Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier: lsf30RQwtrdKYwtBJxOsdBVRAGQpLqlUMAFaZPN+ARU=
Subject key identifier: E3:99:66:C2:F8:DF:ED:BB:27:69:DA:B8:F4:9D:82:CC:33:76:D2:1C
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019E1D592A734FD23B25CA15523DF54FFAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number: 012A
Signing time: Tue 12 May 2026 18:00:43 +0000
Manifest this update: Tue 12 May 2026 18:00:43 +0000
Manifest next update: Wed 13 May 2026 18:00:43 +0000
Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
2: Cbh9dTp-3Cy4lgTwDmqeWN3sMU8.roa (hash: jNPHrW3n9zuVbl+OCeOvx4EbhDNhT0wqb8YQdUfmVhY=)
3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
5: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
6: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
7: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: /8/CuLZgv/OeHkrvzsMy3C3h+zFQndJyvpL9tu+gzCw=)
8: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2a:73:4f:d2:3b:25:ca:15:52:3d:f5:4f:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: May 12 18:00:43 2026 GMT
Not After : May 13 18:00:43 2026 GMT
Subject: CN=e39966c2f8dfedbb2769dab8f49d82cc3376d21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:f5:da:0b:8e:52:40:51:5a:c8:9a:83:cd:
5c:62:f8:48:a4:c4:9b:45:fe:a4:0c:9b:98:26:17:
f5:98:85:63:67:60:79:12:6d:e0:0b:e0:ba:e7:9e:
42:87:d0:b7:03:cb:28:34:31:c3:3a:72:dd:f4:28:
fe:e2:19:7a:07:e1:ca:c6:4c:c6:7c:bc:43:9c:61:
14:d6:4b:8e:67:e9:5b:ae:9d:65:60:28:19:d5:cb:
68:e1:23:b3:96:e9:fd:1b:71:ec:dc:7d:9b:55:48:
db:48:12:f5:dc:7a:bb:cc:80:81:89:63:3a:fb:53:
6d:37:dd:8d:89:2a:85:18:be:11:25:64:06:51:92:
59:5c:21:6a:63:6a:4b:1d:49:dc:cd:6a:65:39:55:
89:7b:81:f2:4f:4c:37:fa:66:5f:c2:98:27:f3:e5:
d0:cd:68:b1:59:10:8b:15:8a:01:e3:dc:5e:3d:63:
67:b7:2c:52:41:5a:e9:d2:02:5d:30:2b:20:e7:a0:
b7:58:cb:1a:94:98:19:0c:62:f7:94:d3:4f:d8:ce:
2a:24:38:0c:88:b1:3c:a4:7b:97:77:28:88:e9:f0:
7d:61:5e:67:01:e4:3e:10:ef:22:2a:39:72:13:3d:
66:2c:dc:a8:ff:42:17:c5:6b:c4:9c:e3:61:87:46:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:66:C2:F8:DF:ED:BB:27:69:DA:B8:F4:9D:82:CC:33:76:D2:1C
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:7c:00:e1:1b:ae:23:6c:b6:4e:19:25:92:b7:ef:e1:59:
af:61:00:8c:cc:24:e9:72:62:0b:ac:88:55:a7:7e:68:8d:f3:
8a:43:be:b4:12:1b:07:ac:9b:d3:66:fa:86:e8:66:c2:5e:69:
8b:90:3b:a1:f8:cd:08:52:49:bb:58:52:f5:8e:8c:fe:4f:7e:
02:37:6c:18:89:f4:0c:72:8f:da:be:7d:62:c4:e8:7f:1c:56:
3e:4d:5c:0a:8d:30:b5:54:2c:7c:c5:f0:3f:25:6b:b1:78:f0:
25:a6:13:74:1c:1e:8d:d7:27:7a:7b:ec:a7:5e:82:96:4f:3b:
89:90:ab:a1:8c:c9:30:6a:44:cd:a2:b7:ed:07:75:82:9a:87:
a6:e4:67:9b:dd:27:8d:b6:ed:1d:81:63:83:a9:70:01:c8:d4:
fd:f9:f2:ec:8f:19:b9:d4:2a:4a:7a:f8:4e:dc:f5:a3:b4:68:
c2:fb:61:24:37:8a:94:93:69:62:fa:c3:a4:9e:80:bb:05:2c:
92:3d:e9:a2:fc:83:86:ba:a4:cb:b4:34:c9:ac:bf:86:87:b6:
6f:b3:6c:50:06:da:da:4e:81:8e:7f:4f:ef:d9:fc:c9:56:33:
5a:9a:c6:08:c6:69:a2:3c:b4:c2:f4:4c:f5:5a:f3:60:63:b5:
66:08:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:35 2026 by rpki-client