Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier: jXz7Nf+83ECie1+HXfXyJLRBKojiPjQ58L38RgZU9Wk=
Subject key identifier: C8:61:15:A2:E6:EE:7C:99:C5:5A:CA:EB:81:DD:E1:71:DD:B0:FC:2D
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019D32637017FB00D12AB823B889BDE3179B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number: AD
Signing time: Sat 28 Mar 2026 03:01:10 +0000
Manifest this update: Sat 28 Mar 2026 03:01:10 +0000
Manifest next update: Sun 29 Mar 2026 03:01:10 +0000
Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
2: Cbh9dTp-3Cy4lgTwDmqeWN3sMU8.roa (hash: jNPHrW3n9zuVbl+OCeOvx4EbhDNhT0wqb8YQdUfmVhY=)
3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
5: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
6: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
7: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: 35bYIyCu8S5S5Ku6p8Yfh0/RK77K2ZiE/ai+hOaUY5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:70:17:fb:00:d1:2a:b8:23:b8:89:bd:e3:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Mar 28 03:01:10 2026 GMT
Not After : Mar 29 03:01:10 2026 GMT
Subject: CN=c86115a2e6ee7c99c55acaeb81dde171ddb0fc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:88:94:ad:a8:b8:58:69:66:8c:c0:b0:ee:
6b:ad:ac:da:c0:20:5a:18:79:eb:54:68:45:d7:4a:
c6:7d:40:60:b6:7e:a5:61:00:7d:da:9f:4c:27:74:
bd:bf:8b:f7:91:eb:68:b2:6c:df:03:7b:04:ab:44:
38:44:1b:49:a5:58:99:d3:b4:3e:f5:ee:51:6f:48:
f3:90:8b:fa:27:49:0a:34:98:3d:41:97:31:57:06:
46:44:56:fc:e7:51:f7:45:ce:1c:83:7d:c2:81:2f:
f3:ee:66:7d:77:a4:5f:39:51:da:3b:4a:90:40:ce:
ae:57:cb:97:10:a3:4b:46:a2:c5:ec:f6:d1:49:e8:
34:67:5f:00:d5:b3:84:f5:28:f2:67:6c:7c:76:1b:
2d:6e:07:ce:35:a8:8c:8e:8a:72:05:41:82:85:46:
a2:60:ec:3c:56:bc:3b:cd:48:d9:7a:fa:71:98:a9:
ba:4f:83:2e:c8:16:ad:2f:b2:27:d9:35:03:9b:72:
15:40:0e:cb:66:10:c1:5b:6e:41:dd:55:6d:26:3f:
33:b4:e2:f9:c6:0a:a5:0e:f0:93:ab:0a:55:db:9d:
5e:87:be:77:81:8a:a7:06:5d:24:a4:91:e7:ab:29:
eb:ad:7c:e5:09:96:13:ce:3d:de:29:83:47:d4:02:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:15:A2:E6:EE:7C:99:C5:5A:CA:EB:81:DD:E1:71:DD:B0:FC:2D
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:68:68:fe:41:9b:a4:fc:cf:2e:31:53:35:a1:8f:3a:ab:
78:c6:22:c7:15:ce:30:19:06:e3:1f:f8:ef:0b:bf:ac:3c:13:
6b:a8:4f:b6:69:09:a3:2d:f1:24:33:83:2e:49:dd:06:e5:52:
c9:a3:a7:b9:ed:87:65:65:7f:57:2b:46:4b:e1:7f:07:c2:11:
6d:33:e7:19:ec:bc:2e:09:bf:b2:80:96:3c:74:5c:7c:26:39:
bf:7f:60:f4:9a:40:bb:00:12:04:6d:c0:ff:b9:45:a5:74:54:
e6:f4:51:88:ed:41:9e:b2:71:92:6c:ce:60:f5:51:d6:87:97:
25:c4:ad:89:54:c0:0f:f6:15:13:74:ab:dd:16:17:0c:07:98:
94:9a:32:5b:c1:00:04:18:e4:f9:38:55:c2:41:62:50:e7:ce:
3c:5b:69:c9:a1:c8:9a:e0:41:d9:2f:65:b6:e2:a4:d7:f7:5e:
f6:42:25:82:23:c8:b3:f7:e8:81:10:1d:ce:1d:b6:db:9f:d8:
ea:c7:cc:8d:0d:b3:df:38:1b:6d:dd:98:d6:c0:11:08:62:6c:
5b:6c:52:92:a6:77:19:f0:2f:3d:7e:78:3c:a6:95:af:60:71:
56:a7:86:b9:23:b6:85:5d:a4:86:6a:16:79:36:8c:e4:c9:d0:
91:29:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:14:34 2026 by rpki-client