Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: 3E7DbxtTPG92QRXsB92ISPt8tTQyDm7sF1Y/reRWgC8=
Subject key identifier: B0:10:0A:BF:9B:EE:2C:96:96:69:F5:8F:B1:66:54:47:7A:A3:10:5D
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 019D27A92AA2EFAAF024075A8C876C5294A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 075C
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: SKjnoxDDqAwexzDA+kzvKsfcZjRDvwykeqoiht9INS4=)
2: wZUVkqB6E-aCMAdUL9kA2ghbJsU.roa (hash: 3wvCztUy4SNcpk1iX0gY8NL+kTpS+pWyTYrHQh19Dds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2a:a2:ef:aa:f0:24:07:5a:8c:87:6c:52:94:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=b0100abf9bee2c969669f58fb16654477aa3105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:3d:f5:b6:ce:56:53:e3:b1:c8:cd:18:d4:
27:89:79:e4:8e:6a:3e:6b:13:8d:57:d3:1b:8b:c4:
b8:ce:55:0e:14:78:73:67:a1:bb:c8:0f:68:a6:ba:
84:58:07:c8:50:67:6b:42:54:eb:3b:5c:f6:ab:a0:
cc:d6:52:ee:a1:d0:12:87:c8:73:34:75:84:7a:15:
e8:26:c1:ee:fb:19:86:37:88:53:22:73:13:2a:f5:
9f:be:da:28:94:e0:d3:a7:ea:83:c4:aa:d6:2e:33:
9b:e2:69:14:3d:a1:db:f6:ed:5b:5a:4e:e8:eb:de:
5c:06:b5:bb:5d:ab:44:e7:0f:c0:c0:bb:a7:48:27:
3a:55:de:22:0b:ad:6a:18:da:74:7b:c4:a4:53:2e:
9a:c8:36:1d:89:a7:07:63:2f:b6:93:7b:57:86:59:
c4:96:49:d6:3f:31:80:91:b6:97:b6:83:97:09:ad:
40:b2:1d:a7:ac:41:bb:65:1e:f7:8c:99:f1:cc:41:
19:e6:98:31:29:54:c1:63:d7:6f:75:1d:ee:7b:d8:
2a:30:f2:c1:42:df:3d:41:3c:3c:03:1a:b0:35:00:
eb:f5:75:6d:0b:f4:44:a2:2a:c3:15:ff:8f:34:c0:
0b:f2:5f:84:69:63:41:fa:d7:66:d7:63:c3:1d:c5:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:0A:BF:9B:EE:2C:96:96:69:F5:8F:B1:66:54:47:7A:A3:10:5D
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:27:45:8b:5c:a0:a4:6b:5c:1a:02:df:50:c6:79:0e:78:3b:
6c:fe:7b:31:b9:bf:2e:51:15:a0:0d:3e:1b:06:7f:43:7d:cd:
16:a9:30:82:9c:2c:e6:64:27:f2:6a:5a:62:bc:11:37:16:c9:
21:e7:77:6b:dd:93:2a:b9:22:44:32:89:dd:57:28:cc:90:ed:
e3:52:b9:1c:fb:8a:66:38:4d:1a:61:93:1d:a6:54:06:82:dd:
01:db:16:cf:96:00:b4:b1:cc:e5:3e:1a:d1:b0:40:da:34:4d:
33:43:95:8c:ea:ad:0d:06:2a:db:15:9d:f1:93:c6:f7:88:d6:
6c:f4:bc:e7:38:16:01:27:77:98:4a:04:00:b9:de:a1:8a:b6:
66:6b:29:8c:0b:ff:be:d9:77:86:08:cb:77:0a:4a:3a:14:86:
2b:48:72:9b:2e:be:89:8c:fd:ef:1a:75:27:21:3c:cc:75:7d:
e1:cf:19:b8:f1:b6:b2:a1:5d:39:8e:d9:9d:6b:82:16:6e:7a:
6e:60:6a:98:e2:83:ea:8e:f2:06:51:22:8c:a6:b9:64:1f:ec:
e8:aa:cc:c8:41:33:f6:f7:1c:36:5e:62:dc:d2:e5:92:5c:f6:
62:8b:91:1d:b2:2f:6b:c6:29:a7:90:cb:90:e9:ba:e7:39:16:
0f:86:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:00:54 2026 by rpki-client