Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier: zK/yYtEOJN9+AjCrlXHygoqlCP1o8GPC3ecHL206AFc=
Subject key identifier: 85:5C:6B:F9:11:CC:1F:D3:AE:22:FF:F2:53:84:55:65:D7:D9:84:80
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019F111BF75C835A30ECBBB8D71510AB2F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number: 01AA
Signing time: Mon 29 Jun 2026 02:01:13 +0000
Manifest this update: Mon 29 Jun 2026 02:01:13 +0000
Manifest next update: Tue 30 Jun 2026 02:01:13 +0000
Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
2: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (hash: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=)
3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
5: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
6: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
7: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: fhbKCes2uLfQYcY6FvapHiGQh6vavH0X0JbEXczqkFY=)
9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:f7:5c:83:5a:30:ec:bb:b8:d7:15:10:ab:2f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Jun 29 02:01:13 2026 GMT
Not After : Jun 30 02:01:13 2026 GMT
Subject: CN=855c6bf911cc1fd3ae22fff253845565d7d98480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:b7:a9:b4:e0:00:17:28:f2:7d:b7:ce:73:
3e:d3:42:56:34:9a:15:31:bb:a8:1c:8a:c0:22:a3:
76:58:24:80:d7:19:7e:46:da:66:19:98:6e:e8:53:
42:5e:96:3d:e2:bd:fe:05:cb:40:44:12:d3:b7:7b:
42:62:34:34:67:76:7c:c0:00:76:24:c8:95:dd:ce:
23:81:b5:41:57:a1:97:f6:cb:10:e8:5d:4b:21:b7:
70:69:0a:ae:71:a1:1d:b1:99:26:30:7e:e6:83:13:
31:56:80:1f:b9:40:7e:f3:78:e2:58:ea:7b:af:98:
7e:a2:c0:cd:d6:e6:fa:15:8b:01:cd:d0:52:fc:7e:
6f:a1:c2:12:43:58:23:be:34:67:5b:74:8a:49:5d:
74:29:9c:fa:12:ae:9a:9a:fc:68:b6:1a:49:ed:4e:
e4:3a:fc:76:11:d3:6c:e4:cb:88:17:fe:2d:a5:e4:
09:e5:c4:dd:1d:f5:8b:7f:39:64:ff:00:08:f0:21:
49:59:3f:2f:09:79:46:eb:c2:d7:9e:55:e3:46:9e:
1c:02:23:b6:2b:c7:bd:2f:8f:59:7a:a6:8b:65:12:
98:37:4c:ad:7e:a1:68:9e:4f:60:3e:e5:b2:f3:f8:
28:33:d2:ac:2d:88:48:d7:43:a2:44:35:f7:9e:5e:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:6B:F9:11:CC:1F:D3:AE:22:FF:F2:53:84:55:65:D7:D9:84:80
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fd:a2:91:e7:f3:77:d1:26:d3:fd:df:55:2d:66:67:ec:b5:
05:ed:dd:a0:1d:e0:c3:53:5c:20:07:43:f2:37:ba:f8:53:f7:
73:8f:36:9d:b7:13:ed:4c:a6:78:cb:fe:ce:eb:07:ea:06:e0:
2f:ae:e7:11:19:95:25:62:5b:11:52:98:39:91:e6:eb:77:cb:
be:1c:5b:25:3d:46:1f:ea:13:eb:13:f0:68:c8:fb:12:2a:75:
c2:62:80:cf:88:27:bd:1e:3b:50:8e:a0:04:b8:de:dd:17:01:
6d:bf:7c:7b:9d:da:8f:e1:07:6d:c3:73:04:ea:c3:66:3a:d4:
ee:c2:4e:7d:82:c6:89:3f:f5:b3:0b:4f:07:d9:73:be:04:e9:
20:bf:75:ae:17:b2:69:fc:3c:a7:4b:20:37:bc:cf:d2:dc:92:
e3:c3:cb:f3:39:1f:c1:0c:e8:3c:75:92:e0:a8:cd:ac:77:f8:
c7:38:98:20:0c:d7:c5:34:2c:34:08:e3:81:e4:84:3a:c5:59:
63:99:9b:de:e2:74:e6:2f:e0:1c:be:bc:0b:36:1b:64:96:4d:
42:4b:b9:18:b8:61:93:41:19:fd:f0:31:f1:38:20:e0:3c:fd:
dc:3b:12:21:ca:51:46:d5:ee:cc:d4:50:c2:5f:fe:fa:0a:68:
42:48:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:20 2026 by rpki-client