Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: M3cikhe2l+lVRNZDhMZNYEqfHHL1wAhUI5mFt0O3viw=
Subject key identifier: 45:1B:72:E3:7F:4D:2D:50:3C:AF:9E:DC:6A:08:AD:F9:1D:04:DF:13
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019E1F7FA7291201193F6D93A171B0F32ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 052A
Signing time: Wed 13 May 2026 04:01:59 +0000
Manifest this update: Wed 13 May 2026 04:01:59 +0000
Manifest next update: Thu 14 May 2026 04:01:59 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: 7iaJ0GPtlPNotXzxdHylHkEM+7XwRCcQefnqzMA/7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:a7:29:12:01:19:3f:6d:93:a1:71:b0:f3:2a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: May 13 04:01:59 2026 GMT
Not After : May 14 04:01:59 2026 GMT
Subject: CN=451b72e37f4d2d503caf9edc6a08adf91d04df13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:92:4a:29:15:35:e0:56:97:de:fa:74:b2:
20:96:8e:09:ec:e3:f6:91:f5:b9:14:2b:7d:41:3d:
b0:67:25:9b:40:48:0a:7f:0f:ac:13:89:2d:7c:d4:
7a:1f:99:b1:b3:ed:84:32:98:e7:4b:3b:f3:41:84:
91:2d:e0:d0:ab:2b:56:da:12:41:8e:bf:8b:23:47:
5a:1f:77:bf:cb:52:5e:d4:72:0a:f3:84:cb:16:15:
a3:34:7c:fa:88:06:95:54:5f:c9:92:3d:c6:ee:ff:
d5:9e:d2:97:cc:47:c8:ba:82:9a:a0:8e:ce:e2:83:
ac:f8:65:72:dd:90:65:57:7e:3f:6d:3c:71:2e:97:
33:01:6c:96:87:c4:80:41:ea:4a:87:62:9f:0e:e7:
88:1e:8d:bd:78:6f:ae:15:a0:63:01:57:5b:ea:2a:
7e:96:95:d0:2e:12:d1:65:2e:a4:aa:a8:f4:5d:6c:
62:6e:23:00:98:01:a4:d9:f8:65:04:f0:b5:83:c7:
48:d2:80:35:88:e5:23:27:0c:68:39:dc:86:28:a9:
87:c0:01:d5:94:c4:53:87:b8:13:cb:94:c5:63:07:
e1:4a:95:30:07:31:3a:39:02:47:00:c6:83:e1:2f:
ff:f3:7f:47:81:34:0a:56:4c:66:c7:1d:9d:25:22:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:72:E3:7F:4D:2D:50:3C:AF:9E:DC:6A:08:AD:F9:1D:04:DF:13
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bd:e4:46:4f:a4:b5:c1:7a:1d:06:3f:a3:01:5d:70:19:fb:
f3:ed:da:d4:89:bc:c0:26:68:eb:5e:1b:eb:7b:44:13:b2:e0:
c8:38:9b:7b:7a:aa:f8:ae:a0:93:0e:dc:ca:81:d0:da:d4:b8:
ed:4c:d4:c2:97:94:3d:bc:b3:d3:d2:7a:f4:e1:6f:bf:c1:be:
78:38:fb:53:35:c6:f1:94:24:1b:16:c9:3f:75:19:1b:62:99:
c7:aa:c1:e9:74:a1:b7:a8:18:f9:86:59:33:36:1a:e5:64:64:
9e:3c:07:9f:5e:13:c3:07:2e:a0:74:c9:a7:c5:a0:ba:4d:57:
87:91:2c:4d:3a:dc:82:1c:97:80:ff:65:86:ed:73:02:73:db:
38:ec:7d:9d:7a:b4:63:60:fa:0f:bb:88:fe:88:e3:ef:c5:85:
a8:83:a5:6e:64:9b:24:0f:8a:3f:c7:21:88:75:84:67:26:84:
0b:c9:55:b6:e9:8a:ee:d2:06:cf:90:e6:e4:7c:6e:b6:2a:e9:
b2:f0:db:f6:00:a8:5b:43:47:37:44:6e:d4:d0:78:cb:8a:8f:
e5:75:2a:19:48:60:c4:4a:13:6d:df:cd:8b:47:d9:e6:16:c5:
da:3d:42:db:89:14:d0:dc:86:1a:d7:44:c8:d9:9f:25:8c:1d:
2b:13:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:23 2026 by rpki-client