Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: IyO5Qu7Rb3kQu2Gz10ogc++sEGrh3oSJudcVTXNtyEo=
Subject key identifier: 3E:F1:BC:93:E1:C2:08:B0:8F:1A:37:BF:7D:D5:22:F2:56:2F:53:40
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 019D37F769B3A7DD96BF019C079302A39026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: Uelu6l4NquwAbyVxi9MJYjggwy0.roa (hash: ssdwawQd6a83Zwysw9XF2aqNC9cl5v3DkKLPdZdT8pQ=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: fVSNB15ggjMCOV1MbCuSP4nMebIILqAAgWxT8jMpKGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:b3:a7:dd:96:bf:01:9c:07:93:02:a3:90:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=3ef1bc93e1c208b08f1a37bf7dd522f2562f5340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:b4:01:16:04:ea:ac:26:b8:b5:7e:3a:04:
55:99:4b:de:a0:9b:94:8b:ce:3c:1c:85:e3:4d:dc:
ff:50:96:6c:60:de:71:c7:d2:a1:f1:88:04:74:3e:
a7:02:89:70:18:40:14:09:53:55:57:d3:b6:c0:1a:
98:8b:ae:e3:2c:f9:7b:03:b8:a6:13:d0:4b:b3:c6:
94:b0:48:15:5c:42:93:1a:3a:6a:d4:8a:08:d8:61:
a2:56:1e:8b:08:8b:a1:4b:5f:ce:91:9c:db:c5:bb:
24:7a:b6:f5:b3:35:d1:35:5b:9b:0d:4a:90:45:b0:
27:be:76:69:eb:6d:f4:fe:25:ba:e9:67:55:64:0d:
a4:23:d6:b2:74:28:a8:ff:f0:81:07:c9:d0:d3:7d:
75:e3:ec:64:85:34:0d:82:ab:9b:a2:fb:67:6b:c7:
1a:a9:de:c9:78:d0:c6:5c:f6:35:45:c9:6d:eb:2d:
05:6f:66:5a:78:9b:5f:93:2b:04:e9:d4:31:10:b9:
ce:9b:e3:38:24:10:5b:0f:6d:7a:42:98:02:ed:c7:
d0:a5:5d:7f:ee:7f:ac:11:ba:b0:51:e4:7f:12:ca:
1a:dc:b6:15:28:af:cd:65:83:1e:ef:c8:46:27:f6:
13:84:7a:c2:8f:fd:82:37:08:83:c8:d6:27:0f:67:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:BC:93:E1:C2:08:B0:8F:1A:37:BF:7D:D5:22:F2:56:2F:53:40
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b8:d9:33:1e:f7:4c:3b:41:50:c1:c6:74:0b:6f:9f:6f:57:
1a:7b:04:81:90:59:94:83:e5:3e:f4:0f:66:4c:99:97:db:5e:
32:f2:ec:86:eb:2f:45:ea:79:a2:53:d3:24:ac:1e:9e:8c:03:
e5:09:8c:06:63:32:34:01:a5:57:c1:53:31:f8:03:b0:eb:e2:
e6:33:82:ac:39:c6:e6:1f:23:f8:25:d7:1b:75:5e:a3:41:14:
69:a1:d1:df:80:d1:8c:6d:d5:fb:a6:b8:d2:a7:3b:dc:45:5b:
1d:55:bd:32:89:33:6c:07:68:04:fa:83:3a:1e:e0:13:c5:9f:
5b:37:61:91:27:07:6d:6f:e6:31:cd:51:a0:be:15:53:d8:11:
c0:19:6a:65:2a:73:e7:91:f9:8e:43:8f:a3:27:36:5d:3a:8e:
61:a8:d0:d9:6c:bc:39:18:6c:dc:ec:1e:2f:a5:32:e1:4a:63:
13:6d:fb:bc:ac:fa:35:fe:38:45:31:d8:12:6a:1f:cb:d8:ab:
72:57:67:92:01:1c:ea:19:60:7b:d0:9f:b8:ad:6c:9d:3e:85:
b5:f8:bb:c0:1a:f6:75:5f:19:4c:32:18:ec:32:f8:54:1b:d3:
19:df:7e:81:58:b7:f9:3b:49:58:da:29:60:1a:a1:bf:e8:39:
6d:5e:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:49 2026 by rpki-client