Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: dQw6lvol3+tl1a2SW3CGiqBYRAO5/q3098IHiRx1BYQ=
Subject key identifier: C5:AC:39:55:43:C0:2A:EA:1D:0B:EA:80:8F:10:77:DB:68:8A:56:8E
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 019D3909DF5083889C322AA15E9FD0E43EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 0765
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: 2Yv1DOtt9HTArZs0H55rCGMI6fJs0Ylck3F1n3XeZMQ=)
2: wZUVkqB6E-aCMAdUL9kA2ghbJsU.roa (hash: 3wvCztUy4SNcpk1iX0gY8NL+kTpS+pWyTYrHQh19Dds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:df:50:83:88:9c:32:2a:a1:5e:9f:d0:e4:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=c5ac395543c02aea1d0bea808f1077db688a568e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:84:4e:bd:6f:30:01:da:53:b4:37:79:80:
e3:63:12:d0:34:a3:00:83:a2:75:01:39:55:26:13:
0b:21:1c:a0:68:14:57:61:46:63:0a:9c:bd:77:1d:
38:4e:03:71:45:ea:53:ff:92:3a:a6:6a:26:4d:81:
06:47:83:c1:41:a4:39:5a:d4:04:1c:38:ed:90:b3:
1b:49:c1:b2:9e:36:8d:fb:d2:bd:10:1e:77:12:bb:
d9:21:1c:15:76:73:e1:79:f5:ff:cc:07:2f:41:ca:
49:34:e5:5e:ec:d8:17:93:42:a0:3b:f7:54:8b:8f:
68:20:bc:5d:8b:3f:ce:fc:ed:52:ba:9a:dc:df:b7:
4d:eb:87:fb:7d:e3:08:da:e9:b8:5f:7e:0d:59:a4:
bf:07:75:e0:bc:9f:6b:38:70:f7:49:81:81:10:af:
72:5d:9c:78:7a:2f:98:5a:e6:61:eb:8a:37:28:6b:
13:b2:ff:c2:02:5e:c6:43:fd:bd:b0:86:e9:66:3e:
01:56:62:c3:67:36:f3:b3:a4:c7:a0:f8:fa:da:b1:
dc:04:39:65:95:0d:0e:47:c5:05:30:c9:d2:f3:8a:
0c:d5:74:b6:9b:be:f2:e5:b8:24:b3:32:60:18:e0:
f3:5a:c4:b4:c3:ac:e9:71:ff:c1:ec:64:71:cc:31:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:39:55:43:C0:2A:EA:1D:0B:EA:80:8F:10:77:DB:68:8A:56:8E
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:24:d9:59:86:1d:53:1c:7c:c0:8d:2d:4f:7d:1c:70:67:bb:
82:74:52:eb:25:7d:6f:07:d6:0d:4a:54:8c:4a:34:6c:11:b1:
1a:0e:42:ed:1d:1c:a2:1d:77:a7:29:aa:a2:aa:47:7a:80:b2:
41:f2:1b:ec:18:6b:f1:da:a4:fe:3f:d5:ea:cc:f1:a9:c0:1b:
f5:01:84:a5:36:66:d4:ce:32:26:e4:f4:0e:f4:70:da:f5:88:
ad:9c:85:e6:fc:d2:38:da:33:fd:01:bd:1a:17:1f:87:b9:7b:
29:54:49:f0:55:bd:24:f9:28:d7:98:67:56:07:ee:f0:22:61:
49:93:1a:7f:62:01:c0:bd:eb:3b:c9:e1:94:f0:44:a8:3e:15:
01:72:98:e2:ae:a1:c8:da:4d:a6:e5:0e:80:91:73:f3:d0:da:
e9:8f:73:58:c5:2a:b5:13:72:a5:21:e3:34:e6:c4:de:66:57:
95:a1:45:fd:3a:c5:fe:a4:85:5d:89:44:56:bb:84:b4:2d:e2:
e6:60:20:17:ef:ef:49:06:7e:3c:9b:dc:49:da:87:08:f4:ba:
e7:a2:48:f5:f1:9b:b7:fe:25:ee:c8:e0:b8:83:4a:75:b7:fc:
9b:d1:88:49:c7:2f:22:69:9b:de:b3:ae:06:5a:3f:d2:73:14:
2a:a9:cf:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cd9Qg4icMiqhXp/Q5D7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1
NWU3MGIwHhcNMjYwMzI5MTAwMDQxWhcNMjYwMzMwMTAwMDQxWjAzMTEwLwYDVQQD
EyhjNWFjMzk1NTQzYzAyYWVhMWQwYmVhODA4ZjEwNzdkYjY4OGE1NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCETr1vMAHaU7Q3eYDjYxLQNKMA
g6J1ATlVJhMLIRygaBRXYUZjCpy9dx04TgNxRepT/5I6pmomTYEGR4PBQaQ5WtQE
HDjtkLMbScGynjaN+9K9EB53ErvZIRwVdnPhefX/zAcvQcpJNOVe7NgXk0KgO/dU
i49oILxdiz/O/O1Suprc37dN64f7feMI2um4X34NWaS/B3XgvJ9rOHD3SYGBEK9y
XZx4ei+YWuZh64o3KGsTsv/CAl7GQ/29sIbpZj4BVmLDZzbzs6THoPj62rHcBDll
lQ0OR8UFMMnS84oM1XS2m77y5bgkszJgGODzWsS0w6zpcf/B7GRxzDEL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWsOVVDwCrqHQvqgI8Qd9toilaOMB8GA1UdIwQY
MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt
NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5
LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyTZWYYd
Uxx8wI0tT30ccGe7gnRS6yV9bwfWDUpUjEo0bBGxGg5C7R0coh13pymqoqpHeoCy
QfIb7Bhr8dqk/j/V6szxqcAb9QGEpTZm1M4yJuT0DvRw2vWIrZyF5vzSONoz/QG9
Ghcfh7l7KVRJ8FW9JPko15hnVgfu8CJhSZMaf2IBwL3rO8nhlPBEqD4VAXKY4q6h
yNpNpuUOgJFz89Da6Y9zWMUqtRNypSHjNObE3mZXlaFF/TrF/qSFXYlEVruEtC3i
5mAgF+/vSQZ+PJvcSdqHCPS656JI9fGbt/4l7sjguINKdbf8m9GISccvImmb3rOu
Blo/0nMUKqnPIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:01 2026 by rpki-client