Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: BXp072l5hgUgDnyOWPO8AcB4ndJn4amYI7i7hHNjvxE=
Subject key identifier: 7B:F5:D4:E9:49:5E:A7:E1:D7:D3:23:F5:90:C3:3B:6D:B7:8A:D4:AA
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019D39AEB5853B3F9A847C89BBBD0AC08B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1150
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: P4lO9VxP27Bc+DEzaKy7RFc3bpZ++3sT5oIemZqmdbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b5:85:3b:3f:9a:84:7c:89:bb:bd:0a:c0:8b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=7bf5d4e9495ea7e1d7d323f590c33b6db78ad4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:f0:79:2f:1e:1e:db:61:aa:81:3b:40:7b:
9c:21:5f:e7:14:bf:87:e8:8a:6f:7a:88:d0:c6:3f:
c9:09:bb:67:94:4f:a1:d7:e4:99:f7:2e:52:5b:13:
3d:46:6d:31:1e:19:ae:15:0b:03:0c:73:0f:13:39:
cf:54:cb:01:96:05:bf:7e:b7:f6:08:bc:68:9b:b8:
cc:ea:fd:db:50:5a:e8:85:13:97:b3:05:dc:8c:21:
38:e3:a9:f7:2e:b4:f9:5f:79:95:e1:fe:15:f8:fe:
b4:dc:4e:59:41:44:20:3b:8f:b7:98:19:11:54:05:
6d:81:5f:c9:47:97:0f:2d:c8:c6:a0:45:5c:5c:21:
de:7d:8a:ad:49:74:49:da:c1:73:f1:a2:47:ba:d3:
97:40:01:83:2b:66:65:01:b0:13:b0:f1:f3:62:7e:
67:60:3a:fd:86:95:08:93:93:a9:67:b2:73:4c:5a:
19:e3:33:1d:f4:80:57:0d:89:dc:3a:df:dd:b4:5a:
46:c4:8a:20:9d:d1:c2:a9:6f:c2:43:92:88:57:ee:
aa:fe:9c:30:84:b4:93:63:2f:2d:62:5e:db:16:e8:
d5:eb:fe:d3:48:d2:47:95:10:f4:32:10:f6:87:1b:
d1:fc:64:bb:ff:08:31:48:71:c3:d1:74:ec:91:22:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:D4:E9:49:5E:A7:E1:D7:D3:23:F5:90:C3:3B:6D:B7:8A:D4:AA
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:54:a5:99:e5:be:a6:fa:48:e2:bc:e8:d1:29:99:d6:03:8e:
cb:20:f5:d2:ed:8c:15:b2:27:8d:b9:70:9c:eb:8f:ee:70:6e:
f8:27:6c:30:f1:6b:03:cd:53:9c:a2:86:a3:b8:08:56:65:29:
0d:e1:e7:b2:64:29:c1:ea:7b:49:67:be:a8:6d:bc:3b:7a:ad:
6b:b0:a1:69:7e:2a:42:39:3b:3d:3c:cb:d4:71:62:28:8b:31:
c0:2d:d9:7d:71:02:b5:43:1f:57:3d:1d:8a:f9:50:ea:47:1d:
70:c1:3c:39:ab:82:f1:27:a9:eb:a6:45:29:10:6f:88:bc:38:
cc:2e:8b:c0:27:dc:53:7e:f5:e2:8d:45:2d:e9:f0:6b:f9:85:
61:87:06:79:80:43:97:15:95:9e:e2:ae:26:60:df:ca:3a:c7:
53:03:c1:b2:3a:e1:15:3f:98:05:3b:23:18:02:7d:de:22:93:
0c:4a:4c:32:49:c7:03:c8:c1:30:b1:ed:55:4d:d5:bc:db:c4:
6d:39:ec:04:57:c4:f8:4a:ed:46:3e:d2:6f:d1:ed:8e:b1:1b:
fe:b3:a9:5d:15:82:f2:99:79:06:cb:87:06:b9:d1:f3:92:9a:
6d:d2:51:3e:50:60:cb:af:59:84:f5:8f:d7:2d:63:f2:3b:cc:
e8:e2:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:41 2026 by rpki-client