Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier: 9vKU/sXXq5In/XpT0jne01Irb6DODLGxmmwZUUHZa4U=
Subject key identifier: 28:BA:37:16:A9:4A:B5:24:98:64:E2:23:CF:BF:2B:E8:47:B0:49:42
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 019D3A1C323FBAC67C0750C2BCAAE2C2E097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 15:00:19 +0000
Manifest this update: Sun 29 Mar 2026 15:00:19 +0000
Manifest next update: Mon 30 Mar 2026 15:00:19 +0000
Files and hashes: 1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: QM/xsEXgSS99/8c0uTlVgo+Tz2ax2QjxG0y70FSQzD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:32:3f:ba:c6:7c:07:50:c2:bc:aa:e2:c2:e0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Mar 29 15:00:19 2026 GMT
Not After : Mar 30 15:00:19 2026 GMT
Subject: CN=28ba3716a94ab5249864e223cfbf2be847b04942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:3b:31:da:5a:29:cd:1f:5a:70:90:31:d7:
24:98:83:80:a9:e1:de:e6:63:c1:02:d5:47:c3:e6:
c0:a7:d6:08:95:fc:0f:b5:b4:54:d2:b0:ae:67:ba:
62:2e:8a:65:1e:03:3b:97:b1:e4:46:2e:9e:de:08:
0c:de:dc:79:d8:94:9b:56:54:be:2d:b8:73:3e:98:
8b:3a:8d:8e:98:75:61:9f:12:97:08:c2:b1:6d:50:
66:06:72:c0:8d:bb:1a:8c:ac:aa:a6:60:04:d5:6f:
02:b3:97:98:45:d4:72:22:ad:c7:13:4b:ef:15:ee:
56:10:d4:48:d1:d2:5b:cd:06:21:03:20:5b:6f:74:
0b:56:34:30:d8:9a:4d:a0:ef:7c:69:79:77:8c:a6:
5d:b6:ec:f7:f2:81:60:75:08:db:d7:1b:52:b3:af:
6a:4f:73:27:a1:02:7d:8b:e1:a2:c5:57:ab:a6:5f:
70:ec:95:19:20:f4:d3:c7:c5:7d:03:46:85:3e:3f:
e9:6a:86:ad:c3:15:e9:23:0a:2f:db:1b:57:e9:d2:
7a:59:86:76:71:fa:14:4e:cf:26:db:7a:d9:25:73:
1b:c2:86:4d:cc:a5:8e:36:ac:72:62:a1:20:d2:6c:
c5:c6:f8:cd:bc:ea:57:d7:3a:36:d1:43:52:18:4e:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:37:16:A9:4A:B5:24:98:64:E2:23:CF:BF:2B:E8:47:B0:49:42
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6a:ea:e4:e6:48:84:b3:e2:6f:c2:5a:5a:24:e9:7d:5a:21:
46:40:80:08:32:6f:0a:f8:36:ba:b0:a4:9c:93:fd:56:cd:c4:
22:87:c7:ea:c9:47:66:e1:ae:8a:7a:6d:07:59:74:82:23:65:
fe:ed:12:72:44:51:5b:33:68:ee:d5:a5:71:a4:2f:29:5c:30:
1a:5d:3d:32:44:0f:e6:d8:33:ea:05:b5:bb:82:75:00:03:dd:
50:30:b2:8f:f1:48:40:a1:d6:ee:ff:f9:63:eb:16:21:80:5d:
d7:a7:9e:02:ef:23:1e:71:2f:3c:e3:2e:64:58:d1:03:c6:84:
72:b8:96:ba:f9:ca:39:fb:58:e9:75:86:e4:ee:df:7a:05:cf:
a0:7e:ed:13:2d:b9:35:14:ff:78:03:9e:2d:3f:ab:b2:cd:da:
76:2f:a2:a7:7a:bf:3a:3f:27:9f:e7:14:fa:16:54:eb:ab:23:
41:7f:8a:16:ca:d0:c0:3b:7f:8c:68:16:16:de:8e:49:42:90:
ac:b0:9b:43:1f:e0:82:41:71:c2:3f:a4:0e:70:a7:89:7b:4b:
a4:04:8b:57:79:b6:15:b9:43:bc:ef:74:ab:0c:15:6c:1a:75:
12:5a:ec:f3:92:1f:7f:a2:00:58:5b:a3:8d:94:7f:f1:d4:3b:
e9:cb:a7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:22 2026 by rpki-client