Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: Wv83+6tip92Dhjj4+BfS+jVNG93ADJugEf4/qosJfx4=
Subject key identifier: 6D:C6:DB:F8:BE:A5:7A:E9:DF:73:3B:D8:5A:7E:EF:54:BF:19:42:F8
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 019CAA585946B9F4537C9B5C76C07E0C6C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 1404
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: G0aKcDsl1PqdjVR3FQskokbeFo4.roa (hash: 1L7mF5eSE/OQ8Z7D7J6lT/W3zitG2LYDWe4kI69m0FM=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: 3q5skOjtav8BC5v1SK1E+8tQm3+GijKWtOAt3Dptwo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:59:46:b9:f4:53:7c:9b:5c:76:c0:7e:0c:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=6dc6dbf8bea57ae9df733bd85a7eef54bf1942f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:8c:8f:12:0a:7d:e1:99:82:14:c9:1f:4e:
54:ff:92:d4:d5:d7:f7:01:55:a5:0f:b7:e4:e4:01:
cb:c2:c3:84:f8:6d:9d:04:7e:31:2f:5a:17:b6:37:
cd:98:32:a1:5e:2c:16:1e:0f:e1:ea:0f:2d:cc:c2:
f9:72:f3:2c:ee:4c:27:1e:5a:64:f5:0d:54:a7:9f:
65:32:48:29:83:d2:79:b0:c1:d2:40:7f:63:86:86:
b5:a3:3d:b6:3a:6f:6a:6f:cf:f6:08:50:35:ba:e1:
f5:a7:fc:39:44:a4:43:1f:c7:b6:72:cc:72:87:81:
41:e4:46:7c:fe:5d:6b:ac:bc:8c:35:7e:7c:33:46:
51:4d:07:4e:f5:01:ab:a3:59:0a:2e:0c:d7:9a:04:
0d:93:b8:a9:a6:7d:80:ef:dc:86:23:17:28:31:b7:
8a:9b:65:cf:c8:3d:aa:49:bc:c5:84:ab:8a:ac:18:
9d:33:59:6f:26:39:35:f5:cb:50:49:d4:ae:94:cc:
9e:56:44:dc:b7:f5:26:eb:78:66:ab:d5:bd:25:9d:
49:83:b1:b7:3e:18:d5:d0:9b:bc:17:5a:00:e3:79:
9a:4b:c7:9e:bc:84:57:e5:1a:14:42:43:6f:d7:c4:
5d:a7:91:a4:a6:0f:4a:65:7f:08:3b:1e:7b:a8:da:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C6:DB:F8:BE:A5:7A:E9:DF:73:3B:D8:5A:7E:EF:54:BF:19:42:F8
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:e6:0a:f2:ed:6c:ef:e3:76:47:46:7a:ec:4b:4e:0b:1e:
1a:e5:b3:b8:61:22:e3:33:66:ec:5b:04:dc:18:65:60:c8:19:
fb:55:e1:14:c6:09:16:31:ac:f4:58:06:24:5d:ce:9b:c0:1e:
d3:78:de:6c:c4:8a:01:98:cc:32:ea:66:1f:c9:b8:ff:38:e2:
b2:12:2b:b3:a7:08:a9:06:93:ec:a1:21:b0:0e:22:f0:b8:09:
86:a9:0d:03:51:5f:a7:05:08:ff:8d:ea:a7:18:1f:2e:53:89:
85:48:7c:5a:b3:7a:4a:e5:6c:6b:2f:4a:12:c6:f6:48:3b:c3:
be:ea:10:ee:df:8b:ec:8a:ee:1a:9e:25:49:6d:15:4a:2b:31:
6c:9c:02:9d:d6:99:ca:d2:51:d6:f1:ff:92:82:13:cb:b7:d8:
56:85:fe:b4:6a:92:c9:19:94:4c:0c:a2:4c:ad:6f:61:1a:6e:
02:98:7c:7d:f7:b3:87:67:3c:8f:5a:c2:80:c3:e8:98:5e:49:
fe:d5:6e:63:be:6b:b0:5b:04:57:96:93:fe:43:bd:c7:72:39:
db:22:ff:65:c8:8c:5d:0b:1f:ee:4e:db:e0:de:69:d0:19:bc:
ec:31:1b:04:77:58:cf:5d:35:82:59:55:1f:b4:ff:ef:d5:45:
a1:f1:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:56 2026 by rpki-client