Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: lR1pOvNdjLzfec07Q4/kauqsWmhdGCSsudDRbsqRKlE=
Subject key identifier: E0:0C:2F:CE:58:EF:18:FF:29:ED:D8:31:AD:17:04:06:A2:26:01:E7
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 01A13E5D0B84C8BD50D77256F3EFE85C4870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0DD5
Signing time: Thu 15 Oct 2026 07:00:47 +0000
Manifest this update: Thu 15 Oct 2026 07:00:47 +0000
Manifest next update: Fri 16 Oct 2026 07:00:47 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: nC6KrYQKtGjU/fvhGt5XrfkzJ+QcJYdVrR+lFjMGjQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:0b:84:c8:bd:50:d7:72:56:f3:ef:e8:5c:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Oct 15 07:00:47 2026 GMT
Not After : Oct 16 07:00:47 2026 GMT
Subject: CN=e00c2fce58ef18ff29edd831ad170406a22601e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:4f:b4:f4:d0:cb:ca:ac:66:6d:42:4a:df:
84:17:4d:a6:69:7c:a1:8a:c2:1d:d8:98:ec:d9:df:
da:b7:ab:82:08:ed:3f:06:c2:52:89:f1:eb:8c:bd:
a6:d5:22:5d:f7:94:89:78:52:98:12:20:75:7a:6b:
ee:ab:04:5f:60:d6:c5:54:ed:70:5a:7b:66:27:86:
c9:88:46:52:2e:8d:15:a7:b5:9d:26:27:31:af:37:
0c:1b:b7:21:0e:2b:93:25:da:32:d3:5f:60:cc:12:
30:51:9f:63:74:80:6e:de:83:fb:54:c1:2b:2f:a0:
3c:5b:2a:a4:25:80:9b:a0:cc:ca:9b:7b:d4:0c:15:
f4:be:2d:9e:2d:a1:2d:3f:1a:e7:16:fd:61:46:1a:
12:70:5b:d4:14:0e:c3:09:d2:30:3e:6a:3e:91:62:
68:35:6c:ef:ac:5f:a9:2e:04:62:f9:9c:cb:c5:a8:
30:70:9e:e4:94:b4:37:a6:fc:c2:dc:00:db:9c:18:
f0:d7:37:cb:d0:5b:32:ba:74:16:b9:5f:1b:6b:e1:
ef:b4:44:6e:ec:c8:f0:34:be:11:d9:92:56:77:e7:
b7:66:3c:b4:2c:9d:d5:4c:7a:d3:2e:ff:a8:6c:25:
a0:19:b2:9f:39:a2:6b:64:4c:7f:6f:a5:4b:25:60:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:2F:CE:58:EF:18:FF:29:ED:D8:31:AD:17:04:06:A2:26:01:E7
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b1:2d:86:63:9e:a4:6c:ef:17:a2:7f:01:6a:a8:53:a7:2d:
cf:44:4f:04:09:1c:be:ad:a4:1b:f9:84:35:26:5d:ff:09:95:
f8:ff:5d:d5:84:19:91:e2:d3:37:ae:3d:8a:6b:93:5b:f0:38:
68:10:ab:1e:18:85:9f:1d:15:ea:81:d9:04:49:4e:3b:6a:6f:
f2:b6:c5:3b:57:f4:db:15:ce:65:8b:74:64:44:85:cf:a6:a7:
39:ed:0e:cd:19:08:ed:56:06:4c:c3:d7:6e:10:c1:28:21:46:
9b:4f:c5:3f:04:1a:0c:6c:da:d8:f0:6d:26:14:74:cf:40:9e:
65:5f:ba:de:3e:cd:28:d5:8e:ca:df:59:fb:c0:8c:76:82:93:
fa:ef:f6:fc:c4:61:85:b6:2b:ad:34:cc:d0:d5:7e:43:57:a1:
8b:18:ee:29:7e:9b:10:64:5d:26:ad:20:85:66:c3:52:01:12:
c8:8a:71:bd:2a:f7:da:2d:be:27:dd:04:0c:8f:ae:ee:9f:f8:
b2:6e:fc:10:bb:1b:22:79:e0:b5:c8:c8:c8:f8:64:95:6c:7c:
1b:4c:d5:fd:6e:b7:6c:02:d0:c9:73:d8:d5:c6:87:03:34:f9:
bc:76:2e:0b:ad:0c:63:a6:7a:17:2e:2a:0d:e6:57:f1:ce:1c:
e8:36:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:19 2026 by rpki-client