Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: 3UPG1j+BQ6r5HUPMvGh6mRop5osVSGYeuh01Y9Jqmm0=
Subject key identifier: 61:53:19:CB:52:6D:C5:DF:85:38:6A:6B:46:BA:50:B0:2D:79:2E:3D
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019D38D2E13382BC9B8AF6223ADEBB1D3C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: 2qeXnV7d55wsyTxXPZhmXkTZqtI.roa (hash: N5i/RmZVF7k/2lLz1w31AlHZluiVFO2dv4zutOE7K+A=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: A0baXSWO6lNFv3RZWZFX8iNHRNSXmzL4aOlK75fe71M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:33:82:bc:9b:8a:f6:22:3a:de:bb:1d:3c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=615319cb526dc5df85386a6b46ba50b02d792e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c9:97:7b:c6:48:3d:cb:e2:b5:08:9c:3c:2c:
16:3d:5d:27:32:46:bd:98:1b:50:66:44:03:d5:85:
77:62:07:40:ff:d1:d8:1d:91:1f:28:98:e3:ce:8a:
14:4e:37:cf:93:a2:5c:9a:b7:f3:db:2c:fc:65:e5:
b4:e2:67:88:63:a2:12:fa:9a:d7:95:c2:7e:91:3e:
13:9a:6f:83:66:4a:c8:74:48:a7:e1:e8:2f:19:cb:
bd:1a:7d:11:94:ab:33:5a:19:87:87:31:65:dd:1f:
71:b2:ca:9a:7c:db:ea:c3:ff:55:68:36:d3:19:14:
99:22:43:8c:19:db:fa:06:77:ec:82:c4:e7:7c:9f:
a0:af:46:d3:c9:09:05:a8:20:80:52:0e:15:f8:d6:
6b:51:be:22:46:da:9b:26:0e:c6:06:54:2c:80:fb:
d9:b6:1f:e6:2d:ad:db:71:a1:91:89:fb:d0:09:42:
d9:4f:8d:be:b8:7d:e8:ca:53:ee:7e:98:9e:0d:4a:
c3:16:45:ed:23:ad:cd:99:f0:77:ab:7e:34:53:97:
84:84:c2:98:b0:01:90:e9:da:ad:4d:b9:5f:e5:80:
ad:4c:59:46:58:69:c8:f0:6d:c5:8f:05:27:30:7f:
33:75:d7:8f:0c:d1:94:b6:8a:24:2b:6e:4c:e4:85:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:19:CB:52:6D:C5:DF:85:38:6A:6B:46:BA:50:B0:2D:79:2E:3D
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:c2:dd:83:83:8f:11:f6:44:a6:c6:00:a1:90:a2:98:bf:
9d:3a:ef:a5:28:92:71:9b:0f:93:49:db:f0:f8:72:7b:ca:6f:
ab:08:21:6f:16:eb:67:eb:a7:d5:83:05:d5:26:ae:d5:f8:be:
8e:a2:bc:09:d1:e3:fc:4e:f4:57:48:a8:bc:3e:80:6e:f6:ad:
5c:47:4d:6d:12:28:c9:ab:18:04:b7:f9:4d:6d:37:64:50:6b:
76:be:41:79:9b:08:67:44:b3:58:3f:1d:20:61:14:e5:bc:bb:
c7:cd:c5:ff:39:21:f9:45:d2:c5:93:af:a1:06:d6:74:1e:0b:
cb:01:5e:0c:9f:a8:fe:09:7b:22:31:ad:65:f6:ae:60:9b:de:
38:7e:ca:95:f2:3c:51:33:e4:3e:68:47:d3:37:38:b3:84:5c:
3f:e9:81:5b:93:e3:17:7d:dc:09:8c:3c:3e:6b:db:01:b6:35:
46:30:82:d3:79:f5:66:c0:de:61:0e:9a:7c:ba:09:10:75:c5:
b4:2e:a7:b6:33:bf:bb:a8:8e:c1:f7:40:ba:3f:0e:d6:db:96:
b6:3d:32:09:3e:7f:61:ba:bb:00:e1:fa:92:35:10:0b:5a:07:
4c:f5:37:80:3a:24:d5:0c:cf:49:b5:ce:ee:2b:13:a3:f2:f2:
a9:17:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:53 2026 by rpki-client