Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: lfA3JZfWtm2FBDDJWuImxf4qba0IfFtohE9cY4AV4ow=
Subject key identifier: 21:E9:A6:99:24:A0:8B:9D:90:09:A0:EC:56:51:C1:70:23:69:A5:1B
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019D25BA921EFE9FBC62F60B389FE25DEC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 0A4D
Signing time: Wed 25 Mar 2026 16:01:17 +0000
Manifest this update: Wed 25 Mar 2026 16:01:17 +0000
Manifest next update: Thu 26 Mar 2026 16:01:17 +0000
Files and hashes: 1: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: i+NAokwxPxEFNBTTfUllVV/l3Cpvpc5NewILGzWoiDk=)
2: njOWzyw6BPbysiyLRcVX59-q4hc.roa (hash: vhZ8qAXL4RUIeajsso+zjNGjDXDgCoWsrZSWesPHRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:92:1e:fe:9f:bc:62:f6:0b:38:9f:e2:5d:ec:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Mar 25 16:01:17 2026 GMT
Not After : Mar 26 16:01:17 2026 GMT
Subject: CN=21e9a69924a08b9d9009a0ec5651c1702369a51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:55:88:e3:01:37:5b:37:74:d6:2b:41:6e:
73:d0:85:59:5e:3d:b3:85:19:0c:5d:bf:a2:82:e0:
db:c8:b4:fc:fa:31:f5:f0:1c:0a:1d:6c:3c:39:0f:
fe:8f:7e:46:73:da:9b:ca:98:44:bc:78:07:21:98:
0e:11:c5:45:60:68:cd:55:6e:f3:0d:49:6a:0e:9e:
b1:73:86:cc:9e:c1:c0:f2:20:d6:47:62:83:db:3a:
c1:40:80:05:d0:13:13:78:a1:4b:00:fd:9b:75:58:
90:4a:ff:d5:a3:db:83:99:1e:cb:4f:ed:ab:37:1a:
1d:b1:10:4a:ea:49:87:9b:58:cc:10:07:d4:5f:f7:
b2:05:1c:e2:95:f6:61:29:69:e3:c5:42:76:df:fe:
a4:6b:4f:9e:aa:c6:76:a6:0d:9b:e2:83:30:29:21:
9b:76:56:f0:25:b3:c2:12:e8:55:20:0d:ff:03:b2:
4d:87:1c:58:18:96:88:53:be:83:05:03:9e:4e:46:
c1:10:d8:17:b6:31:22:86:ea:dc:8c:b6:64:0e:38:
61:f4:80:cb:73:28:11:d8:94:bc:28:03:60:54:20:
97:02:59:d9:6d:b6:8d:f1:96:7a:d9:f7:6f:09:b7:
dd:59:49:ee:16:e6:23:ce:7e:df:53:32:67:3f:bf:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:A6:99:24:A0:8B:9D:90:09:A0:EC:56:51:C1:70:23:69:A5:1B
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f2:63:ad:3a:5d:50:cc:f5:ee:95:13:d7:3b:f5:bf:3e:4d:
e7:50:79:c0:0a:6a:79:0b:fd:1f:d7:6e:07:84:4e:32:91:89:
de:69:17:78:de:51:cb:c4:a5:2d:b0:3f:19:f7:aa:d4:f7:84:
4c:70:9e:60:f1:7f:fe:a6:3f:5a:85:2e:31:5e:9e:d0:68:6e:
16:aa:05:18:13:3d:61:82:5f:e9:18:03:d7:17:0e:1d:44:40:
a1:59:1e:b5:41:52:21:b3:05:02:f5:3d:82:c3:bd:67:2c:95:
e3:9c:3a:2c:9a:e9:cd:45:5c:c9:68:21:34:b8:f0:1e:bc:20:
58:f7:6a:0f:72:78:38:c5:eb:4d:4b:c8:0a:ac:f1:cd:01:bd:
3b:83:dc:8e:a0:38:e0:b9:3b:30:de:9d:65:29:d7:83:74:86:
30:ec:be:d3:03:5a:ae:d6:db:da:ab:89:fe:92:9b:54:72:d3:
af:59:ba:36:db:0e:09:3c:92:d6:05:13:e6:15:a2:b2:00:5a:
36:79:13:42:74:7e:87:05:ce:4a:e6:1a:bf:2d:3a:0b:05:18:
15:3f:42:44:7a:31:1e:a9:80:82:96:0b:5a:d2:fd:21:90:cf:
35:d9:16:f7:90:58:54:f0:69:b8:c1:64:b0:49:f5:17:81:99:
2e:19:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:59 2026 by rpki-client