Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: tpgaPdg37WBl0GspXtY36B77gRgCjjxSRjMo0R/RcVI=
Subject key identifier: 25:E9:DD:E6:0B:0B:12:14:88:6D:5B:7F:BB:C5:9B:79:DC:C6:F9:AD
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 019D2771BBF33820A41254D136B8C0CC4356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0D79
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: 7pgJyQEhPGE9dXbf6EcHY0j7uuY.roa (hash: ptYDlgyfUaBAmMsMOgj+f0CY335JokuQ/NfrWH0iFkk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: x4XaJj5bIG6CklOsfdsus88spsZ7ERVOFBZJpqZXrl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bb:f3:38:20:a4:12:54:d1:36:b8:c0:cc:43:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=25e9dde60b0b1214886d5b7fbbc59b79dcc6f9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:c8:6d:26:a4:be:2d:00:8d:87:b9:08:32:
93:c2:7f:f9:25:3e:ba:00:2b:c9:e2:20:81:d7:d4:
da:89:de:58:71:e3:75:43:9d:12:18:61:fc:d5:cb:
75:33:c8:fc:e6:af:ef:69:01:91:27:73:fd:f6:4a:
1c:68:9b:22:ff:c9:df:58:a0:f7:fe:57:01:e2:82:
e9:49:e8:ee:4f:0f:cf:3f:91:d4:35:a5:c5:7a:70:
c4:30:fc:54:09:45:0f:6a:71:09:3b:44:23:ba:1c:
1b:d5:b3:b9:37:1e:3a:78:8b:a1:80:e3:cf:48:50:
56:60:e1:fc:3b:8f:b9:cf:72:e0:ab:5c:0b:c5:ad:
58:dd:bf:10:62:77:5b:f7:b1:d9:25:3a:08:27:4c:
30:d6:ad:86:5f:13:d6:ac:74:22:a9:00:52:2b:58:
e4:90:c0:b9:e1:0a:ef:de:c5:db:49:b3:43:e5:85:
e9:ee:f4:35:d4:f2:97:61:18:25:ad:2b:af:a8:88:
62:5f:62:af:fc:3f:8d:ea:71:54:fb:c6:eb:93:94:
25:50:16:54:69:64:b5:ed:f8:f6:eb:8f:45:4b:aa:
fa:06:64:b0:5d:f5:93:5e:4c:3e:86:9a:12:b0:64:
86:4c:06:55:83:54:8f:bb:28:5d:94:12:53:71:91:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:DD:E6:0B:0B:12:14:88:6D:5B:7F:BB:C5:9B:79:DC:C6:F9:AD
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:10:9f:34:9f:8a:27:67:72:91:44:20:55:dc:04:02:55:
7b:4d:32:ed:f9:ac:4f:ad:49:85:67:27:61:06:eb:f4:21:49:
a5:ee:ac:f9:7a:7d:43:6c:ff:b0:03:0c:28:03:83:49:b7:a4:
93:c1:15:75:ef:ad:9e:00:1e:a5:27:32:86:57:2c:59:8f:db:
76:68:b1:03:62:58:1c:a1:cc:5f:ac:d9:cd:96:a9:43:da:36:
f1:a2:6f:f9:c1:96:1c:dc:67:c3:42:2b:2f:de:84:8b:59:d5:
f2:e7:f9:bf:6b:96:57:12:52:30:1d:45:a3:71:5d:e1:27:01:
e6:c2:16:5f:da:c0:b0:b1:38:a2:17:ff:5b:25:b2:a1:80:d7:
9b:44:a7:08:b7:ca:84:ee:85:cc:da:02:3a:e8:fd:9c:e1:c0:
02:df:11:8d:8f:6c:4c:54:de:d3:b4:cd:b2:ef:39:02:04:e1:
33:17:ec:42:6f:68:2a:ac:9a:78:2c:96:0e:da:8f:6f:aa:6f:
0c:1e:02:aa:4d:bf:ba:8b:1d:17:bf:43:3a:b6:93:37:56:67:
d3:06:12:b7:5d:a0:1b:8f:ea:39:bc:bf:fd:40:67:55:4e:60:
a9:fa:89:83:d4:c5:5a:37:a1:68:f0:48:b3:62:6e:3c:fe:07:
7d:23:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:02 2026 by rpki-client