Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: 3Tlk9AI+5ggH3DC6Gvd9Inm8oNj54luURrM4bz9O1+Q=
Subject key identifier: 31:F8:8F:99:EB:EC:B3:98:6B:60:02:84:B4:D4:DB:98:E2:1D:44:25
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019F55C662413933EBDE715DAF33A55865A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0CD8
Signing time: Sun 12 Jul 2026 10:01:32 +0000
Manifest this update: Sun 12 Jul 2026 10:01:32 +0000
Manifest next update: Mon 13 Jul 2026 10:01:32 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: j8ZmHAJgnTQYFhYcWYNkzOAqAw9PwPNNAmgcJF8+quA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:c6:62:41:39:33:eb:de:71:5d:af:33:a5:58:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jul 12 10:01:32 2026 GMT
Not After : Jul 13 10:01:32 2026 GMT
Subject: CN=31f88f99ebecb3986b600284b4d4db98e21d4425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:3e:0a:85:a6:7a:cd:ce:02:e7:55:f0:7f:
2a:0b:8f:bd:ac:99:74:70:8e:0f:6a:64:d2:6f:50:
87:42:c7:63:09:0b:3c:52:96:93:bc:f7:68:38:11:
2b:2f:da:01:f0:3d:6d:55:97:51:ad:87:fd:ec:1d:
48:eb:34:b2:ca:09:65:7f:97:71:9f:09:a7:95:59:
b6:75:01:90:f4:28:30:c4:2f:76:21:cf:71:23:12:
c5:da:d0:ca:21:a2:f4:94:f7:db:68:15:bc:d6:50:
3e:bf:a6:22:d7:b3:f9:53:16:45:d5:e0:e3:df:1d:
82:6b:d0:d8:4a:90:f9:5a:b7:dd:76:23:36:f5:60:
69:13:56:12:8a:05:69:d1:c0:2d:22:6d:b6:ea:c8:
7c:50:c4:d2:76:f9:50:c8:99:ae:04:27:fd:c1:26:
19:06:88:4d:b6:0d:29:9b:ec:9d:52:0c:c3:56:c5:
30:ac:87:d4:d3:f8:76:d5:43:61:e8:aa:64:ea:fc:
29:98:37:03:1c:8d:7a:77:97:93:56:7a:68:17:79:
1a:78:3e:46:16:3c:a6:6e:a8:63:cf:8e:87:f0:e6:
89:ad:c6:8f:dc:0b:21:9a:96:00:da:3a:45:34:5e:
23:8c:f8:e7:02:a2:70:97:47:34:1a:df:3d:6d:06:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:8F:99:EB:EC:B3:98:6B:60:02:84:B4:D4:DB:98:E2:1D:44:25
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ed:c9:7f:42:f3:c9:dd:34:c5:b1:61:2e:6c:f1:b6:5b:81:
64:77:20:4d:cb:15:a9:31:6f:b8:ba:5d:1d:09:1c:df:90:72:
a2:44:e1:7f:63:a0:99:6f:90:a6:3b:2c:26:59:8f:a1:0c:41:
8b:b0:e2:b6:ed:a3:fc:9a:b8:79:48:c7:9e:d6:25:ba:e8:43:
c2:31:44:46:8f:17:aa:b9:18:57:50:62:05:6d:cb:48:1e:37:
9c:d9:1f:80:4e:0a:70:eb:e9:7d:27:87:ff:c4:d0:6a:51:ea:
3f:4d:92:03:c5:ac:6d:97:5c:d8:c5:d6:f2:57:1f:14:b4:dc:
f2:7a:0f:63:8c:39:5e:86:f8:99:5e:23:ac:37:b3:7a:07:4c:
62:36:98:05:f0:6a:1d:e9:4a:b5:55:66:e2:64:36:c6:47:13:
db:7b:7d:31:8e:d6:c1:81:23:07:a8:ea:06:d2:ff:09:26:b6:
ee:bf:60:d9:19:ac:15:98:be:19:54:d4:36:5b:ed:b2:05:5d:
42:30:34:0f:89:a6:c6:b7:d4:19:78:82:48:51:e7:cc:c0:c9:
bd:6a:b4:b2:72:45:d6:72:9f:ae:0d:b9:b9:e4:96:8e:0f:62:
c6:32:ec:be:07:9c:04:19:6e:14:17:a6:0b:58:be:43:2a:8f:
bc:2d:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 12:27:25 2026 by rpki-client