Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: 3wa1UMYQx1CkaH+6Y4SfrOrMOV41VTbE0cXpcAEfg40=
Subject key identifier: 81:F9:8C:6A:69:7F:64:EF:56:9D:BE:8F:76:51:F3:0C:8D:9A:8B:66
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019D26CD678D465CDBB0B78F603F98E679C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 0489
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: s2myQzvnICprGxvtvqLsyDVt+zKC09nYNp80vMm4IzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:67:8d:46:5c:db:b0:b7:8f:60:3f:98:e6:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=81f98c6a697f64ef569dbe8f7651f30c8d9a8b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:2b:a7:3a:27:1a:24:e2:c1:06:70:d3:d0:
1c:d7:99:9f:5f:e1:eb:be:96:6f:25:34:42:ec:c9:
3c:8b:86:d2:79:7b:e1:36:bf:91:78:94:c5:ba:65:
29:1a:1b:94:10:c4:60:c9:59:2e:47:05:ac:de:c9:
6c:6b:e4:bb:0c:7f:bc:ef:65:66:c1:03:d0:ff:f6:
a5:ac:4e:b2:70:7e:67:22:8c:42:39:18:65:0d:98:
4b:bc:f5:bc:3f:53:ba:eb:d1:97:aa:bb:cf:32:e7:
6a:52:2b:1c:11:b5:68:d0:68:0e:ad:17:53:da:4e:
e1:60:f2:97:c8:fb:6b:65:d5:c5:49:e5:46:1e:6e:
d2:d3:92:59:18:c3:f1:43:c3:33:36:92:17:37:fd:
6d:47:3d:b7:90:f3:6b:f3:91:35:18:f7:08:91:1c:
28:b5:40:f9:f5:c4:63:cc:d4:15:61:df:19:d4:7f:
91:6a:c5:ec:47:98:ec:27:26:9c:d1:8d:2b:83:61:
3e:7d:7f:f9:8e:68:2a:ba:6f:2e:69:b3:53:e2:d6:
ee:8d:a3:e4:13:7e:86:23:15:a3:94:1b:3d:9d:0a:
52:2e:51:18:94:c0:7d:f1:eb:3f:9d:4c:b2:2f:91:
90:33:78:c5:4e:2c:66:9e:39:4f:d3:0b:cb:17:ea:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:8C:6A:69:7F:64:EF:56:9D:BE:8F:76:51:F3:0C:8D:9A:8B:66
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:b4:14:8e:3d:32:a6:47:7a:e8:82:2d:d2:ba:53:b4:c4:
e8:3c:36:c8:5b:8b:c2:ca:93:81:18:cc:15:f0:79:79:b2:3f:
c3:52:7f:92:08:1b:a5:f6:25:a2:39:65:bf:cc:0c:70:74:89:
ac:3a:b7:07:bc:0e:7c:36:53:88:1b:70:d9:44:22:65:ba:24:
dd:b7:f5:01:bc:69:9e:bb:a6:b9:9e:b9:b7:12:d8:e8:08:8e:
b4:20:e6:f0:57:90:55:03:3d:4a:9d:ee:db:b7:17:cc:3d:d2:
61:95:b6:f7:a8:90:60:49:8a:0d:66:f4:d6:5a:30:0f:df:bb:
c8:b9:05:f8:8d:7c:9c:a5:05:a0:b5:c4:e8:ee:0c:8d:75:de:
1b:c1:bb:34:2b:f5:b5:4e:e5:5d:94:6c:40:f4:b2:a1:ca:09:
0d:01:8d:7b:a7:33:82:2d:13:50:2a:30:a7:c2:96:36:77:57:
33:91:da:a5:6b:91:97:69:d0:ce:5d:d6:0b:3a:5e:e8:a7:90:
22:29:fe:ba:fe:7d:46:36:77:c8:e0:91:ee:60:70:21:eb:82:
d2:7b:ba:7e:d2:42:ba:f6:74:e6:6b:dc:84:9b:80:22:a3:0b:
21:ed:b4:f0:15:64:30:29:55:71:9c:94:84:ba:e5:cf:2c:5a:
e8:d2:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:35 2026 by rpki-client