Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: g2boWYLi877cIo9nTAEmGEK/CStZ0FdOm/PuwPaUGN8=
Subject key identifier: 19:C8:D4:93:6C:94:5E:D6:F9:42:6A:A5:4C:E0:CC:E8:87:D5:A8:CE
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 019CAC7E2D5BF1323A8AD1217D4973175057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0C33
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: InPFMpdJAXXO_yXbxGZuHeN8kBs.roa (hash: vCdlR4+URzLW/X9eKQ1ExsBHfsRxyqUAmI7ldq8lqGc=)
2: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: N9RQ4g6muDVA0hy1pFiAHhwxuclm/MoFthtx68DJFdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2d:5b:f1:32:3a:8a:d1:21:7d:49:73:17:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=19c8d4936c945ed6f9426aa54ce0cce887d5a8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:c3:20:b1:6f:51:cf:66:41:66:c0:56:fd:
f6:0f:35:55:6b:9e:db:8c:4c:d1:5e:ca:a7:9e:e5:
48:f2:ee:bf:77:fe:2b:c5:fc:f9:88:87:c7:c2:07:
7d:60:6e:46:22:1f:61:34:0a:4a:9f:9c:10:80:8a:
d0:7b:4f:1c:62:60:0b:52:e4:ad:20:1c:b6:81:b1:
9a:e8:26:fc:19:5a:e8:3c:45:48:96:b1:2b:d0:73:
28:7f:e6:65:86:b0:70:ba:18:ea:c9:15:2b:f9:7f:
e1:a0:ad:3d:61:bd:c6:95:fc:ea:cb:cd:ad:d3:e5:
92:ed:86:0d:25:d3:ea:2a:d0:bc:73:c1:2e:fc:2e:
0f:ad:7d:8d:7e:0f:5f:62:a0:0a:67:10:5f:84:11:
75:a0:20:62:de:8c:60:f2:06:ce:41:31:42:ef:60:
05:a0:0d:ac:c5:06:5b:ad:bd:66:1c:1b:9e:c3:d8:
b4:03:a5:f0:e0:8f:3b:c9:3e:a8:3d:aa:bb:5a:6d:
73:ff:50:6c:b8:13:31:6b:67:ee:04:16:77:bc:ea:
52:91:30:e0:dd:e8:ab:ec:cc:de:ee:9a:6f:8b:43:
2a:c5:3b:0c:ef:02:b8:02:36:1a:9c:f2:15:04:be:
cf:99:81:2f:2c:ad:5f:b6:b4:65:73:3c:b1:f3:1e:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C8:D4:93:6C:94:5E:D6:F9:42:6A:A5:4C:E0:CC:E8:87:D5:A8:CE
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:37:06:5a:a5:c6:69:7f:f9:7f:d2:d1:76:ea:f9:29:7c:ae:
7b:b2:ac:fc:af:db:4e:66:0e:ae:f1:58:75:64:15:37:46:55:
cd:65:74:17:db:2d:f7:3b:5c:d4:f0:2b:29:88:f4:d9:62:bf:
9c:b9:ca:78:34:ea:f7:56:f2:b5:2a:af:cf:24:27:04:0d:bd:
89:ce:18:29:28:8a:1a:c1:06:e4:ac:7d:33:c5:9f:46:69:70:
79:14:14:31:ec:b4:74:64:1d:35:c3:72:4f:14:e2:fc:39:37:
29:09:f6:b4:63:f4:f9:bf:ab:03:34:4d:ef:0a:b5:d0:6f:b4:
5c:64:0c:3e:ed:69:a5:a9:d6:ba:75:c6:5f:c9:23:15:9e:b8:
72:f8:62:3a:a4:0f:fb:5a:5f:e1:5f:be:ff:c9:fa:91:27:48:
69:70:f6:29:ea:3f:98:50:aa:d3:12:87:07:4a:b5:a8:08:29:
24:23:1a:17:30:f3:42:c5:ad:93:62:ee:00:d7:77:d7:84:c7:
bd:1b:19:58:7d:cf:8d:f8:ea:32:a6:64:e3:9a:bc:75:2d:27:
44:53:ec:7e:63:b1:4a:11:02:90:27:56:ed:60:3e:57:60:18:
23:3a:ce:3e:73:08:01:da:76:35:9f:eb:38:61:de:61:12:ed:
af:95:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:24 2026 by rpki-client