Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: prawZWKU1hw++e/WhmLXgn53RZZBlTrs+pswtzH/sS0=
Subject key identifier: 53:07:5E:AF:81:E7:36:B4:81:68:B7:45:42:66:FE:3D:CB:67:FB:E5
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019D2A3BE5BA90D3885EC4003FBA3CF4A283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:01:01 +0000
Manifest this update: Thu 26 Mar 2026 13:01:01 +0000
Manifest next update: Fri 27 Mar 2026 13:01:01 +0000
Files and hashes: 1: Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa (hash: 5hCbvviVC6DjaUoU7fXbjYQV9Lo078pPrQ3MKFzmu/U=)
2: UMRm0dtRz3FJANd_M4r6isxg5pc.roa (hash: hL7WSRr8WKYlMsBe+yWHzd7U1Dc511hpxbpyKw8/AI8=)
3: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: B0MVlMaIxZDqFF8gy5UEkDbsSCrhNq4ZPhEyzWvCINo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e5:ba:90:d3:88:5e:c4:00:3f:ba:3c:f4:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Mar 26 13:01:01 2026 GMT
Not After : Mar 27 13:01:01 2026 GMT
Subject: CN=53075eaf81e736b48168b7454266fe3dcb67fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:59:77:74:cd:6e:b0:76:87:62:23:4f:36:
01:52:09:07:c8:e7:95:01:40:86:4a:31:c1:7b:14:
a5:d1:c7:d4:7b:4e:86:96:84:6c:b1:f1:c2:d5:d9:
b4:f3:c2:9c:67:a8:db:1f:5f:fe:88:b9:b2:3b:7a:
c7:eb:23:0e:4f:c3:6f:c7:30:de:f7:d2:9d:b5:19:
b3:57:80:53:31:3a:dd:fb:96:6a:f4:54:67:63:32:
7a:55:62:62:f1:fb:f2:5b:81:81:95:2f:a7:36:68:
f7:0a:36:8b:d6:d4:b5:f6:9a:94:ee:c8:26:75:f9:
5d:c4:08:c9:19:b1:65:4a:be:d8:19:fb:fb:0d:db:
29:63:fc:36:e7:dc:18:01:9a:66:30:f3:59:08:9d:
39:d5:90:cc:c4:3c:6c:3e:41:ef:4f:92:a9:ac:60:
9e:9b:4e:b5:53:b1:69:7e:01:1c:28:55:b7:3e:ad:
82:a5:92:54:4c:0a:0e:81:cc:45:48:fe:25:22:23:
d7:15:50:40:fc:64:7c:a0:93:4c:d1:09:c7:17:19:
52:e1:79:36:5e:9b:13:35:3e:5f:82:85:a5:52:5d:
1e:94:91:ae:c8:10:bd:ab:ad:d5:14:ed:f0:96:5a:
e8:78:95:c5:5e:4a:fc:26:83:12:33:3d:ed:fb:ff:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:5E:AF:81:E7:36:B4:81:68:B7:45:42:66:FE:3D:CB:67:FB:E5
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:27:bb:ea:5d:b9:9b:b7:60:23:ca:9a:87:37:69:64:51:
20:b6:f6:3c:2f:a7:2a:3a:97:e0:99:f3:63:66:00:68:f8:e9:
03:fc:8e:d5:22:0b:fa:f3:cb:01:dd:5a:3c:c9:e4:dd:2d:ae:
ec:2f:bf:bb:9e:03:f0:74:60:45:61:30:71:a2:cd:79:34:32:
1f:09:f6:2a:62:cb:b5:14:cd:be:97:49:1c:b2:e5:47:90:76:
3b:9a:78:84:aa:a9:fa:53:64:86:50:08:fa:19:7f:d9:e2:00:
cf:67:07:d1:b2:4d:8b:28:93:7c:66:4b:18:06:a6:f2:67:e4:
60:76:b8:d2:15:72:66:0d:18:b8:2e:98:7e:46:e1:e3:6f:24:
cf:0a:9f:3d:5c:25:5b:b7:d3:e9:3d:e2:99:b0:02:bb:d9:1a:
91:07:08:9c:68:c3:e8:9a:a1:0a:8d:8d:ac:48:6a:4b:a6:d5:
a1:79:8a:c1:e7:4d:6a:ff:83:17:54:d3:e0:1d:74:00:7c:04:
09:61:4b:96:0f:83:48:29:00:71:a2:7b:0c:b7:50:c7:68:cf:
7a:6a:4e:6e:1b:64:03:61:ab:06:31:58:81:88:64:01:b3:6a:
36:63:44:95:f6:f0:27:a2:0f:ab:f3:39:f8:ec:56:23:20:95:
1b:39:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:59 2026 by rpki-client