:cb:bd:8c:cf:ee:ab:92:e6:fe:ef:
3a:73:47:2c:c1:36:4f:47:4b:7a:77:01:0c:63:16:
30:66:da:3c:ad:68:a3:ac:8d:b6:3f:0a:81:60:44:
0f:6c:1c:3d:fe:75:2b:76:04:15:73:8a:1c:79:58:
a8:a9:09:43:95:c5:da:f8:7e:dd:f0:bb:55:61:6f:
6c:4f:ea:17:ca:ad:46:aa:46:fa:bd:33:7c:04:16:
4d:78:65:fc:24:ba:81:4c:cc:c8:c9:b6:c2:df:c5:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:78:E0:19:5D:95:87:77:24:25:11:5A:BF:58:95:A3:64:B1:57
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d4:ab:3a:e2:25:47:0e:7f:1e:58:b0:c6:fb:5d:c7:3c:86:
ae:a4:f9:7b:ae:7a:22:c4:09:2d:a8:18:1f:df:9a:6a:08:8d:
ea:48:40:81:6a:51:dc:68:98:8c:6a:ee:75:da:72:96:c2:d9:
e4:22:a1:d8:f3:60:68:48:c7:aa:26:52:78:97:ce:ee:f7:ed:
37:db:0b:b5:86:80:f4:2f:78:5c:91:e5:9a:f7:98:95:ab:49:
e9:86:1d:4f:ca:e8:97:05:cc:f0:58:a6:74:16:60:cf:d5:4b:
00:ef:12:df:b8:1d:30:fb:12:8e:05:82:b4:cc:52:72:8f:36:
72:3f:bf:bf:cb:4b:21:37:52:ad:b8:18:a8:d9:b7:2c:0f:73:
05:19:61:34:c3:48:e2:fa:6f:30:75:cc:4b:64:bc:2d:7c:b1:
36:cf:a5:4a:5f:51:bc:61:57:6b:6a:c9:63:e9:dc:f7:8a:13:
cc:22:1f:dd:b9:53:fe:1b:35:60:9f:1d:b6:ad:f0:5f:d8:d6:
e2:72:c3:dc:c4:62:74:0f:15:4c:bb:d4:90:1f:88:46:0e:0a:
29:c8:47:c4:0a:f9:47:a8:df:d2:9a:ae:90:50:50:a8:fb:f5:
4f:62:18:f1:c8:48:be:a8:75:82:a3:d2:59:a0:5b:ed:e6:fa:
07:3b:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:04 2026 by rpki-client