Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: m70DL1CnXeqGCjHOm/Qu+AopfEPYkki5h7OdJRiWnuc=
Subject key identifier: 31:4A:AE:D6:37:70:49:87:C7:F2:28:1F:E2:EB:5A:CB:E8:2D:73:27
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019D273AF256168BEFB3AAC18FAC15449908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 047C
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: HfkxseWFmJsmy4Lwf1on5eCUWGHLEIf3gholII1PHMs=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f2:56:16:8b:ef:b3:aa:c1:8f:ac:15:44:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=314aaed637704987c7f2281fe2eb5acbe82d7327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:d7:d8:c6:20:18:8f:0a:27:ba:5b:70:32:
ad:d7:f6:bd:3b:5c:44:ea:27:1f:f8:96:44:f3:9c:
60:4a:04:8b:4f:f8:79:03:63:2f:ee:d1:90:4c:6b:
57:6c:a7:22:5c:23:0f:bc:d7:13:c5:bf:43:4b:c8:
77:bf:3c:db:25:02:3d:04:0b:c8:f3:43:40:0c:ce:
53:90:89:eb:bf:ee:94:68:46:56:0f:ed:f2:f6:17:
7a:e2:95:b3:30:1e:de:8a:b7:f3:a0:e0:73:04:94:
93:fe:3e:da:2e:42:71:61:9e:8e:61:8e:1f:04:64:
3e:96:66:91:86:f6:dd:5b:5a:be:f6:1d:e8:cd:a9:
3d:0c:18:9d:a4:01:fb:93:fd:aa:98:54:e2:f8:ab:
9f:87:fa:d3:3f:51:e8:78:fa:eb:09:70:e0:04:81:
04:c8:ac:a2:03:e9:8a:30:16:f1:55:77:d1:87:13:
7b:f4:96:e4:ba:27:23:7c:74:e4:f9:d4:ca:31:b3:
84:99:67:38:3b:fa:c8:73:aa:1b:07:7b:eb:f4:b9:
9a:0a:4d:bf:40:f8:0a:33:90:2f:fb:28:42:da:f7:
d0:ea:25:71:81:27:f8:86:f1:ab:0c:f9:26:fd:c1:
51:52:fe:ce:59:1d:07:eb:9d:4e:2c:38:20:9c:99:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:AE:D6:37:70:49:87:C7:F2:28:1F:E2:EB:5A:CB:E8:2D:73:27
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:55:21:5e:6b:78:a2:51:da:11:93:73:da:fe:cd:5d:ea:72:
48:de:3c:31:b4:ba:ba:aa:75:71:50:69:25:d6:3d:91:78:8d:
35:82:57:fc:1e:e0:aa:82:0d:ad:d9:85:1e:3d:4b:0d:c6:38:
4e:cb:f2:7f:ac:a1:db:03:3b:98:af:ef:ad:40:18:a9:f0:1b:
2d:38:41:59:05:c0:18:f0:da:31:4a:f2:96:5c:35:e7:56:47:
4b:8a:d9:59:50:cf:3a:01:19:6d:34:1e:c7:a0:8d:ae:bb:97:
b8:f7:c3:c6:41:a9:84:65:e7:b3:80:2a:c0:77:ba:88:62:ef:
d9:ac:df:28:16:0c:1d:1a:c7:13:0b:ce:5f:a5:b9:13:30:cd:
17:d4:94:3e:d1:d7:7b:98:c0:bf:b5:d2:46:ec:b4:e5:70:38:
d0:ce:16:96:61:51:e3:28:99:87:fd:95:f9:47:1d:a8:36:6a:
bd:ab:46:af:6f:88:c4:22:88:ec:0c:27:17:0e:d0:5c:6f:7c:
b2:6d:df:f2:a5:22:c5:29:b1:75:65:0c:7e:85:0b:f5:17:02:
bd:41:ff:7c:af:d4:be:a8:4e:2c:74:66:cc:f9:b0:aa:30:bd:
a5:d2:06:f8:de:a8:aa:8e:17:09:b9:e7:47:c6:20:1b:1b:7f:
71:2e:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:02 2026 by rpki-client