Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: ss5yzuprVo8dKyKa9jHHHIn5SsvS9x/zPgEnRmpwmZk=
Subject key identifier: FF:2B:34:05:B4:06:35:11:3F:7A:E1:09:26:A5:F4:1E:01:AD:BC:A4
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019CAEA371ED4CB4EBC95CF83F0FAE101601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 02FF
Signing time: Mon 02 Mar 2026 13:01:12 +0000
Manifest this update: Mon 02 Mar 2026 13:01:12 +0000
Manifest next update: Tue 03 Mar 2026 13:01:12 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: nUiv05QC5rGTYmZXAmvVciUw5MPK0rDiwvHQoGF/YKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:71:ed:4c:b4:eb:c9:5c:f8:3f:0f:ae:10:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Mar 2 13:01:12 2026 GMT
Not After : Mar 3 13:01:12 2026 GMT
Subject: CN=ff2b3405b40635113f7ae10926a5f41e01adbca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:3b:c7:15:6d:96:a6:c3:62:9c:1e:64:83:
97:98:3a:0e:40:f5:1f:d7:97:3f:18:e6:ea:eb:1c:
59:51:c5:20:3d:6a:41:10:11:c7:09:44:73:6f:5d:
1d:05:81:dd:97:79:3d:1d:28:eb:32:8c:c8:da:58:
ff:f9:a1:77:2b:a3:86:d3:55:1d:c6:d5:c2:b3:e0:
f3:8b:1e:e5:5f:66:67:b8:49:04:23:9d:6e:c4:92:
49:9c:b0:d6:6b:fa:f3:c3:5e:f4:d9:5c:2e:59:36:
f6:1e:e6:01:df:c2:47:d8:75:b9:82:c5:e5:ba:5b:
60:0f:2b:4c:c7:74:ea:a0:2c:2d:b0:00:97:1c:fc:
dc:9e:81:dd:f5:98:2c:54:60:32:91:97:e0:2b:94:
32:0f:80:82:81:b8:68:05:cc:64:60:c2:60:a0:62:
01:17:05:aa:22:e4:61:3c:ea:fc:7d:a2:7e:65:00:
48:ca:31:57:16:6d:a7:df:cd:70:18:17:8c:43:4b:
9f:35:eb:12:f4:c2:32:c2:dc:1a:a6:f7:2a:01:4e:
49:e3:80:0e:fa:fb:c1:62:44:ab:32:3a:fa:d2:26:
ae:23:55:df:88:0a:96:b7:24:1c:15:48:18:fe:e6:
45:06:0d:bf:9a:1d:f0:27:f4:04:d6:a8:09:b8:29:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:34:05:B4:06:35:11:3F:7A:E1:09:26:A5:F4:1E:01:AD:BC:A4
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:82:ad:16:af:d1:00:9d:89:76:6d:aa:a8:7e:6a:e6:27:f9:
06:15:80:9b:6e:bc:9a:e4:df:18:db:b0:f2:e1:63:49:f1:fa:
1d:64:05:15:d3:31:a3:44:c8:b1:f5:29:99:89:cf:6d:72:eb:
a1:b9:75:9b:75:d4:0f:bb:82:db:e4:02:71:68:2d:38:9c:02:
ea:46:4e:45:23:ff:6e:0d:29:0f:be:eb:77:53:57:39:6c:2f:
6b:3e:6e:34:0a:47:b7:5b:51:3f:ce:76:ea:c9:43:ba:3b:b7:
a3:82:09:fb:01:16:41:98:3c:c5:67:33:94:8a:e0:fc:41:af:
c7:7a:04:c8:7a:9f:25:28:39:3b:7d:44:0e:a9:04:0f:69:b8:
a2:fa:e4:6c:50:3c:c3:24:c3:36:e4:21:c2:ba:86:80:ae:db:
1c:ab:b2:9e:fb:eb:60:ff:23:23:c4:45:33:9a:c9:dc:07:2f:
6d:68:9e:22:7c:30:2e:67:dc:a0:47:79:fe:3f:3d:74:1c:97:
f2:76:b5:d5:af:2e:88:00:12:e4:1d:ec:df:e0:06:98:3d:a2:
2f:e4:19:8c:7a:b6:37:29:9f:e0:00:f1:dc:47:6f:31:b2:dc:
9c:28:7e:ee:53:8e:7e:e5:a7:7c:47:7e:2b:92:32:ae:00:c0:
ed:97:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:43 2026 by rpki-client