Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: Jb4yPHkQNEgg+C7LXap4zKRpbSTGVf2hYsr7UbFPh8M=
Subject key identifier: 71:5B:99:DE:5C:B3:44:28:71:9D:4F:43:DB:5E:92:0B:E6:68:2E:72
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 01A041612637BFF449486E21344D8AD574B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0D52
Signing time: Thu 27 Aug 2026 04:01:20 +0000
Manifest this update: Thu 27 Aug 2026 04:01:20 +0000
Manifest next update: Fri 28 Aug 2026 04:01:20 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: o3jLxrMMbW72KpK1BZhgmsZWnaIV055R2gSm8y5fbjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:61:26:37:bf:f4:49:48:6e:21:34:4d:8a:d5:74:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Aug 27 04:01:20 2026 GMT
Not After : Aug 28 04:01:20 2026 GMT
Subject: CN=715b99de5cb34428719d4f43db5e920be6682e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:27:54:c7:df:9d:63:a7:f6:8d:86:5c:fd:
5c:20:69:d3:9b:82:6b:87:1e:db:d0:8b:d0:e2:09:
be:0a:cd:fa:1c:c1:f1:43:32:55:33:9d:b2:e1:60:
85:35:12:0e:89:a0:8f:92:23:d4:04:73:f5:e2:e4:
cd:2e:24:9f:de:77:20:a3:4d:00:1a:17:cd:01:8a:
7f:47:7a:82:fc:1b:62:99:1f:a0:e2:a1:80:8b:10:
61:b7:ff:30:bd:ae:b3:37:0c:a1:f9:8f:6e:22:ac:
8b:99:a7:eb:c0:59:21:01:ff:97:5c:57:8d:9a:65:
f1:6f:4e:d8:69:69:ed:3b:e4:5d:86:fe:4a:6c:f6:
c9:f1:9c:83:60:60:4d:ed:6b:11:a4:02:ad:6f:55:
83:da:1a:2b:fd:16:b5:e8:fc:7f:6e:4e:cd:2a:d9:
91:1e:b0:65:cf:23:9d:da:35:58:c1:75:4a:9b:5d:
a9:e3:e4:45:86:e0:1e:43:b2:95:8c:30:0b:4e:70:
b1:7a:64:da:cf:5e:03:e4:dc:8b:7e:69:ef:78:ad:
33:5b:8d:d3:37:ed:e0:76:37:5a:0e:ee:ec:1c:5d:
24:38:70:9f:03:d1:04:4e:66:a3:4e:cc:c0:c9:20:
79:de:d9:ab:58:a6:82:e2:a5:dd:ad:36:8b:53:a5:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5B:99:DE:5C:B3:44:28:71:9D:4F:43:DB:5E:92:0B:E6:68:2E:72
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:6a:b1:b7:99:64:68:de:25:0a:af:ad:d8:92:df:68:4d:
60:c5:d1:46:05:a2:f3:43:80:05:95:9a:31:3d:5d:48:5a:21:
c2:cc:38:8a:39:2c:5d:8c:83:26:e3:dd:96:8d:c3:15:01:a2:
94:32:85:b1:3c:4f:86:53:a3:f1:a8:3a:b9:d5:3d:f4:2b:54:
66:7e:86:9e:e8:06:d6:5a:dc:4e:6d:30:b8:ea:ca:fa:41:64:
8b:c1:ce:10:66:77:93:45:b4:ca:28:e4:4c:0e:e9:a6:6c:75:
85:f0:4c:de:45:d1:66:4f:de:36:f5:9e:b3:27:ba:5d:46:00:
39:a7:bd:19:43:d9:36:45:9a:0e:89:3f:57:47:dc:96:6c:e6:
05:0e:b5:35:6d:85:d8:59:a3:69:97:7f:3f:0d:5c:7e:50:24:
92:f5:cb:c6:7e:03:1e:64:71:29:11:ea:48:71:c9:81:a2:bc:
99:ea:30:ed:0a:4c:d5:cb:67:b0:dc:06:7e:67:9a:be:2c:f6:
88:aa:6f:d7:cd:24:51:6e:b7:11:97:2e:0d:0a:4c:31:c4:ed:
c1:60:4c:59:58:d5:d1:bd:7d:11:ba:71:95:35:f1:00:4b:21:
b1:e8:da:cc:61:af:d6:d8:be:0e:0d:83:27:61:dd:38:2c:3c:
59:47:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:15:35 2026 by rpki-client