Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: V+mB3e3AwO71fsnVxhNWx70dWBON7cTaG4qwpoB0xEI=
Subject key identifier: D1:7C:85:06:FB:49:31:6B:1E:40:51:20:43:4C:62:FA:D3:6D:86:0A
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019D265FBA046ADD92BA6B6AE906070CFF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 04A9
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: 6juIg2Joc8sRu4YUGaENIN/UcrAod1w/C7g2eA1SK7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ba:04:6a:dd:92:ba:6b:6a:e9:06:07:0c:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=d17c8506fb49316b1e405120434c62fad36d860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:c9:51:a0:eb:26:a6:7b:32:37:34:6e:59:
b7:71:b7:2d:38:e0:9b:e5:84:fa:4a:23:d9:49:55:
5a:03:28:f8:9a:5e:2b:2b:db:cc:24:68:50:0d:16:
0f:fd:90:9f:7f:82:ed:5a:db:d4:e2:75:59:ce:ac:
b9:f0:20:cd:a2:3c:83:38:6c:73:09:16:b6:4d:64:
d5:13:41:87:7a:4d:47:60:b6:60:29:53:81:d7:ca:
13:9d:9d:f3:f9:24:8b:eb:a9:18:b6:fe:aa:07:c8:
fe:25:d5:57:4b:0f:be:71:a8:68:e8:35:9b:72:02:
4a:35:45:cb:fc:53:d8:94:3f:96:1f:52:c3:c6:5a:
9a:c4:db:ba:ea:73:ca:59:bb:df:66:1f:b7:d9:43:
de:13:d0:88:1c:12:46:21:7f:b3:ee:0b:6d:09:42:
c5:14:7c:77:0c:82:d6:5e:55:80:71:5d:b8:86:d2:
08:b0:e5:f8:84:21:83:cf:99:41:2a:cc:3a:34:cf:
0a:b5:38:0a:86:02:35:1e:09:20:95:40:67:b4:32:
b9:57:e8:34:4c:59:85:fc:67:54:b4:a5:e1:9e:7a:
52:40:d6:26:e5:bc:c7:fb:a4:c2:d4:13:4f:4e:10:
15:30:5a:29:d8:35:7b:ab:62:8e:8b:b5:19:e7:0d:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:85:06:FB:49:31:6B:1E:40:51:20:43:4C:62:FA:D3:6D:86:0A
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:2e:e9:48:49:9e:f8:a6:01:a9:86:70:cf:2d:08:23:74:
cd:af:e2:4e:47:f4:29:83:fa:d0:26:74:34:b4:1e:3a:f2:c0:
78:68:cb:e6:78:30:f0:35:6f:90:dc:ad:28:96:0b:18:01:00:
8d:81:6f:04:b8:87:b3:71:5f:24:71:f8:6f:f9:97:74:69:de:
8b:52:14:03:ea:ac:96:39:7a:d8:6a:cb:97:1e:d9:a1:51:f3:
cd:de:73:f4:f6:62:cb:cb:58:ac:c8:53:14:44:74:32:3d:d5:
2d:b4:c0:33:79:5e:84:60:e2:36:a6:30:83:72:a6:4f:60:75:
28:64:c4:c7:f6:52:04:87:fc:85:81:cd:6e:5c:32:30:38:49:
56:f2:47:fb:27:a9:c5:14:bd:75:2e:ae:0e:7e:73:d1:c5:8a:
df:5a:8c:1f:b3:96:75:81:f4:7b:9a:32:84:63:8c:9e:26:97:
9a:ff:3d:fe:dc:db:b4:67:73:74:15:e6:60:70:90:ef:2d:6e:
fd:22:00:45:c6:ed:16:ee:96:a9:e0:75:86:43:24:90:3a:32:
cf:7a:4c:ea:5f:e8:c2:67:d0:98:2f:51:8a:f1:69:32:ec:ab:
50:d3:a5:d6:26:12:34:40:b4:0a:1d:2b:30:43:04:93:20:44:
c4:6c:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:27 2026 by rpki-client