Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier: Ul3D22qpg+2l3G9pez2hx++vBUqYcs7P9TS6iuqS05w=
Subject key identifier: 33:BB:EE:95:55:61:63:37:1F:0C:D4:43:47:46:C7:09:D2:5F:E5:A9
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 01A0CB59A6F5ABDA40B06EF790A2724E6ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number: 028F
Signing time: Tue 22 Sep 2026 23:00:45 +0000
Manifest this update: Tue 22 Sep 2026 23:00:45 +0000
Manifest next update: Wed 23 Sep 2026 23:00:45 +0000
Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
2: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (hash: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=)
3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
5: PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa (hash: b6sH2r0w/lWXF9PFk3rc40IsaEaHPz3g/VKzI2NYj4g=)
6: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
7: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: yURXQR83xluTJ6IidbcloyuM5e0YbHMPiNcoRtya/c4=)
9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:a6:f5:ab:da:40:b0:6e:f7:90:a2:72:4e:6e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Sep 22 23:00:45 2026 GMT
Not After : Sep 23 23:00:45 2026 GMT
Subject: CN=33bbee95556163371f0cd4434746c709d25fe5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:c0:c6:ca:c4:fe:e6:79:81:c8:c1:70:d6:
38:bf:9c:65:40:f2:96:8c:9e:24:f5:e9:01:da:47:
92:8e:44:3d:98:57:e1:11:d1:7a:47:3d:1f:c4:aa:
c5:90:79:e9:15:5e:af:b4:a1:97:48:d0:0a:a4:7a:
8c:bf:bb:4c:19:08:5b:ba:64:fc:b9:a0:bc:20:15:
43:07:2e:7d:8a:38:96:70:89:34:c5:4d:3c:bb:fb:
e4:5e:3c:f9:9f:24:3f:d6:28:2f:42:a3:59:73:66:
58:1f:ac:3d:b7:7d:84:91:f8:f3:15:6c:3b:c3:50:
75:5e:a5:dd:8e:eb:07:b6:9f:fc:6f:ad:d6:cc:4e:
1e:2c:c3:d4:2c:da:b8:f0:8b:24:32:27:3e:1b:da:
cf:74:6f:b3:99:2a:c8:7d:b5:6a:41:bd:4b:72:4e:
d1:ac:a6:af:c3:6f:dd:26:1f:30:b7:76:28:92:c6:
74:c5:28:b0:a9:6c:aa:10:1e:ec:b6:30:18:5a:b6:
f5:68:4d:0b:38:36:06:fd:59:1c:de:8d:db:ec:7e:
bb:e1:51:a4:bf:7f:d0:26:dd:ff:d2:29:67:ba:5a:
2e:25:c6:06:f5:b2:2f:2e:3b:85:6b:e3:67:0a:6d:
82:8d:9f:01:e1:04:68:36:78:68:db:02:b5:9a:ad:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:EE:95:55:61:63:37:1F:0C:D4:43:47:46:C7:09:D2:5F:E5:A9
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:41:e2:f9:3a:f4:48:d1:e9:97:6a:68:a6:63:49:6c:98:26:
c5:40:2f:2a:c8:68:40:d3:06:c4:b3:c7:04:1d:6f:fc:5b:d5:
b9:23:8d:51:dc:7f:c1:3f:df:45:ef:40:cf:41:10:90:17:d5:
05:c1:fd:4e:f2:0e:49:28:7a:38:2e:f2:f9:cc:fe:1e:e6:01:
9c:79:29:c9:5a:dc:62:b0:fa:48:66:ea:13:59:41:6c:bc:aa:
f7:b6:b3:e0:a0:87:1c:58:93:45:a3:db:34:ff:a3:44:33:1a:
66:df:2a:cd:6c:e1:26:f1:b8:49:52:d2:11:c3:cd:bc:22:82:
34:ed:8c:e6:53:cf:3a:65:05:73:8f:88:24:ec:d9:ff:6f:de:
27:8e:41:a1:d8:0f:51:3e:f5:55:c4:9a:cd:49:91:93:5d:9a:
2e:60:48:df:0b:05:f0:28:62:b1:1d:ad:0e:08:a7:fb:74:7c:
a2:6a:ee:f9:6a:43:cb:4d:78:5f:ec:fd:bc:b1:a1:db:d2:42:
c5:c0:5b:0e:40:62:ec:d6:76:8f:32:e7:24:a2:4d:d4:f0:30:
cf:38:08:1e:94:61:44:19:bd:e2:27:44:9c:e6:d6:cf:90:5b:
e5:e6:da:97:38:11:a7:2a:0f:23:ca:3d:36:39:0a:c7:ee:95:
45:3b:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:10:52 2026 by rpki-client