
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: bgoUyXqBb6mJ675Rt9rUQ5HUQ5lYSkB8uBjeqiKZE4c=
Subject key identifier: 40:5B:C9:12:5B:20:BD:32:26:44:F6:66:12:2B:A7:96:FF:FC:48:47
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 01A0CFA42A0DE2FE28AC48673A515CF1E4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 177B
Signing time: Wed 23 Sep 2026 19:00:37 +0000
Manifest this update: Wed 23 Sep 2026 19:00:37 +0000
Manifest next update: Thu 24 Sep 2026 19:00:37 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: wNQgwbcEXBv6cXCArxNDIUo1ALfZwcllqWK30KgO0Dk=)
2: crNlSSD3_o_rjDJ4ivFBA9DmxII.roa (hash: i+4Sbb5mbplP6hBN7BRF7gYb3D64RivwGrpfd57ymKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:2a:0d:e2:fe:28:ac:48:67:3a:51:5c:f1:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Sep 23 19:00:37 2026 GMT
Not After : Sep 24 19:00:37 2026 GMT
Subject: CN=405bc9125b20bd322644f666122ba796fffc4847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:8a:1c:bd:94:23:2d:81:6c:b0:0e:23:0c:
27:b2:b4:68:d6:22:9f:1b:ed:ee:c8:91:5a:fe:d1:
ed:b1:ab:42:28:2f:13:48:1f:4d:38:4c:ea:43:02:
d8:f4:bf:56:e4:0f:e6:b6:55:1e:47:14:b1:6e:0c:
3c:e5:bf:26:78:64:b0:77:06:93:23:96:ff:88:fd:
c4:05:20:1b:6a:b3:dc:ff:43:44:64:af:ed:ff:3a:
a5:0a:a7:38:8d:5f:1c:b8:b5:3a:22:f2:eb:f3:39:
23:86:b9:4e:e6:f9:4f:f6:a7:b6:4d:23:49:f7:29:
2f:ab:8a:94:eb:fc:44:77:9a:06:ac:72:6e:fc:19:
e2:ae:a7:19:5e:ab:07:1b:2b:36:17:02:30:44:a1:
34:e0:ec:73:a7:c4:39:c8:82:05:22:82:bd:e4:98:
38:8d:ed:9b:56:4b:02:75:70:64:ed:62:35:05:8b:
b3:61:f2:01:39:f6:51:92:3d:b1:72:eb:2f:a1:e4:
19:d3:6e:25:ba:2e:a3:9d:f4:f1:27:81:a0:8e:da:
59:78:8d:2a:cc:16:86:f2:6f:20:b4:c3:f9:fa:10:
35:5b:11:f3:98:ee:87:7c:c6:0b:a0:e2:83:5d:0f:
d0:0c:e9:e4:67:92:ea:f6:21:17:07:04:aa:3b:01:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:C9:12:5B:20:BD:32:26:44:F6:66:12:2B:A7:96:FF:FC:48:47
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:9c:77:8a:2e:e8:29:06:ef:8c:3f:be:99:2d:0f:ae:b7:
f1:98:75:a1:10:bd:3b:eb:c0:8f:67:24:46:70:48:ac:75:a7:
98:d2:38:20:fe:70:11:51:17:80:8c:e0:26:7c:74:f7:60:9d:
c3:a8:f0:79:0f:d9:95:95:68:3d:b2:e5:bb:d5:33:bc:d3:e0:
61:fe:a1:5c:d3:1b:f1:db:33:58:fb:07:d3:5b:78:74:54:48:
2f:a6:2f:e6:29:27:6b:eb:bb:3b:93:45:9a:2d:d3:8b:3f:69:
a7:b3:8a:b4:8d:11:00:04:28:94:97:c7:2b:13:e2:01:e6:09:
ea:ab:fd:04:47:f2:2f:c8:6e:cb:ac:69:d5:86:60:53:e7:a8:
a9:40:82:6a:5a:a9:58:94:48:af:4f:16:b3:27:d1:89:14:f3:
b2:a0:2e:36:79:9e:cf:1e:0e:d7:14:c1:24:3a:ba:6a:82:80:
b4:cb:1b:a5:7c:ec:99:83:40:86:cb:91:fd:bc:94:6a:ea:cb:
3d:f4:d0:b8:ef:c2:84:cb:b5:52:93:50:c0:f8:9a:85:40:2c:
70:ac:41:e9:4f:46:ca:4c:ee:b1:97:ae:bd:ec:84:bb:b6:e7:
dc:a9:8a:f6:a4:a0:1a:65:42:61:41:a7:0a:fe:1d:bc:84:89:
fe:41:80:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpCoN4v4orEhnOlFc8eTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjIwNDNhMzFkZDliZDJiN2NiMTg2MjdlYjRiYWMxMTg0
MGNlMTYwHhcNMjYwOTIzMTkwMDM3WhcNMjYwOTI0MTkwMDM3WjAzMTEwLwYDVQQD
Eyg0MDViYzkxMjViMjBiZDMyMjY0NGY2NjYxMjJiYTc5NmZmZmM0ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0KKHL2UIy2BbLAOIwwnsrRo1iKf
G+3uyJFa/tHtsatCKC8TSB9NOEzqQwLY9L9W5A/mtlUeRxSxbgw85b8meGSwdwaT
I5b/iP3EBSAbarPc/0NEZK/t/zqlCqc4jV8cuLU6IvLr8zkjhrlO5vlP9qe2TSNJ
9ykvq4qU6/xEd5oGrHJu/BnirqcZXqsHGys2FwIwRKE04Oxzp8Q5yIIFIoK95Jg4
je2bVksCdXBk7WI1BYuzYfIBOfZRkj2xcusvoeQZ024lui6jnfTxJ4GgjtpZeI0q
zBaG8m8gtMP5+hA1WxHzmO6HfMYLoOKDXQ/QDOnkZ5Lq9iEXBwSqOwHkvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBbyRJbIL0yJkT2ZhIrp5b//EhHMB8GA1UdIwQY
MBaAFDZiBDox3ZvSt8sYYn60usEYQM4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDct
ZDliMDdmYmJiYmRiLzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDctZDliMDdmYmJiYmRi
LzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Ccd4ou
6CkG74w/vpktD6638Zh1oRC9O+vAj2ckRnBIrHWnmNI4IP5wEVEXgIzgJnx092Cd
w6jweQ/ZlZVoPbLlu9UzvNPgYf6hXNMb8dszWPsH01t4dFRIL6Yv5ikna+u7O5NF
mi3Tiz9pp7OKtI0RAAQolJfHKxPiAeYJ6qv9BEfyL8huy6xp1YZgU+eoqUCCalqp
WJRIr08WsyfRiRTzsqAuNnmezx4O1xTBJDq6aoKAtMsbpXzsmYNAhsuR/byUaurL
PfTQuO/ChMu1UpNQwPiahUAscKxB6U9GykzusZeuveyEu7bn3KmK9qSgGmVCYUGn
Cv4dvISJ/kGAng==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:43:37 2026 by rpki-client