Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: 6JFd3aHOsw1zQtdNv3rmlh7veVx0vL+5pNaxEifNu8M=
Subject key identifier: 55:57:5C:D7:63:BD:D4:E1:2D:F6:FF:4C:CD:C0:26:C0:14:4E:17:18
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019E1EDA109D07F9ACDAA46F866820A72E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0C37
Signing time: Wed 13 May 2026 01:01:07 +0000
Manifest this update: Wed 13 May 2026 01:01:07 +0000
Manifest next update: Thu 14 May 2026 01:01:07 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: lja7N7fF7MPxNvCCgHc+oDKAWN05WzKfeoWU+kab0HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:10:9d:07:f9:ac:da:a4:6f:86:68:20:a7:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: May 13 01:01:07 2026 GMT
Not After : May 14 01:01:07 2026 GMT
Subject: CN=55575cd763bdd4e12df6ff4ccdc026c0144e1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:42:e3:37:79:1b:65:ff:92:5a:f8:fe:13:
0d:fe:e2:c6:5e:99:b9:ef:26:c3:aa:45:74:59:f0:
7f:0d:ff:78:88:9f:f6:32:1d:45:94:f2:7d:a2:d0:
66:69:98:3a:c7:df:a7:be:7e:7e:fc:03:db:43:c1:
6b:73:ca:b3:c3:d7:6f:c7:fe:25:7a:45:6a:62:17:
6d:37:e4:c3:f0:b6:55:e7:c4:de:05:f3:79:76:1f:
73:c0:d5:70:25:85:2b:bd:f0:e1:fb:f2:d2:fb:fd:
d6:d2:a8:f1:48:d6:88:12:17:a8:11:86:e0:99:8a:
bd:9e:55:cc:b6:6f:dc:8a:aa:db:3b:dd:f3:9c:92:
e0:db:1c:32:5e:44:ff:b9:7c:26:c3:10:4e:58:47:
d3:f4:89:c4:48:17:a3:d9:84:41:7b:76:2b:a0:e1:
29:5a:ff:da:18:61:ed:6e:96:5a:25:e8:3a:59:3e:
6f:62:8b:cf:07:e1:83:4e:0a:ae:6e:88:43:70:d9:
fb:14:03:2a:ef:74:53:67:76:7a:8e:5b:c2:e2:4f:
94:bf:75:cb:b5:8a:60:be:0f:ac:da:89:c5:c2:e0:
02:1c:bb:eb:90:95:94:4e:1b:b8:0f:c7:e7:99:f3:
54:d6:56:1f:5d:66:73:1b:96:42:cb:bb:bd:56:5d:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:57:5C:D7:63:BD:D4:E1:2D:F6:FF:4C:CD:C0:26:C0:14:4E:17:18
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:84:94:99:c8:de:94:69:be:9d:ef:66:37:53:dd:b5:f0:e2:
e6:f5:3b:98:c4:aa:1a:27:5d:ad:ff:b2:18:e0:9b:a1:84:9c:
b9:3b:f3:dc:62:f2:a4:4e:e7:7e:e1:ae:74:3b:86:32:cc:27:
20:a5:e9:00:c7:8d:1c:fa:69:87:17:e9:fd:31:b2:d4:91:65:
8d:c5:03:d5:82:09:78:a0:70:85:80:af:02:10:d4:13:48:41:
73:6a:75:22:1e:2b:05:13:8c:05:36:dd:c8:d7:6b:3d:6d:4b:
fd:38:96:b8:e5:e2:ba:2a:df:39:be:73:2b:ed:a2:8c:fe:20:
ba:a8:a7:61:31:74:9a:e9:79:95:fe:84:67:b3:79:79:bb:a6:
71:de:7b:51:30:d0:1e:b6:39:37:ef:f3:bf:bb:a7:a1:39:a5:
80:e1:65:c9:16:27:6b:4f:bc:0f:53:36:ee:dd:af:7f:26:6c:
98:4e:97:f1:26:4d:25:d9:4a:22:0e:23:13:8a:a7:27:1f:81:
69:2b:52:25:72:c4:95:ea:48:f3:67:6b:da:8c:17:5b:11:e2:
5c:ea:cf:e0:29:65:27:72:95:1a:1e:65:e4:d9:0f:ec:b9:00:
37:bb:94:c8:f1:b4:89:55:72:8d:27:ad:79:39:53:84:22:aa:
ec:a8:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:02 2026 by rpki-client