Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: oLjCo6jFA0nBBd817UOe8yM63YvAGsjvgvVzMYiHvtw=
Subject key identifier: 81:12:AE:6D:C4:75:6A:98:6D:09:D3:F7:DA:EA:48:0E:EA:8C:AC:84
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019CAA8F4F29EA7301F1F0A360851C17C604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 13CC
Signing time: Sun 01 Mar 2026 18:00:44 +0000
Manifest this update: Sun 01 Mar 2026 18:00:44 +0000
Manifest next update: Mon 02 Mar 2026 18:00:44 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: lOa7Ok8MIadwAe+wV4ABbjYLlTs+DBY9Og4WDMFboms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:4f:29:ea:73:01:f1:f0:a3:60:85:1c:17:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Mar 1 18:00:44 2026 GMT
Not After : Mar 2 18:00:44 2026 GMT
Subject: CN=8112ae6dc4756a986d09d3f7daea480eea8cac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:2d:d5:96:dc:95:17:a7:91:87:b2:8d:99:
80:7f:7e:71:10:9f:b5:a8:f1:15:eb:d1:c4:fd:77:
21:b1:17:fb:e4:58:a1:a9:04:ae:4c:c8:c6:cf:06:
1f:69:90:d7:c1:5e:9e:d5:a4:ce:c1:d4:25:f9:1b:
48:5e:62:e6:62:b9:8d:aa:a8:c7:b1:d8:5f:8e:ee:
2c:8d:e1:d8:17:7a:d9:3d:86:c7:7d:d1:73:01:85:
14:b7:9c:0d:5b:90:eb:0f:83:e8:b9:a8:b4:f6:2c:
8a:e5:52:7e:9f:49:4b:36:29:c1:db:10:8d:a7:12:
2f:28:84:57:24:95:59:9d:53:15:49:c3:c7:41:4f:
af:6d:cf:fc:67:6c:dd:07:97:e9:5f:3d:99:69:f8:
8a:32:47:ea:e2:70:de:00:b3:40:61:01:ce:3d:51:
8f:95:32:0e:d5:b6:89:72:40:63:6d:20:e3:f7:45:
05:34:f5:f2:a0:26:48:e7:31:35:d1:2a:8f:6b:9c:
ee:5d:ad:be:74:2e:42:4c:fd:fe:99:68:b7:13:2d:
a6:c7:bb:d3:fb:4c:99:8b:61:7b:7d:c5:cd:54:b4:
ce:ff:29:1f:d5:91:41:6c:9d:ff:18:54:da:1e:dd:
d4:05:a8:0c:3b:90:32:b9:62:03:17:dd:22:e6:54:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:12:AE:6D:C4:75:6A:98:6D:09:D3:F7:DA:EA:48:0E:EA:8C:AC:84
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:f8:1a:54:49:10:7a:4e:dc:0f:67:92:3c:9b:e9:3b:f2:
0a:6b:af:fa:17:9e:66:be:93:aa:52:dd:45:e3:97:a5:44:c6:
d7:54:80:03:06:43:2f:c3:82:fc:6f:6c:28:d6:15:b3:fb:09:
82:4e:a7:f3:1e:e1:37:e3:76:8d:e4:ba:d7:2c:b7:85:06:f0:
d4:6c:4c:ca:af:b0:72:25:5a:10:e8:8e:97:dd:d4:5a:72:73:
fa:3f:51:ee:7f:3e:79:2a:55:86:14:af:4c:2a:e2:a9:c7:86:
db:60:f1:1c:83:a8:cd:77:ca:79:07:4f:a9:f6:71:f9:0b:08:
e1:8b:86:08:ce:e0:e4:e9:a7:be:fb:7b:3e:dc:2c:b6:fc:46:
78:4d:a6:b9:c0:a2:6c:95:c8:6d:67:4e:88:39:7e:91:af:4c:
d4:ee:9e:aa:30:0c:02:f0:ce:35:91:8b:f7:20:7e:8e:53:00:
21:6f:67:6c:f3:32:82:6a:34:67:15:51:41:9a:d2:32:f5:ce:
ef:c5:48:28:32:a9:73:b4:07:9f:80:ba:cb:ba:ef:8a:7b:f6:
30:dc:41:fb:75:ba:e7:09:6e:08:9e:20:12:94:e0:f8:25:05:
85:95:80:db:01:b6:fb:e1:e6:42:bb:41:d8:51:d9:80:65:90:
bd:49:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:40 2026 by rpki-client