Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: Is3NEQZudSI6FDN0d8uFcE3V1mGilH6C9w/cGMnlWAY=
Subject key identifier: 83:6C:53:2C:D6:5B:66:DD:8D:0A:29:15:70:BD:73:EF:97:71:50:35
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019F91A3A4DE376260B45BF7E3CD610FD7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0CF7
Signing time: Fri 24 Jul 2026 01:00:48 +0000
Manifest this update: Fri 24 Jul 2026 01:00:48 +0000
Manifest next update: Sat 25 Jul 2026 01:00:48 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: 9g57jfty/z+va1qgdfCmsaT7Ulslu0IjJ0vH/2X21sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:a4:de:37:62:60:b4:5b:f7:e3:cd:61:0f:d7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jul 24 01:00:48 2026 GMT
Not After : Jul 25 01:00:48 2026 GMT
Subject: CN=836c532cd65b66dd8d0a291570bd73ef97715035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:9f:06:64:c0:0c:cd:1d:60:c0:21:d9:e6:
f8:60:2d:d0:be:f5:58:d3:f1:0d:a9:7b:cb:02:61:
c7:04:4b:fc:15:39:71:ef:61:48:0a:97:df:df:d8:
76:41:4d:0e:3b:f0:52:ac:31:95:40:8f:62:43:30:
17:d2:40:fe:31:d4:36:05:56:25:63:93:d3:ab:be:
d5:9a:cc:11:98:e6:a6:68:96:9e:3c:01:04:81:a0:
b0:77:83:20:d5:47:db:27:35:0d:96:21:11:6a:8e:
1e:bd:46:1c:22:7c:ee:df:f8:ce:d5:03:90:b9:d0:
3d:76:9f:b8:97:16:52:98:34:5e:b6:cd:dd:a5:8f:
74:ba:a6:5f:5c:ef:c6:94:eb:53:54:c4:01:82:2a:
83:88:4a:dc:59:fb:47:1b:a7:65:d9:35:f4:ae:e6:
87:de:48:ee:c3:03:3b:25:71:b8:27:61:f8:34:57:
f9:e4:41:09:6d:f7:6c:11:db:0b:fb:ac:09:94:fa:
d5:c4:fd:97:6e:2f:55:9f:9b:51:57:4c:04:13:af:
80:74:f4:f6:65:ba:43:90:d3:c7:92:c9:6d:c8:1b:
5b:55:cf:af:52:47:3e:c8:a3:49:8b:2d:78:56:91:
97:7f:6e:2a:cd:62:0f:74:75:31:73:77:f3:56:a5:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6C:53:2C:D6:5B:66:DD:8D:0A:29:15:70:BD:73:EF:97:71:50:35
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:19:2a:12:87:21:9b:59:89:8e:43:99:5c:75:72:40:ef:37:
c0:8c:0d:96:63:24:4b:12:13:3d:58:35:cf:c9:b7:e8:cd:39:
1b:1f:25:cc:71:3b:33:42:3c:2f:b8:77:db:01:c5:8f:c9:0a:
ee:06:8a:39:ae:bd:e8:81:f2:36:ba:0b:91:04:88:82:0e:4a:
7d:e6:95:5f:be:77:31:b2:aa:88:26:c8:74:8f:5e:09:af:da:
80:d1:c1:7a:d1:d5:76:b0:d6:39:b5:03:be:d0:fb:e8:24:ba:
e4:5f:c5:fc:6e:35:8f:ec:d8:63:6c:13:5b:67:d2:c5:f7:27:
c5:c3:e3:7f:46:55:1c:90:9f:88:c1:83:e3:42:31:4a:ba:69:
e4:7e:06:b1:ad:8d:30:5f:82:e9:32:5c:9c:d5:40:f2:3e:6b:
c1:1d:24:07:27:8a:e3:70:a7:42:47:6a:5c:65:06:ae:bb:7b:
9d:ba:6e:6d:13:64:76:7f:8a:33:e8:49:86:70:e7:92:f7:22:
68:92:58:b0:5c:3e:3a:77:46:46:ea:f1:f4:03:fb:de:c6:83:
21:c5:e5:98:ec:53:53:74:6e:d8:25:e1:2c:3b:07:6e:ea:f6:
ef:80:e5:12:cb:25:40:7d:17:db:b3:11:0f:b8:ce:27:f9:2e:
de:44:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:44 2026 by rpki-client