Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: EjtV5QCly7l5tLLONYLPSk2dx9JjoJKtKYHw6xz2m8g=
Subject key identifier: 20:FE:22:3A:1C:95:A9:F2:4A:87:F1:20:C7:40:2C:A7:92:8C:4A:1A
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019D2929A72C0C72FA8347E16BA4E7B04C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa (hash: R0V6ZIQY2hcuRRo+byPK6DVVEuSr1ojs/WwAjiQIcr8=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: vQxMC4xEBbJblXbFMDVJANeO68YsDXkSTI8E72bjZOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a7:2c:0c:72:fa:83:47:e1:6b:a4:e7:b0:4c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=20fe223a1c95a9f24a87f120c7402ca7928c4a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:2f:d6:e2:c4:32:1b:38:13:96:a0:c9:8b:
0c:df:8a:5c:a6:bd:a7:7d:38:1b:ea:d2:44:f8:34:
36:a0:40:d0:56:be:4e:74:8b:1f:cc:05:85:b5:27:
aa:6a:e4:3e:a0:08:35:29:6a:30:12:11:cb:36:6c:
e1:b8:8b:c4:ee:a7:b5:25:33:b9:82:3a:36:da:d2:
92:85:29:86:ee:57:d5:ae:f6:e9:1d:5e:43:30:ae:
9c:f5:83:6e:0e:81:ea:fc:b4:3a:f4:d3:dc:d8:79:
56:6b:56:09:a3:94:5c:e2:ac:91:56:7a:fb:9a:dc:
33:fe:c8:80:7b:25:e0:1c:47:6f:2d:2f:99:ef:f3:
c2:77:b1:dc:86:16:79:6f:ae:7d:b7:a2:48:ee:e4:
f1:17:e0:18:9b:0c:0b:dd:13:dc:53:12:47:e8:68:
25:0d:c9:e6:9c:c2:db:bd:b8:83:5e:4f:96:b0:04:
8f:b7:ed:28:b2:a5:06:49:8f:43:9d:7e:74:8a:cb:
6b:15:62:da:d3:79:5d:03:60:f0:f0:9d:b0:99:ac:
df:b0:8d:b8:60:17:74:cc:cc:fa:12:38:23:6f:77:
e1:92:58:0b:53:5c:4c:31:8e:e2:50:08:6e:c6:b6:
a4:ed:0a:5d:08:3e:10:03:e9:6b:51:6b:9a:94:50:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FE:22:3A:1C:95:A9:F2:4A:87:F1:20:C7:40:2C:A7:92:8C:4A:1A
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:00:84:94:19:02:39:5b:62:75:75:96:2f:d6:c3:23:8c:a6:
c1:fd:05:13:30:f4:be:f3:72:f2:18:50:a8:c0:20:36:c7:72:
df:97:2b:d4:3b:1b:e6:e1:61:11:0a:b2:c4:ca:50:d0:09:8e:
79:6b:a1:ec:12:9c:78:03:25:df:f2:7d:d7:31:1c:89:4e:d7:
22:07:f8:f0:21:b9:d7:7d:c5:0d:e2:bc:bc:68:1f:22:bf:82:
f7:31:64:d8:5b:da:af:80:c3:d0:a8:ab:e4:33:76:03:8e:b0:
5d:99:4f:1e:a0:81:6a:df:22:a5:d1:72:1b:bd:42:61:7c:f9:
2d:f6:b5:05:26:83:4c:8d:fc:74:b9:a3:bb:d1:9e:a6:3d:fa:
ec:7b:28:87:61:36:1b:1d:92:eb:88:29:75:5d:ed:ef:67:69:
e3:f6:90:ec:b8:9e:52:c6:06:21:7c:b3:5c:40:80:02:db:ef:
40:9f:ff:40:ac:15:7c:f5:b2:ce:fc:15:a2:98:5a:ed:10:7c:
a8:95:3d:8b:ec:fe:b5:e7:9f:ec:f4:13:f3:02:7e:f5:c5:fc:
92:4f:42:4f:98:b3:ea:d6:ea:fc:f8:b0:51:39:c8:15:9f:89:
99:ab:6b:ac:7e:9a:51:a1:21:f4:e7:6a:29:49:36:01:b0:c7:
2d:85:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:50 2026 by rpki-client