Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File: nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier: hRGveC0oeBWYAVYImXbbxMONuWYneBI40DDpNRqmHiw=
Subject key identifier: E2:41:D2:BC:B0:D5:3C:6C:2E:41:48:ED:28:23:36:EF:F3:FA:27:FA
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial: 019D28F2EC5A3F37DA120665CE426311B2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: EqP-OwutSropMKZDpJsJICxaOQA.roa (hash: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA=)
2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: avB5Qn+eU7Z7URCOKAfbWFuz5DmUEzt+PyPKhNREVt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ec:5a:3f:37:da:12:06:65:ce:42:63:11:b2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=e241d2bcb0d53c6c2e4148ed282336eff3fa27fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:c6:c5:d0:01:42:2f:9e:10:33:2c:99:a0:
c3:d9:c0:3f:bd:43:52:76:10:2b:6f:10:2c:78:02:
89:b1:ee:a2:48:8a:43:4e:cf:0b:2e:18:68:07:83:
a0:ea:54:d1:38:8f:04:ce:a8:4c:47:49:19:5c:c0:
d9:f8:f0:1a:07:f7:a5:15:cb:34:2d:d7:93:b4:6c:
cb:8e:ef:4c:a7:1b:79:66:b3:e5:22:ae:4f:47:e8:
7a:7b:91:76:7b:cb:a8:40:dd:24:4f:8a:d7:6c:08:
b8:b7:47:20:af:90:5b:ff:1f:16:6a:38:5f:18:e6:
96:f1:48:37:f1:3b:87:9c:1c:f2:cf:bf:28:bc:35:
3b:30:17:04:32:4b:38:98:2c:4f:66:a3:65:08:94:
31:fa:68:1c:75:3e:70:7b:5d:9d:2a:dd:81:0d:f4:
93:f5:b2:ac:d5:a8:9e:b2:33:01:cf:c4:16:a2:45:
9c:bb:56:52:6d:ca:80:52:67:f0:7a:96:c9:94:56:
33:de:36:55:5d:4b:5e:51:ac:a7:69:02:81:9d:09:
54:81:9e:d3:41:4a:a9:a4:9b:b2:19:d2:46:74:bb:
8d:20:bd:13:65:cf:de:1b:41:a2:e5:0f:02:47:ab:
15:2b:b6:48:77:8d:ed:41:7c:4c:23:ab:ae:04:d1:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:D2:BC:B0:D5:3C:6C:2E:41:48:ED:28:23:36:EF:F3:FA:27:FA
X509v3 Authority Key Identifier:
keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:6d:43:c1:b5:5f:d3:f9:af:2f:6f:47:b1:53:b4:23:86:
16:e6:0f:29:e1:87:42:c0:0c:86:30:57:46:77:fe:16:2d:fc:
37:64:27:c1:c7:b3:48:ca:48:4b:b7:ae:8a:b6:cf:01:29:1b:
86:35:7b:92:08:66:39:23:9a:2e:00:51:78:56:c5:5d:48:df:
91:6d:85:42:b1:37:aa:ff:9b:02:e6:2f:77:cf:04:d9:89:40:
51:aa:9f:40:c0:bd:fb:ec:0b:00:e0:bb:04:00:7d:20:5c:ec:
c8:e4:7c:1f:b5:34:3b:3a:27:00:5d:da:fe:9a:43:ea:9b:41:
1f:55:51:4c:08:e5:8b:2b:ab:0a:f3:b4:23:6a:d4:03:a3:75:
81:7e:35:a1:0b:36:db:99:86:45:76:87:41:69:f1:7b:6f:e3:
47:c9:e8:52:fa:1e:52:ec:d4:bd:53:41:08:e7:80:f9:df:81:
7f:34:92:4c:f8:6b:15:ad:83:e1:14:17:6f:fa:a4:36:e1:9a:
70:fc:a9:33:db:d8:2e:68:0b:69:b2:c8:89:c7:4d:47:69:43:
35:24:1a:dc:2f:34:5f:24:54:a5:b7:65:47:e6:e5:0e:65:7d:
92:2c:24:5d:82:c2:7f:b8:13:96:45:c7:0f:7a:59:c6:69:58:
31:35:1f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8uxaPzfaEgZlzkJjEbLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzYwZWQ4ODE0MThhMjE3ZThkZDNjMWZhNTIzZTI1NjVj
YWViOWIwHhcNMjYwMzI2MDcwMTQxWhcNMjYwMzI3MDcwMTQxWjAzMTEwLwYDVQQD
EyhlMjQxZDJiY2IwZDUzYzZjMmU0MTQ4ZWQyODIzMzZlZmYzZmEyN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8jGxdABQi+eEDMsmaDD2cA/vUNS
dhArbxAseAKJse6iSIpDTs8LLhhoB4Og6lTROI8EzqhMR0kZXMDZ+PAaB/elFcs0
LdeTtGzLju9Mpxt5ZrPlIq5PR+h6e5F2e8uoQN0kT4rXbAi4t0cgr5Bb/x8Wajhf
GOaW8Ug38TuHnBzyz78ovDU7MBcEMks4mCxPZqNlCJQx+mgcdT5we12dKt2BDfST
9bKs1aiesjMBz8QWokWcu1ZSbcqAUmfwepbJlFYz3jZVXUteUaynaQKBnQlUgZ7T
QUqppJuyGdJGdLuNIL0TZc/eG0Gi5Q8CR6sVK7ZId43tQXxMI6uuBNEwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJB0ryw1TxsLkFI7SgjNu/z+if6MB8GA1UdIwQY
MBaAFJzGDtiBQYohfo3TwfpSPiVlyuubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2Ut
NGNhODQyYmFjZGE1LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2UtNGNhODQyYmFjZGE1
LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQltQ8G1
X9P5ry9vR7FTtCOGFuYPKeGHQsAMhjBXRnf+Fi38N2QnwcezSMpIS7euirbPASkb
hjV7kghmOSOaLgBReFbFXUjfkW2FQrE3qv+bAuYvd88E2YlAUaqfQMC9++wLAOC7
BAB9IFzsyOR8H7U0OzonAF3a/ppD6ptBH1VRTAjliyurCvO0I2rUA6N1gX41oQs2
25mGRXaHQWnxe2/jR8noUvoeUuzUvVNBCOeA+d+BfzSSTPhrFa2D4RQXb/qkNuGa
cPypM9vYLmgLabLIicdNR2lDNSQa3C80XyRUpbdlR+blDmV9kiwkXYLCf7gTlkXH
D3pZxmlYMTUfew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:47 2026 by rpki-client