Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: GAwbdc5dD1BlKK5zV2DNVq9cWBbcKyF5/o6bmwms5QM=
Subject key identifier: 93:BB:DE:74:30:54:14:C7:66:86:F4:BB:12:5C:FE:EF:C8:26:22:26
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019CAB3499FBDBCA58DDDF7435D53E6178A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 16FC
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: /s6avf1tm9ztkF0DbY0m+TF2oSatyN3nW/b6rIczULQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:99:fb:db:ca:58:dd:df:74:35:d5:3e:61:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=93bbde74305414c76686f4bb125cfeefc8262226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:fa:c6:8d:cf:d9:ff:a1:ba:ff:dc:e7:b0:
27:3e:09:b8:bf:16:5a:4e:08:8e:bf:8d:f6:44:62:
74:8d:ac:68:c7:e6:95:de:5a:2b:03:1f:37:09:1f:
92:83:10:22:8d:d7:a1:68:44:d8:d9:cb:05:62:90:
44:d2:56:26:f2:f3:85:98:bb:a2:84:27:6f:c3:cb:
25:13:41:1f:6d:35:73:5b:1b:35:b6:88:67:6e:05:
50:8d:19:9f:7f:c0:3d:26:0d:64:aa:fc:38:d5:92:
58:13:01:ce:52:2b:78:fe:8a:07:26:c8:5e:19:03:
b5:f5:f5:54:fa:69:4d:9b:ea:c8:83:ba:19:10:8a:
c8:9c:89:c7:18:42:8f:50:15:f6:d3:65:20:80:7b:
28:9a:35:e4:e3:e0:bf:4b:04:18:61:d3:05:12:73:
9c:c6:f2:14:b3:8b:c9:f0:de:d4:75:cf:2d:c9:e1:
09:5a:24:d7:08:e1:00:c1:84:44:85:fb:63:b5:2e:
64:d5:0d:03:8d:90:8c:80:8a:51:0b:f1:35:55:2c:
b0:1c:3b:1e:13:4e:05:0b:3e:78:f2:4e:7a:7b:c0:
dd:70:cc:03:bf:f0:ef:8b:cb:62:2b:3c:de:56:a8:
3f:45:f9:73:ca:4a:80:39:13:e5:ae:fe:63:84:74:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:DE:74:30:54:14:C7:66:86:F4:BB:12:5C:FE:EF:C8:26:22:26
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6e:2c:e0:14:63:bd:80:73:2d:62:ce:75:68:59:cf:c9:a8:
63:db:a4:6d:a7:ed:55:88:e5:b5:00:3e:a1:7c:6e:46:d4:6e:
cf:0b:f1:01:2d:a0:8b:28:56:86:ac:dd:e3:c8:24:6c:1d:3c:
8f:87:77:ec:1d:dd:53:fd:74:cc:4e:4c:7c:78:bf:08:89:d2:
68:7d:7f:40:33:b9:69:57:ff:ec:e0:25:97:17:09:a8:90:81:
df:73:81:33:c1:73:f6:d8:f1:5b:f5:d7:00:4d:81:f9:97:60:
98:38:fa:59:ff:5b:71:65:d1:26:cf:8e:31:b6:2e:71:26:96:
94:22:32:cb:bd:17:e9:65:1d:b4:14:59:1d:17:e7:c0:b9:93:
69:6d:48:7c:f3:54:d3:95:6a:76:b2:27:a2:b5:02:a1:18:88:
44:85:20:bd:a1:de:c5:96:b2:34:5a:f5:cf:76:42:b4:be:b6:
07:8e:06:09:1d:bc:71:8e:8a:67:57:44:dc:6f:42:b3:9d:80:
37:ad:92:1f:55:03:3e:69:2b:15:89:a9:0f:34:93:ae:cf:dc:
47:d8:4b:6b:38:55:a2:78:0e:ea:b5:8c:2b:34:d2:c5:37:8b:
4b:c3:a4:6a:f1:2e:c1:24:01:09:25:59:53:68:fa:63:7c:65:
3c:ba:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:47 2026 by rpki-client