Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: ioHFsSP0GJkzvnLyCUAdcH1p8FY+yZ54VqvJ1rgcS2s=
Subject key identifier: C7:45:BA:FA:7C:FE:8B:22:11:0C:F0:35:33:01:7F:16:28:A6:0E:00
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019D29978603D980963CAB1EB494AEF7432E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0BB8
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: IUKa1jq7c61JaP3DisCiz9PkAiyLGuH2CepayJkvm9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:86:03:d9:80:96:3c:ab:1e:b4:94:ae:f7:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=c745bafa7cfe8b22110cf03533017f1628a60e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:54:36:01:8f:b6:0f:ad:2e:38:95:ec:cd:
95:6e:3b:a1:dc:41:a4:f1:dc:0e:45:d3:34:32:cd:
fa:c7:71:85:62:34:21:92:dc:1c:cc:27:be:2c:78:
99:08:2f:37:64:cf:23:f7:ac:62:cf:86:ab:4e:ed:
c4:81:f0:b1:65:53:c7:ae:61:00:d0:0f:cf:9c:2e:
00:9a:06:7c:f3:86:56:88:b6:72:e1:4e:9b:49:f7:
18:81:99:0f:0c:83:4e:cc:d7:de:aa:a5:7e:0b:ee:
c8:13:45:bb:62:34:34:92:09:7f:a2:40:74:11:ab:
82:ed:d4:98:58:02:51:13:43:92:6a:c3:c3:7e:03:
93:04:b4:cd:c0:83:ec:04:21:1d:7b:34:f9:01:fd:
67:d8:52:9c:d1:bb:cf:3d:cd:b9:0d:a1:c7:df:ac:
a6:db:d6:12:c2:4c:29:23:41:f8:e8:5b:92:44:21:
f3:91:77:a7:da:ca:60:14:7d:e3:c9:01:ba:75:b9:
d6:79:e2:36:7c:8e:f6:de:c2:30:f4:e6:a2:e8:1c:
07:62:4f:51:a9:0b:6f:36:e5:db:bc:db:85:c8:a2:
91:cd:2f:21:f1:4b:a5:59:a3:1e:c8:ab:d7:17:35:
32:4d:f4:4a:0e:c0:7e:7e:55:e5:df:4f:3f:73:87:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:BA:FA:7C:FE:8B:22:11:0C:F0:35:33:01:7F:16:28:A6:0E:00
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:c9:e7:9d:c8:9d:13:69:dd:39:78:ab:6b:bd:48:20:81:
c5:e6:b0:fd:7b:0d:00:e6:8a:bd:7a:d9:6e:58:ea:88:58:e6:
ac:e2:eb:c2:f2:12:a6:8a:85:97:96:1a:68:a3:d9:69:ff:1a:
ef:51:93:d7:8e:7e:7c:42:fe:72:3c:2a:2d:67:e3:75:e0:22:
fa:24:ba:56:61:84:12:91:80:29:4e:de:34:c6:f2:fd:66:1b:
9e:c8:91:f2:be:43:96:1d:9d:d8:92:26:e8:ea:24:ea:24:7f:
01:cb:ba:34:da:26:c4:31:f9:44:ed:2c:ff:b5:17:4f:5f:c5:
0a:33:61:f1:7e:3b:62:a7:10:71:1a:58:f2:aa:33:8b:dd:cc:
e8:3b:6a:ba:06:0b:64:ab:4a:8d:93:3c:48:d8:42:38:63:7c:
45:03:69:67:35:ee:3b:25:6d:6f:6a:56:b8:eb:75:50:5e:e8:
1f:2e:51:36:29:24:58:ca:1b:be:21:65:b6:be:6f:4c:6e:58:
36:f5:3d:82:aa:06:d1:79:0d:27:b5:74:4d:53:8e:a9:4d:21:
c5:78:25:09:e0:49:0c:80:40:16:46:cd:81:17:a9:c9:bf:19:
f4:2c:43:3d:5e:4f:5a:7f:05:e3:3a:59:7c:24:fd:75:39:27:
35:f5:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:04 2026 by rpki-client