Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: gRbhaAUUwE8aYiUjIfjNvrhKfBIE4gUQ81I6E+AGn0o=
Subject key identifier: 13:06:53:34:5C:2C:58:54:66:65:09:6A:F9:18:43:93:8B:BE:68:E8
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019D284DAF01E3C00622C6E66D928AA4E441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:12 +0000
Manifest this update: Thu 26 Mar 2026 04:01:12 +0000
Manifest next update: Fri 27 Mar 2026 04:01:12 +0000
Files and hashes: 1: Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa (hash: 5hCbvviVC6DjaUoU7fXbjYQV9Lo078pPrQ3MKFzmu/U=)
2: UMRm0dtRz3FJANd_M4r6isxg5pc.roa (hash: hL7WSRr8WKYlMsBe+yWHzd7U1Dc511hpxbpyKw8/AI8=)
3: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: NmkdyGwRpKzYqOLX+8yPMXedgULSAs8L+HqzmZVz4wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:af:01:e3:c0:06:22:c6:e6:6d:92:8a:a4:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Mar 26 04:01:12 2026 GMT
Not After : Mar 27 04:01:12 2026 GMT
Subject: CN=130653345c2c58546665096af91843938bbe68e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d3:bb:ed:40:04:9d:89:9a:b9:76:27:0e:1b:
20:77:26:46:8f:12:57:7c:bc:89:0b:ee:10:51:35:
b3:72:82:e7:9f:fc:4e:37:79:29:10:19:ec:91:64:
3a:a2:c5:bf:e5:c2:e5:e0:ab:3d:6d:6c:6c:d3:61:
30:8d:ff:ba:8a:14:90:51:c9:62:62:cc:53:19:86:
3e:6f:35:08:69:85:cd:b6:a7:54:3e:64:3e:94:8e:
f3:28:7f:48:87:35:cf:98:76:5f:5a:fa:29:c4:ce:
25:64:41:db:c7:00:26:a2:3a:7c:5c:fe:3d:6b:9a:
4c:2a:e1:35:fd:df:4a:98:ec:c7:7d:f2:04:1b:8f:
5a:a6:3c:ad:a6:1a:43:3e:fb:45:60:b1:b7:a3:d2:
95:a2:dc:92:d8:45:6a:f3:a2:e9:13:63:d6:a7:5b:
af:02:52:3b:64:7a:f3:82:9d:50:28:ea:f5:7a:a7:
cb:e0:12:b4:62:a8:2c:89:da:ab:a4:e5:4e:b6:22:
a9:f1:a0:f3:3b:9f:e3:6d:84:49:52:0d:c3:4d:b7:
91:a6:80:b2:48:ed:5f:62:0a:cd:85:d6:83:6e:15:
8f:42:f6:92:7a:30:4b:f4:4a:a8:d8:43:6e:f4:b3:
2d:1a:be:6b:bf:ad:37:d4:08:d5:fc:48:71:cf:61:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:53:34:5C:2C:58:54:66:65:09:6A:F9:18:43:93:8B:BE:68:E8
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:89:c3:33:57:c6:0e:3a:b2:26:80:4c:d3:bd:90:fc:71:
5d:d0:a2:46:76:1b:2c:1c:e1:a2:78:69:78:ee:8c:71:51:62:
45:6e:e4:61:b1:fa:73:c4:67:2a:a7:bb:28:08:8d:29:fc:4b:
d2:81:e4:47:e6:9e:c5:a8:d9:d3:71:7b:55:52:2f:3c:db:17:
7d:6f:a1:16:5c:bb:d5:ef:4b:40:69:13:ad:66:f1:d0:b1:c1:
45:27:e4:8e:0d:62:67:79:b2:10:a7:55:e3:65:7b:f1:f1:3d:
ef:2d:ab:e1:da:66:c0:5d:15:84:1d:69:ff:8d:2c:16:fa:81:
00:c7:d2:b8:2b:c3:27:c6:4d:13:6e:65:b2:f8:fd:fe:f8:da:
a7:68:9a:a3:82:f0:d9:4d:f7:37:e3:e6:7a:3b:d8:8b:d8:a5:
e9:dc:59:8f:51:7f:47:6f:73:9b:a7:31:ae:cb:18:a2:31:ba:
7e:fd:1b:a0:92:70:a9:ca:47:a6:33:d2:56:43:c5:72:59:e0:
f1:eb:7e:22:a1:2f:9e:dd:a5:9d:49:71:03:83:98:1a:1e:a6:
7e:2e:16:c6:41:0f:1f:6e:37:00:17:ec:8e:68:ad:94:c3:9c:
b3:bd:c5:c2:82:22:3c:3d:69:e3:d2:b4:f9:11:c6:8b:90:df:
d5:95:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:53 2026 by rpki-client