Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: +LkE3ohnBL9QMBXNVZwHsWrpMS3ryULiztjXKOIciNs=
Subject key identifier: 70:3B:71:04:2C:1E:AB:CA:36:4B:0F:BE:8B:DE:DA:54:74:62:01:5F
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019CAEDA315D0D3ACF4AC9CC122938A135A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0E5A
Signing time: Mon 02 Mar 2026 14:01:00 +0000
Manifest this update: Mon 02 Mar 2026 14:01:00 +0000
Manifest next update: Tue 03 Mar 2026 14:01:00 +0000
Files and hashes: 1: apqOufkzZC3hvfLS0yrWU54SWG4.roa (hash: bdicC57sTedPfwJhANjdpge4Xu2b5dLjhbZNF/3RXQM=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: mSyvAK9HZIzeL3fxZ4nH0/RPJoHFXDtbVzvNn4ETjBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:31:5d:0d:3a:cf:4a:c9:cc:12:29:38:a1:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Mar 2 14:01:00 2026 GMT
Not After : Mar 3 14:01:00 2026 GMT
Subject: CN=703b71042c1eabca364b0fbe8bdeda547462015f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:f0:27:59:d9:85:93:a3:8c:da:19:87:59:
11:f5:83:e0:37:a0:ac:d0:fb:d6:c9:2b:c6:3c:00:
e8:92:c3:61:19:66:fc:ab:95:f8:4b:72:86:d3:1f:
f2:ef:f2:94:34:d8:26:49:9e:80:97:b9:00:2e:65:
51:fd:a7:9f:41:4e:4f:ab:f0:4f:8e:0f:d1:dd:41:
1f:7b:11:79:84:e8:96:20:2a:7d:3b:31:3f:8b:09:
60:5c:d0:bb:ee:3a:c3:c2:f8:58:6f:40:b7:47:ca:
3a:6c:0d:29:f3:80:10:c1:e7:45:56:ce:5a:61:3f:
a6:55:24:cf:6a:7b:1c:75:2e:1e:1d:7a:98:27:b5:
29:c8:63:22:5e:c5:92:ad:0f:29:87:da:e5:ca:8c:
df:37:fd:e4:af:c2:a1:9b:cf:bc:2c:98:96:d9:f8:
2c:5c:a2:f4:67:7e:20:e5:dc:b2:ba:e6:c1:05:2f:
3f:0f:c2:50:99:dc:05:f4:7c:35:2f:0f:03:81:13:
73:75:55:32:f5:69:26:23:9f:f3:13:bf:69:8a:f2:
35:50:79:05:2a:be:00:09:9d:1c:4b:92:82:47:a3:
27:a2:09:b0:72:30:6c:cd:ea:48:23:b3:03:cd:0d:
0b:57:d8:30:25:40:64:0a:f9:85:e8:3b:bf:ed:33:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:71:04:2C:1E:AB:CA:36:4B:0F:BE:8B:DE:DA:54:74:62:01:5F
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:bb:38:9d:0f:1b:61:dd:1f:f3:0c:66:9c:2a:7b:45:84:
b5:6b:60:26:b3:47:56:1c:81:ba:2d:bc:f2:96:91:3d:c2:e2:
8d:77:68:d4:53:74:dd:8c:fd:34:64:10:7b:25:99:02:8f:96:
fe:3b:31:04:65:26:00:bd:ce:d6:f2:cf:61:b0:79:fb:a5:bd:
6b:eb:b4:d1:2b:69:e2:20:6d:91:c2:ac:bb:4d:3b:67:b0:ad:
dc:73:9a:3a:48:e8:e7:94:11:15:e9:d6:12:af:5b:49:39:8a:
b9:58:27:f3:7c:b3:d0:42:9d:f2:f1:7c:94:26:49:24:98:46:
9e:77:00:09:4f:0e:25:04:b6:49:d2:7a:61:5c:8e:ef:c0:75:
f1:13:71:c1:65:7d:b1:52:62:53:b8:95:a5:5c:23:a5:80:df:
c1:36:3f:2f:8e:f0:d4:fe:7b:06:7f:8e:0c:3e:cf:46:44:1f:
6e:dd:fe:1b:ce:a5:49:c8:b1:07:bd:fc:57:52:c8:b2:b2:17:
f6:cf:4a:37:c7:cc:41:f8:8b:f0:f1:24:10:49:61:5a:7f:2a:
95:fe:0c:69:0c:1c:5f:d3:c8:eb:6b:86:b7:1f:d1:ba:6f:21:
a1:37:ba:9c:d4:6b:06:f4:78:be:a5:a1:a3:72:71:fa:07:e2:
8d:76:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:57 2026 by rpki-client