Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: faw4IUhiMwBuLzO0glyMisYQxq23kCo4vATb9yuzAoA=
Subject key identifier: FD:65:59:FA:2B:BD:4A:A4:D6:CD:4F:D7:24:46:7F:15:D6:8C:E3:8D
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 019D37F726D5FB1BD50ACB32C40391D8DE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 0A23
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: nzJJgbv1JCS2SSbLNTrhcRVFmU7tOGHth54c3KyMbfE=)
2: sao4QdKJ2zOtzhzLqEmuNyMN0as.roa (hash: PzIbh0KTO1J4efJaWw/Rzl0kAt4CC7fNxs+1iCoN+dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:26:d5:fb:1b:d5:0a:cb:32:c4:03:91:d8:de:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=fd6559fa2bbd4aa4d6cd4fd724467f15d68ce38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:bc:37:e3:e1:08:0e:16:38:87:6f:95:5d:
57:33:46:66:e8:13:c6:3e:8e:17:ed:f7:d6:0d:c0:
51:77:aa:3b:71:09:1f:ef:79:e6:c8:c3:de:45:c1:
82:3d:be:b1:ba:e4:af:fe:db:4c:08:d0:6a:34:7a:
26:0c:c6:3b:9c:93:48:41:44:73:09:46:16:55:c4:
aa:d4:a2:05:26:6f:6e:f5:e1:d7:8f:10:87:61:7d:
aa:23:4c:b8:74:a2:8a:7e:1b:96:ee:4c:75:13:67:
c0:90:40:52:4f:44:cd:7e:62:f4:42:d7:60:42:a4:
4c:e6:34:f4:61:b7:80:49:09:2c:3b:62:ba:ae:93:
df:4d:09:0f:22:14:87:f9:6a:ca:3f:8e:20:ba:9d:
02:0e:6b:81:db:7e:46:2e:ee:44:d3:8a:42:95:eb:
a3:67:70:cd:53:24:74:80:29:6f:fc:a6:72:c1:ad:
65:fc:f2:90:b2:24:97:61:4c:33:e1:52:10:fc:9a:
eb:de:f4:29:6a:1f:42:e2:e4:77:39:cb:9f:52:c5:
a6:0e:96:79:be:ee:d8:15:a6:6e:04:a7:e2:04:05:
26:84:6e:a5:9a:0c:ae:34:73:ed:c7:73:04:fe:72:
50:b8:8c:a5:f4:01:16:4e:2a:80:09:45:18:17:63:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:59:FA:2B:BD:4A:A4:D6:CD:4F:D7:24:46:7F:15:D6:8C:E3:8D
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:25:ce:90:09:ba:93:3b:2c:d7:8e:a1:93:c2:f4:6d:d3:
7c:fb:d5:d4:84:e0:70:08:c3:8f:17:1b:31:a0:0b:ae:3e:66:
40:2f:c1:5d:5d:3a:9f:7f:0c:32:01:6a:66:25:43:db:8a:c8:
2a:48:a5:8e:22:e8:b6:2d:02:83:59:b7:6b:cc:cb:2e:fa:6f:
05:f2:d1:82:d1:6d:b3:32:b8:9f:05:fa:09:5c:b5:db:43:0a:
f3:07:a8:9c:b0:a2:a9:21:83:9d:a9:2b:0c:0d:71:d2:c0:f4:
8d:2b:af:28:f2:5d:ad:80:f0:0b:dd:8b:5e:37:66:29:1c:6d:
b2:4f:a0:8c:72:57:f8:3a:6d:28:47:ca:a8:92:11:1d:a0:df:
44:49:48:c9:aa:0a:eb:7f:83:34:00:90:ef:35:c0:dd:9c:7b:
84:33:14:ae:8e:f5:77:d8:f3:27:7e:e6:0a:d0:82:9a:1c:bc:
00:5d:f4:80:b9:cd:50:46:7f:11:04:8f:3f:dd:39:3f:09:29:
9b:17:da:45:c6:47:d4:f7:d8:fa:96:9e:89:66:62:eb:12:9f:
62:97:d9:b7:37:25:98:04:dd:eb:aa:da:7f:65:12:6b:5e:36:
55:e7:5f:2f:f7:97:c7:4a:22:f1:b2:e6:1b:34:7e:d9:80:66:
c7:ee:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:00 2026 by rpki-client