Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: Uzjlxx9b0lp/NmTEOtYG8wzRIkC1rjhaKvjx+Hq6HJ4=
Subject key identifier: 48:33:CD:BB:C1:88:2F:45:D6:D2:D5:4A:51:15:4B:C0:2D:32:5A:8B
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019D2772504CDE0241EF624F727CDD9CB587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:36 +0000
Manifest this update: Thu 26 Mar 2026 00:01:36 +0000
Manifest next update: Fri 27 Mar 2026 00:01:36 +0000
Files and hashes: 1: 2qeXnV7d55wsyTxXPZhmXkTZqtI.roa (hash: N5i/RmZVF7k/2lLz1w31AlHZluiVFO2dv4zutOE7K+A=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: GoRU+U9WHND1WNec2eqbUEyYVRv0S16a+ODR61ZPXDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:50:4c:de:02:41:ef:62:4f:72:7c:dd:9c:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Mar 26 00:01:36 2026 GMT
Not After : Mar 27 00:01:36 2026 GMT
Subject: CN=4833cdbbc1882f45d6d2d54a51154bc02d325a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:eb:07:9a:ef:d0:f9:20:dc:b5:bd:5b:19:
76:ef:ed:f1:e3:df:7b:e2:48:f6:01:ac:53:8c:d7:
d3:6b:dd:ba:7a:c7:73:a8:ed:1a:42:6a:44:3c:15:
4e:f5:47:e3:e3:eb:17:49:19:e9:27:4a:8e:b2:71:
22:d9:83:64:1e:5b:c8:95:d0:4b:35:6d:68:48:e1:
2e:27:2b:aa:22:b1:ad:18:15:f4:62:77:e4:f3:c3:
0c:73:22:15:87:8d:90:95:94:a4:a2:fc:75:c0:22:
fa:14:35:86:7b:59:c7:74:e4:13:e4:4f:31:2e:45:
6c:b5:3c:03:3b:12:66:8b:59:ea:54:15:24:15:6a:
79:97:ef:51:2d:52:be:41:a2:85:79:98:c6:9c:6d:
04:58:a3:ae:81:34:f2:b4:26:50:08:09:c0:b6:38:
b2:9f:7e:7f:88:4f:4a:66:b3:0d:23:47:db:2f:ae:
15:d2:6f:27:f1:14:e1:39:7b:6b:f9:57:d6:4c:62:
ab:8a:4c:ac:7e:c3:d4:18:29:6a:da:30:38:b3:8f:
dc:5b:b0:02:56:67:c0:78:8d:29:80:35:99:41:0a:
f5:27:c5:de:40:f1:9b:03:e6:32:f8:27:ac:01:53:
c5:a0:8c:66:be:6c:1c:39:79:13:ef:57:98:f8:7a:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:CD:BB:C1:88:2F:45:D6:D2:D5:4A:51:15:4B:C0:2D:32:5A:8B
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f2:92:9c:e1:6f:5d:d5:dc:52:1e:d4:53:f2:0e:36:8d:0e:
ad:14:e5:43:7f:59:42:9a:a2:4a:45:09:fe:4b:5b:87:09:22:
c8:e3:c8:70:e3:07:57:49:95:76:08:4c:ae:6c:1c:74:ba:bc:
fa:dd:8e:50:f6:9f:32:e8:33:b7:d1:a3:9d:b2:7c:49:19:64:
5e:9b:89:e0:7a:47:a2:40:e6:4a:6a:4d:4e:38:bc:e6:ed:17:
d5:03:04:4b:df:c5:13:d3:6e:47:df:3a:95:0d:c8:f4:6a:36:
29:73:39:76:f9:69:cb:53:c0:03:b3:4d:5a:8a:72:e8:31:b0:
6d:31:60:a5:ea:89:cc:53:f5:0e:70:74:58:6e:80:d1:bf:b7:
fa:e3:0b:28:52:97:e7:88:f9:ff:c4:a2:a4:fc:f7:ee:6d:b9:
98:70:2d:ee:15:96:0b:e0:a4:f7:cc:f1:71:df:c5:f4:32:af:
56:4d:67:a4:f1:06:2a:51:ae:b6:b1:67:c2:6c:29:b6:6d:7a:
7a:39:71:47:c8:e5:78:55:c1:14:fa:df:8c:72:60:ea:db:b6:
2c:62:a5:f0:c0:9f:50:ad:79:99:40:c0:28:80:08:e0:e0:46:
86:85:e3:87:fc:22:cb:df:c5:fa:da:9e:75:3b:f0:87:c7:f3:
4e:b6:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:24 2026 by rpki-client