Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: MtI2gCNK2vh2x8MB/X2Jzn4RTdpPEevUtM4Ctr4rEgI=
Subject key identifier: 3C:5D:51:AE:D6:D5:B9:B8:00:7C:9A:34:4E:BB:B4:21:22:6E:A5:25
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 019CAB34652A5B3359B09E107CE9D4BF7B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 1011
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa (hash: PJ4tHS8apGhvLe8TYz2cpr3MotUGBCPTkvdJ0n2/4ow=)
2: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: 65mh/RbtpzlaIs1V97bSPIQ5YblASx0NE2zcNxph5Zc=)
3: osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa (hash: uL7wqYgThc5bmPjNZmNt1te0zFr+Z2xMdvjLAunveII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:65:2a:5b:33:59:b0:9e:10:7c:e9:d4:bf:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=3c5d51aed6d5b9b8007c9a344ebbb421226ea525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:08:fd:d2:1d:4c:3a:6b:e5:6f:40:17:dc:
5b:d7:95:8a:c8:6b:9f:1b:bb:37:6a:f6:5e:cd:61:
dc:2e:3c:10:2c:72:f2:60:36:e0:a8:2b:38:a5:d2:
d8:d8:d0:83:7c:1d:e0:7b:cd:f2:e4:88:9f:ea:67:
75:9e:84:f4:49:03:5b:53:a3:ea:42:a7:1d:db:24:
31:19:85:dd:7f:4b:b7:2c:f8:05:58:59:1e:f2:be:
94:24:4e:3c:37:e0:26:c4:5a:d8:23:b3:06:9b:4c:
79:9d:4c:fb:ed:31:1a:2b:cb:6d:a2:da:93:1c:f9:
23:a5:3c:f0:ee:8f:a6:77:64:77:bb:fe:8f:f8:f7:
32:c9:a2:fd:e7:ea:73:34:f5:bf:99:07:ed:4c:da:
ac:1e:55:b2:36:4a:67:4a:56:74:ac:73:b7:db:1a:
38:32:00:59:49:4f:59:29:c2:a8:ba:33:00:d4:75:
68:47:75:94:9a:98:d4:15:70:63:6f:fa:ca:ea:02:
3c:c9:be:13:a1:8a:4c:9a:04:c1:44:b4:81:65:d9:
e0:51:76:87:04:03:e5:e0:45:c9:9a:73:13:16:7b:
74:5c:0a:ab:d3:7c:ce:58:c4:bd:f7:2b:b4:bd:c2:
13:60:6e:65:40:91:08:98:b7:6e:1e:21:66:3c:f5:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:51:AE:D6:D5:B9:B8:00:7C:9A:34:4E:BB:B4:21:22:6E:A5:25
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:87:5d:91:d3:76:70:2d:42:1a:5e:31:f0:64:a7:ac:f2:
51:0a:29:74:76:d4:2f:dd:70:fa:12:99:ec:e6:4e:2f:e3:45:
5f:1b:e9:76:c1:9a:89:8c:80:31:90:69:da:f9:ae:48:f0:57:
ee:24:70:8a:6b:8c:36:53:a6:73:0e:98:ca:b9:32:16:15:a0:
ab:0e:9b:5c:78:f9:fa:87:b3:e1:97:b6:6b:37:26:60:52:3e:
5e:75:9f:17:23:5f:a2:78:58:28:93:69:1b:4c:be:db:59:97:
53:f2:42:91:f1:b5:93:f7:da:f1:57:4f:cb:0a:59:04:14:09:
39:9d:42:22:81:58:a6:34:04:0f:57:ea:1a:ba:c9:05:9d:6d:
e2:3b:10:1b:b5:1e:97:06:31:c4:fc:af:a6:c2:c8:d3:fc:93:
a6:2f:62:36:48:c2:3d:a9:1f:2a:ff:5a:20:54:89:95:0d:41:
c2:34:55:86:eb:0c:67:fb:9c:73:7d:d4:5c:3a:e5:57:de:9e:
af:3a:83:00:b6:a7:16:bd:b8:79:71:15:28:50:11:8d:de:41:
6d:51:02:aa:02:9c:e4:40:eb:10:60:0e:cc:97:a5:69:34:b1:
e5:79:52:a4:31:8e:f6:24:f1:cd:0e:f3:05:d9:66:2e:03:c0:
c8:69:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:55 2026 by rpki-client