Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: Cd2ALPgx4Tb1tixusIEmbH7VG+ZzUyq5xXuXc7xbRRA=
Subject key identifier: B3:70:81:F4:1C:FA:92:16:FB:22:4A:1E:7F:95:77:C6:C5:00:93:97
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019D27DF9A168BB850D6A55A53329B4DAF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1844
Signing time: Thu 26 Mar 2026 02:00:58 +0000
Manifest this update: Thu 26 Mar 2026 02:00:58 +0000
Manifest next update: Fri 27 Mar 2026 02:00:58 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: dziUzu0T1A0Pfmyk9JdPKtu3NYtTfn5QKepH2AA6T3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9a:16:8b:b8:50:d6:a5:5a:53:32:9b:4d:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Mar 26 02:00:58 2026 GMT
Not After : Mar 27 02:00:58 2026 GMT
Subject: CN=b37081f41cfa9216fb224a1e7f9577c6c5009397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:e9:95:dd:04:e8:93:73:10:a9:ea:ed:b8:
22:9a:31:e4:07:f0:d7:ae:df:39:4d:63:f6:de:9b:
20:4b:b5:da:30:3f:f9:f5:fa:bc:76:f4:27:5a:d6:
49:3e:de:86:17:f9:b8:8e:d6:6b:43:be:cf:97:8d:
cb:a4:94:6a:de:12:b4:d0:86:e1:f5:44:dd:55:88:
b4:b4:fb:49:29:dc:1f:66:25:f3:07:06:c8:f6:1d:
b9:d3:ef:a3:6e:ff:1e:2d:04:40:10:9c:b1:10:19:
f0:81:b9:a5:67:fc:dc:01:74:f0:46:12:cc:0f:54:
fa:d8:dd:2b:de:c0:70:d0:09:a0:26:72:c1:43:33:
10:3b:70:72:99:b7:06:4f:6f:83:b8:b2:f5:fa:6c:
dd:29:5c:ee:e3:e1:36:53:24:b7:25:e4:4f:8d:dd:
2b:f8:58:48:98:55:7f:d2:bf:aa:48:c3:36:40:0f:
03:7d:01:d5:f7:20:13:c4:5a:d8:20:6b:f0:39:95:
35:66:b1:fb:b5:56:e9:cc:01:ad:0f:6b:c2:a2:cc:
7c:59:ae:49:b9:87:0e:1a:ba:5b:09:2f:cf:62:c8:
44:f8:c7:d6:e6:df:06:de:0d:7a:ba:48:78:3a:76:
50:05:83:7c:c9:6a:0e:57:00:c4:1d:ec:18:e4:f4:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:70:81:F4:1C:FA:92:16:FB:22:4A:1E:7F:95:77:C6:C5:00:93:97
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:95:4a:90:0d:70:ac:c2:f9:6c:22:96:7b:9f:70:b3:2d:
73:55:bb:56:8f:c3:41:c1:27:b5:e8:c3:31:ad:75:5e:00:fa:
da:74:8d:81:ef:2e:e9:85:4b:24:ad:75:ac:c8:9a:c3:53:07:
be:d9:91:0e:4c:66:16:34:72:59:0d:e4:bc:1e:d8:63:8c:c1:
13:ae:35:96:80:e9:2e:a5:9e:44:d7:f8:0d:5b:fd:1c:ff:dd:
be:f0:1b:5c:0e:57:24:2d:bd:a4:68:ef:c1:72:0f:28:eb:ef:
dd:3c:a3:95:e3:19:7a:a2:fc:4b:0b:3b:03:05:16:f5:be:67:
a1:b9:5e:66:5e:ae:ad:29:5c:19:d1:93:95:3c:df:f7:28:7a:
f1:c2:62:58:0f:34:49:38:81:0e:ea:df:a1:f6:5a:44:48:f6:
e8:ca:65:a8:76:36:0e:7b:b8:21:5f:ba:a7:3c:18:d1:57:3e:
03:eb:84:24:14:a6:e0:1d:a5:35:04:96:64:ee:b3:60:83:f0:
87:88:28:26:9c:02:85:fd:4c:29:91:68:92:67:ae:db:39:97:
bd:25:69:ce:54:55:de:df:00:0b:50:e9:df:94:86:a1:d7:ad:
1c:e3:98:49:75:ef:9d:60:0a:58:f4:ca:85:91:f4:4e:d5:3f:
00:72:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:16 2026 by rpki-client