Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier: vExuXlvzIPWCstQfIPDNQFalMt2r8bLNkJ4GKnsotTA=
Subject key identifier: 36:91:D9:08:68:FC:74:A0:AF:C5:29:2B:3E:39:67:6C:F2:4A:54:09
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 01A14EABB72E7E3EEDF4DA1FA4AF9F8CD087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number: 02D3
Signing time: Sun 18 Oct 2026 11:00:38 +0000
Manifest this update: Sun 18 Oct 2026 11:00:38 +0000
Manifest next update: Mon 19 Oct 2026 11:00:38 +0000
Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
2: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (hash: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=)
3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
5: PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa (hash: b6sH2r0w/lWXF9PFk3rc40IsaEaHPz3g/VKzI2NYj4g=)
6: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
7: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: 3HWapF5j37aoqkP8NhRtS6o1AjAZC7uniiR2yIPoJis=)
9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:ab:b7:2e:7e:3e:ed:f4:da:1f:a4:af:9f:8c:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Oct 18 11:00:38 2026 GMT
Not After : Oct 19 11:00:38 2026 GMT
Subject: CN=3691d90868fc74a0afc5292b3e39676cf24a5409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7b:cc:3a:3b:7d:b6:ee:94:31:d9:80:fb:cf:
2c:70:9d:32:52:83:97:6b:98:04:d9:73:a6:4c:ee:
6a:d2:34:23:ce:b7:4b:a2:07:ba:a8:9a:9c:d9:a3:
5e:a4:93:4d:ce:e5:57:15:71:4c:f4:55:93:9d:ad:
d4:15:5e:52:7b:96:60:cb:c0:05:fc:df:64:98:84:
2a:79:53:ac:f8:c0:ba:76:1f:ce:b7:27:e8:d3:1e:
10:07:d6:cb:d1:2a:ec:ce:7a:bf:e0:2e:2e:a5:40:
97:e1:ab:9a:66:25:a1:a6:39:03:17:6d:84:73:42:
ed:4e:e4:07:34:3c:ca:7d:a6:7f:2d:4e:27:f0:91:
c4:73:0e:34:e6:2c:35:51:f5:4e:ec:4d:2b:6c:c2:
c2:da:56:18:ae:8d:23:0e:24:c8:26:64:b2:42:b2:
89:16:c7:a8:25:da:e4:5d:93:16:86:7e:72:c8:8c:
24:e9:db:46:f0:fb:11:8f:29:0b:54:ea:2c:6e:78:
06:7a:b1:5c:ee:cd:9d:30:69:a8:c9:1b:7f:43:49:
8e:8e:5e:de:82:b2:98:fd:25:dc:fd:d8:1c:44:65:
1b:c0:12:16:74:35:7a:8a:40:f0:dd:72:8a:a8:4c:
b0:70:9e:02:e2:69:16:34:d9:0c:65:ee:b5:90:de:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:D9:08:68:FC:74:A0:AF:C5:29:2B:3E:39:67:6C:F2:4A:54:09
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dc:7a:61:12:db:60:5f:b1:51:74:71:e9:7b:74:65:fd:a9:
54:9c:11:1d:8a:c7:5e:92:6a:ce:a3:6d:8a:02:9a:be:ac:83:
86:c5:4a:a2:03:9c:8e:e2:da:26:09:2d:7d:bc:39:b4:95:2f:
90:3f:2e:1f:d1:ad:93:4c:f0:a2:19:b7:06:ef:43:be:cd:4f:
d2:e3:62:53:54:fa:e4:07:6e:9f:7c:8a:0e:cd:37:5e:9d:3a:
ce:5f:fe:7a:0d:cf:7d:c9:d6:83:67:81:7e:09:fd:02:81:46:
8b:e8:0d:3b:bd:19:6c:59:75:1a:70:7e:fb:95:10:56:49:a5:
02:f6:cd:f2:b7:e9:4c:97:2f:38:24:5c:37:6e:7f:24:58:6e:
66:a1:2b:cd:50:21:2b:5d:88:b6:c9:00:4a:07:93:93:e0:58:
8e:3e:a8:16:72:4f:22:4a:36:fd:3a:d3:4f:89:a6:ae:34:7b:
a6:ec:ed:da:07:6d:6b:dd:a8:d3:3c:f0:2d:4a:fe:db:d3:47:
8f:0b:ae:c6:a2:d3:9f:d7:a9:8d:c1:39:58:6a:80:8e:4e:55:
aa:57:9f:2d:2e:09:58:39:6c:ef:23:3f:76:d8:da:df:63:1d:
cd:a9:df:11:e5:94:cc:7b:ac:70:f3:35:3a:9a:a8:91:39:73:
2a:99:17:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOq7cufj7t9NofpK+fjNCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmQxZGM2Y2FhNDFkM2JlZmZlOGQxZGEyNjcxYTUwZTdm
NzlhMzAwHhcNMjYxMDE4MTEwMDM4WhcNMjYxMDE5MTEwMDM4WjAzMTEwLwYDVQQD
EygzNjkxZDkwODY4ZmM3NGEwYWZjNTI5MmIzZTM5Njc2Y2YyNGE1NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nvMOjt9tu6UMdmA+88scJ0yUoOX
a5gE2XOmTO5q0jQjzrdLoge6qJqc2aNepJNNzuVXFXFM9FWTna3UFV5Se5Zgy8AF
/N9kmIQqeVOs+MC6dh/Otyfo0x4QB9bL0Srsznq/4C4upUCX4auaZiWhpjkDF22E
c0LtTuQHNDzKfaZ/LU4n8JHEcw405iw1UfVO7E0rbMLC2lYYro0jDiTIJmSyQrKJ
FseoJdrkXZMWhn5yyIwk6dtG8PsRjykLVOosbngGerFc7s2dMGmoyRt/Q0mOjl7e
grKY/SXc/dgcRGUbwBIWdDV6ikDw3XKKqEywcJ4C4mkWNNkMZe61kN4HewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaR2Qho/HSgr8UpKz45Z2zySlQJMB8GA1UdIwQY
MBaAFJ5tHcbKpB077/6NHaJnGlDn95owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUt
ODNmOWE4ZDFkNGQ2LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUtODNmOWE4ZDFkNGQ2
LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNx6YRLb
YF+xUXRx6Xt0Zf2pVJwRHYrHXpJqzqNtigKavqyDhsVKogOcjuLaJgktfbw5tJUv
kD8uH9Gtk0zwohm3Bu9Dvs1P0uNiU1T65Adun3yKDs03Xp06zl/+eg3PfcnWg2eB
fgn9AoFGi+gNO70ZbFl1GnB++5UQVkmlAvbN8rfpTJcvOCRcN25/JFhuZqErzVAh
K12ItskASgeTk+BYjj6oFnJPIko2/TrTT4mmrjR7puzt2gdta92o0zzwLUr+29NH
jwuuxqLTn9epjcE5WGqAjk5VqlefLS4JWDls7yM/dtja32MdzanfEeWUzHuscPM1
OpqokTlzKpkX+w==
-----END CERTIFICATE-----
Generated at Sun Oct 18 17:31:10 2026 by rpki-client