Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: GtS/DzrHtkoXiYWUYRF4adldC4+ehGvPFWojW/WVFd0=
Subject key identifier: DD:7D:EA:D6:78:6D:E2:31:2D:C1:06:AF:04:EB:C3:FD:15:72:56:B8
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019D352D67160E07CEF2537DBF8E334F1EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0BBE
Signing time: Sat 28 Mar 2026 16:01:01 +0000
Manifest this update: Sat 28 Mar 2026 16:01:01 +0000
Manifest next update: Sun 29 Mar 2026 16:01:01 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: GktjhYHyREp92tvw+wVTVtvSP9FhbDdSKl5CCPiDc10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2d:67:16:0e:07:ce:f2:53:7d:bf:8e:33:4f:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Mar 28 16:01:01 2026 GMT
Not After : Mar 29 16:01:01 2026 GMT
Subject: CN=dd7dead6786de2312dc106af04ebc3fd157256b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:96:7a:b3:21:89:5f:a1:26:af:16:bd:3b:
1c:6e:e1:ac:87:13:70:a3:fa:cd:0f:7f:f7:d2:a0:
1d:d1:fb:a7:10:7b:5f:26:70:34:10:d4:98:54:43:
0e:a5:41:3a:8a:81:25:0a:03:b1:ce:a8:c3:d2:d0:
bd:ff:64:32:d9:fc:dc:b5:12:6b:56:75:5d:52:ab:
ae:db:df:df:16:7e:b0:10:04:5c:1f:a2:7a:98:fb:
1e:d7:55:bf:3a:da:4a:64:fb:f6:62:73:f4:47:ef:
dc:67:37:3b:3a:3f:b7:57:9f:8a:17:4d:94:d5:d2:
33:82:5a:54:bd:23:b8:9f:38:52:7e:c5:19:3a:f4:
1b:73:e6:6c:78:b1:9a:ec:80:41:50:39:72:33:a7:
55:3e:f9:6e:a6:1f:d6:46:55:c9:bc:df:06:ac:a0:
48:a0:5e:01:ab:9d:b1:a6:7d:ed:a6:08:26:88:0b:
21:0a:de:96:a8:2c:22:73:db:31:f1:3e:3f:af:12:
b2:df:95:65:0d:aa:f6:96:8c:40:87:53:84:fd:e5:
71:1c:37:46:17:cb:7f:be:8f:a8:98:23:69:6a:b9:
17:aa:7e:a3:1c:fc:5d:a8:29:36:04:f6:d6:ea:5c:
c2:31:a4:68:4c:4e:25:9e:8b:6c:7f:9f:0f:9f:af:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:EA:D6:78:6D:E2:31:2D:C1:06:AF:04:EB:C3:FD:15:72:56:B8
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:a4:5d:c2:bb:08:82:e7:d9:5b:5f:30:78:d9:61:58:97:
c5:06:b0:d5:7f:37:f9:88:ae:c4:eb:36:e7:fa:3a:35:60:90:
ed:64:e5:af:ab:fb:11:71:f6:5e:f6:fc:79:f3:4d:e5:a1:d6:
63:de:ae:64:4a:e6:fa:b1:f8:35:aa:60:75:ea:d2:f0:29:eb:
b0:0a:7d:13:8e:a1:0f:f8:36:1c:00:35:f9:3f:da:5c:a9:1d:
23:a0:cd:96:04:a9:8a:73:82:de:75:7c:68:d7:5f:4c:4c:f9:
0d:da:8d:c7:ae:42:7a:41:22:13:59:b9:95:cc:f3:5f:56:fc:
50:94:4f:4e:a3:f1:a1:31:f2:fd:ad:db:c0:58:00:59:c1:06:
6a:49:05:7d:aa:b4:d9:b2:56:5b:73:6c:9d:85:c0:78:3b:4d:
9f:a8:c1:e8:2b:9e:92:e6:43:6e:3b:f4:27:4c:0e:b5:6c:92:
a4:bd:22:16:e7:49:cc:41:83:c1:80:39:ec:57:a1:26:57:74:
75:c7:a1:c6:52:95:75:97:4a:54:7a:0d:92:39:d0:d4:bf:00:
22:c9:ac:92:fe:8a:1b:d6:16:ab:4e:be:5c:d4:8a:32:4a:3b:
74:00:a5:ec:1c:31:e1:58:0a:20:39:b5:7f:b3:47:c1:7b:79:
87:6c:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:23:42 2026 by rpki-client