Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: qRfehWIrhFBGDDulLwDzb9a6KlkLO9+4IP1LPHgrUgc=
Subject key identifier: 97:CD:CB:4A:5D:BA:4B:F6:9B:A6:00:35:0F:6F:A0:09:2B:CC:54:56
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 01A0FC100FE13D8302C5188F914F5F06E1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 03C2
Signing time: Fri 02 Oct 2026 10:01:46 +0000
Manifest this update: Fri 02 Oct 2026 10:01:46 +0000
Manifest next update: Sat 03 Oct 2026 10:01:46 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: mVHqrgTSRWAo82mf6/b3z80SRNCvXc67Tq0Wp7gzjn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:10:0f:e1:3d:83:02:c5:18:8f:91:4f:5f:06:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Oct 2 10:01:46 2026 GMT
Not After : Oct 3 10:01:46 2026 GMT
Subject: CN=97cdcb4a5dba4bf69ba600350f6fa0092bcc5456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:ee:fe:8d:65:df:67:e6:09:10:97:97:02:
9f:a0:9a:d9:b2:4a:14:4f:e9:1a:90:76:9f:0f:08:
23:90:75:37:e8:b0:27:fe:bb:64:77:83:d7:6d:bc:
f8:1b:27:ad:53:3c:79:c0:d7:42:e1:00:0a:a3:83:
cb:92:15:6c:ef:c2:c0:6b:5d:24:7a:f9:a0:09:b8:
e9:9e:68:c0:5c:01:0b:f4:6b:af:71:d5:82:8e:1f:
d0:d2:21:42:df:b6:2b:fe:e6:83:21:4a:eb:ca:d5:
2e:32:0a:ba:16:72:9b:0b:91:52:38:63:f5:56:1f:
ba:3c:e6:d3:d5:ac:92:d2:d8:e7:1a:8c:62:f1:a7:
f6:b9:1e:8d:85:19:84:51:73:e7:5b:36:0e:37:ea:
ad:da:dd:27:c6:0f:89:c3:14:2f:e8:ee:39:a3:f1:
b9:73:59:ce:ab:2a:40:b1:9d:82:e8:81:e0:68:07:
44:e8:5c:b6:db:06:70:c6:b7:ba:b6:22:b2:be:79:
09:0a:df:7d:f4:02:37:13:b6:0a:ac:54:14:44:e1:
66:71:3d:1e:16:b0:46:90:95:9d:19:d3:9d:1e:eb:
cf:c3:c6:06:38:7e:9a:b0:c6:bb:a6:6d:1c:bc:c3:
80:1e:bf:22:ae:3b:c1:0e:74:be:38:c1:63:92:d2:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CD:CB:4A:5D:BA:4B:F6:9B:A6:00:35:0F:6F:A0:09:2B:CC:54:56
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0c:4d:23:b4:81:82:61:76:83:cc:d4:8a:27:3a:bb:08:cc:
f2:e9:d3:b5:9f:99:86:16:32:49:6b:82:0a:64:36:93:ef:50:
e9:fa:53:42:c5:87:a3:ec:ce:63:74:93:ec:17:88:cf:95:d0:
45:94:08:41:db:dd:22:e2:6b:54:aa:f2:8d:05:1f:1d:5c:c8:
76:31:48:06:00:c8:36:c8:45:f6:1c:bb:02:3a:2e:5f:ff:ee:
88:28:58:d5:de:10:b5:fa:96:1a:1f:82:42:12:66:18:a9:3e:
72:0d:96:65:26:4c:9a:0e:ee:f1:c6:f5:1c:0d:f5:06:00:54:
50:c6:a1:80:b1:8d:39:1c:d3:4f:4c:c0:61:8f:c8:ec:88:df:
32:45:2d:38:25:a5:16:3f:ba:7c:ee:c3:25:b8:d8:6c:89:cc:
2b:86:b1:1f:4b:68:cd:54:b3:40:a7:ac:3b:78:9d:09:e6:21:
b7:f6:99:20:d7:9f:89:05:d6:8f:e1:5d:71:19:e3:c6:7e:0d:
78:77:7a:f6:46:ba:9b:bd:cb:d5:dc:3b:96:72:c0:94:aa:bc:
d6:86:d5:26:74:6a:22:85:fb:08:eb:eb:e4:99:5b:74:b7:a3:
3b:d3:0d:86:a4:28:37:4b:79:1a:75:3b:ae:61:3b:50:f0:91:
0e:e4:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:32:27 2026 by rpki-client