Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: 3tIPptF7ZsC2sLp5Q6FhfePlyQ2k/qtF0m56nbd8WJ0=
Subject key identifier: 58:D1:61:9B:12:E0:51:7B:92:BE:53:67:EB:A6:3D:E6:66:0A:29:93
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019D28F2DE95F35CAAC3B9E494D933C4BB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 01C7
Signing time: Thu 26 Mar 2026 07:01:38 +0000
Manifest this update: Thu 26 Mar 2026 07:01:38 +0000
Manifest next update: Fri 27 Mar 2026 07:01:38 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: wDNRdPAoHRZ+ZbOmTDZqCgOCn7cZ665jR2ZJtpzNF7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:de:95:f3:5c:aa:c3:b9:e4:94:d9:33:c4:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Mar 26 07:01:38 2026 GMT
Not After : Mar 27 07:01:38 2026 GMT
Subject: CN=58d1619b12e0517b92be5367eba63de6660a2993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:28:f5:97:ce:20:08:ee:f8:2e:76:4a:bf:
62:24:c0:e0:3d:9a:b8:1d:3a:f0:a4:ec:2f:ef:99:
fc:93:77:c7:58:d7:e8:c9:d3:b3:0a:ee:5f:6e:25:
c5:ec:ff:d2:81:20:56:e3:c6:96:0f:6f:ac:a7:16:
22:a1:55:c1:7d:69:18:1e:31:1a:88:04:cc:6b:64:
cb:bb:f6:0c:5d:10:61:df:af:a0:de:c0:14:8a:71:
f0:b1:e8:9c:1d:14:02:e2:9d:ad:0e:06:c2:d9:6d:
76:51:96:2a:71:26:88:c4:3d:85:61:f3:83:f1:db:
43:0c:29:67:ca:1c:73:10:66:03:3f:6f:a1:e0:84:
44:3c:16:cd:91:f5:e7:02:0c:22:c6:9a:41:6e:5d:
c2:e9:6b:cf:ad:0c:5a:1a:73:6d:e9:51:fc:09:d1:
38:7d:de:82:f9:87:9f:f1:6c:5b:cb:89:04:c0:1a:
d2:1c:7b:34:a8:d3:30:2d:5d:1d:08:90:29:8f:3e:
94:ad:e3:8c:0b:1d:03:6d:07:ce:62:27:03:7c:cd:
b2:01:b3:30:61:00:58:fe:cb:15:04:c7:5f:41:fa:
71:a9:8e:0a:46:e1:04:11:68:38:72:29:6a:19:06:
ff:11:fc:0c:b9:ab:a2:08:06:99:bc:b0:1a:12:9d:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:61:9B:12:E0:51:7B:92:BE:53:67:EB:A6:3D:E6:66:0A:29:93
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:13:db:a8:ab:1c:fa:6e:74:79:b2:90:d8:80:3a:89:6a:
3d:d8:13:05:ab:65:b7:6e:79:b7:71:65:48:da:f7:a3:b8:db:
ca:ed:41:4e:51:ad:01:db:48:27:59:7f:40:f4:c9:4d:3a:b0:
8e:b5:da:c2:82:62:b5:44:b6:64:08:cd:3f:12:56:92:06:b2:
eb:c5:8d:20:26:ae:cf:59:ed:1e:2a:ff:11:62:c7:a4:fe:70:
b9:53:47:b1:a2:08:dc:93:50:d2:f0:fa:4e:3a:bc:d9:22:ad:
f8:fb:00:da:41:cf:8e:6d:e1:fb:2b:9e:96:1f:e5:2e:6d:06:
e7:08:4e:31:bf:4c:ee:df:d6:56:ef:2e:df:69:93:be:d6:a3:
46:cf:1e:72:79:3c:df:d9:31:05:8f:97:18:d5:38:57:e0:11:
3d:84:94:32:30:a9:78:3c:dc:e1:3e:84:a1:e9:5a:2e:45:3b:
4f:16:af:a1:77:33:bf:9e:25:f4:6c:7f:d2:60:b1:25:71:45:
a1:f0:b2:07:a2:44:07:bf:4c:a9:ce:3b:5f:4a:64:99:41:09:
36:03:4d:03:f1:18:c2:46:39:09:fa:fb:b1:ab:42:55:0a:5f:
f2:4b:23:c4:66:45:72:b7:81:42:e1:ac:b4:bd:4a:42:3f:70:
17:73:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:19 2026 by rpki-client