Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: F8rRXQ7niUeG7OHxT7NqkDoPh07q7lnVvZKATNFOT0k=
Subject key identifier: 18:7F:69:68:8A:D8:BC:93:DD:46:66:7C:8B:2C:91:38:C7:C6:1A:CB
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 019D2884A2294D6E082968D19B73588490A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 0A1B
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: KURiaKt2pz9ButuG40heMby8D3nigXV143WFTQe0h/I=)
2: sao4QdKJ2zOtzhzLqEmuNyMN0as.roa (hash: PzIbh0KTO1J4efJaWw/Rzl0kAt4CC7fNxs+1iCoN+dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a2:29:4d:6e:08:29:68:d1:9b:73:58:84:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=187f69688ad8bc93dd46667c8b2c9138c7c61acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:ba:81:64:5e:f7:97:b9:0a:4d:e0:eb:39:
50:76:f8:57:61:d4:b4:0a:d7:72:81:64:71:d2:ac:
8f:b4:2b:6e:ea:1a:6f:9b:16:4a:e5:91:d0:92:95:
31:38:b2:c5:d2:8e:8d:a4:8e:85:99:e6:cc:68:ce:
72:55:de:40:1f:14:82:ae:b6:3b:9f:1b:6d:f7:96:
62:21:18:65:6b:37:be:71:d1:5e:df:fe:bd:c4:30:
78:73:0b:d7:0e:3d:7a:9f:af:31:06:c1:40:60:09:
50:5d:6b:da:7a:bc:bd:73:a9:a7:e4:b8:22:8a:e5:
6b:41:df:0c:1d:e6:08:f5:c0:7e:45:04:3c:a9:c7:
46:3f:cb:07:c3:57:d3:41:75:33:ab:58:32:08:10:
1c:ee:6f:84:53:7f:97:f7:be:69:97:4e:7f:6f:bc:
64:59:1a:72:dd:bc:e9:c0:e6:1f:dc:10:04:25:71:
3b:a5:a3:85:57:80:54:61:66:fa:7b:a6:00:12:53:
f0:c9:a0:d2:13:17:55:cc:07:3e:6c:3c:95:74:18:
37:3d:60:38:c4:b9:dc:10:3b:43:b9:29:8b:e7:20:
51:05:29:e6:26:32:a1:f0:1f:2f:19:3d:a3:89:7d:
fe:3b:76:90:8a:f0:cd:44:2b:74:d3:8a:8a:55:79:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7F:69:68:8A:D8:BC:93:DD:46:66:7C:8B:2C:91:38:C7:C6:1A:CB
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:59:29:d2:ec:88:59:b2:55:8b:e8:2f:11:54:a6:2a:a1:f4:
b5:24:27:18:b8:70:02:da:29:fc:7e:42:39:29:91:e5:59:62:
48:0c:1d:49:4d:df:e4:97:a5:05:72:58:1a:39:8f:7b:c1:ca:
bc:27:b6:8d:c7:0d:5b:5e:a4:73:7b:a8:09:d3:f0:fd:61:cc:
11:6b:f4:96:b5:68:a4:62:38:d9:80:75:96:06:38:3a:c2:36:
4f:b8:57:fb:00:5c:3e:76:87:08:ef:7c:c8:c5:f7:49:85:4d:
86:94:43:de:9e:2a:d5:8f:e9:36:15:09:c7:65:64:93:44:ff:
ac:6c:50:0c:f4:ae:fc:a9:96:8f:95:56:ce:e1:dc:3d:99:91:
a2:d1:80:c8:1e:01:8b:eb:bc:5f:d1:9c:3e:8d:36:d3:e3:25:
c9:c2:a4:56:b8:88:12:c7:e6:7b:c9:96:b5:b5:c5:65:de:fc:
19:b0:3c:0d:54:3e:1a:37:1f:ad:6d:2b:c2:32:06:9f:ba:54:
c9:ef:07:9b:e4:83:7b:ec:d5:40:3d:e2:bf:f0:c4:07:2b:86:
8c:85:78:07:ef:8c:aa:17:85:c1:41:20:06:cd:d3:d5:23:81:
73:12:1d:d0:57:58:5a:4a:19:a2:5b:8f:77:80:9c:9e:c7:ae:
8e:a1:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:48 2026 by rpki-client