Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: y3b3vBAQ50v730ry0hYf+8IZ5IwU6+2ru23K7BQ0E2A=
Subject key identifier: 90:1B:54:08:6A:31:7A:70:8B:8F:1C:5E:FE:8D:80:71:D7:F1:5A:BF
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019D389C0158D5A907F824DCBD8982434009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 0485
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: I04pgXjRIWYQX1/wsF26Wev/+7ktR5DaD7E+kXrsFTQ=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:01:58:d5:a9:07:f8:24:dc:bd:89:82:43:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=901b54086a317a708b8f1c5efe8d8071d7f15abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:80:16:df:4e:87:fa:87:99:4e:8a:eb:a5:
0d:51:b9:2d:ca:78:15:5d:3b:0b:c2:ab:20:6d:f8:
4f:0d:62:36:33:5e:8d:e9:c3:25:d4:a3:87:e4:45:
30:45:03:f8:b6:08:f1:88:c1:b5:d8:18:3b:8c:f0:
8c:05:cd:2c:f1:1a:81:ed:6a:e8:21:7a:9a:59:3f:
75:99:92:35:06:65:45:7b:00:59:63:61:44:10:60:
b6:5d:07:90:a2:f9:d5:db:ff:b2:6a:ea:96:49:44:
d0:5c:59:00:f1:ac:d9:6e:08:5d:b7:1f:8a:61:f2:
08:ff:6a:1b:18:68:c5:af:e4:de:f0:a4:10:d5:5f:
c0:c9:6b:ec:03:6c:49:21:18:42:1d:02:ab:db:c9:
ac:07:d1:9b:1b:e8:d6:6e:e1:67:46:86:b3:0d:25:
48:20:ca:b3:a8:62:7a:c4:cf:57:dc:1b:05:a4:36:
4c:34:16:8d:8f:5b:94:60:2c:a4:ec:7b:18:ae:26:
7b:94:71:79:54:0b:6b:13:e1:af:cf:44:59:db:88:
8c:20:c8:4f:e5:f7:e9:3f:4b:3e:1b:a4:3d:a2:84:
c5:59:d9:34:39:b6:a8:4e:2c:9c:d1:bd:c5:6a:9b:
27:40:a7:1d:92:30:e9:0e:5b:71:d3:d3:8e:51:f2:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:54:08:6A:31:7A:70:8B:8F:1C:5E:FE:8D:80:71:D7:F1:5A:BF
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b9:1f:61:6e:9e:48:0a:d2:b3:68:be:e7:55:db:bf:d0:8d:
4a:6b:45:87:04:85:45:e5:2e:59:08:68:6b:e3:96:66:64:e6:
98:d6:db:41:0a:b0:2b:3b:7e:1d:c9:3a:d6:d6:6d:0b:19:fa:
29:8e:6f:d9:f8:d7:2d:65:15:51:d5:ca:e9:45:ff:6b:dd:31:
52:c7:b0:3f:2e:5f:c3:7e:bb:cd:e9:88:78:c9:6e:33:60:e1:
6e:d5:98:b7:b3:f0:8d:83:d7:be:99:3c:60:c9:8e:ae:ae:75:
30:da:27:bd:00:f1:dc:57:55:04:d0:81:ff:b2:06:d8:a4:1a:
43:e3:9d:81:3d:0b:b4:6f:2f:58:70:5e:99:85:ed:67:d7:03:
8c:70:27:56:da:3b:31:71:6a:68:cd:be:59:7c:d0:92:c3:cc:
a7:4e:65:c5:eb:97:2f:0f:d0:9c:ec:db:58:79:80:30:16:55:
c4:17:54:09:97:68:62:02:ff:63:ac:20:8b:49:ff:c5:37:e5:
53:17:1d:3a:f9:0e:2b:38:1f:e9:9c:53:c0:5b:1d:12:08:d9:
aa:db:d8:e4:9f:54:98:31:0e:53:07:bc:5f:33:42:c6:ca:89:
1f:af:46:5a:38:7d:2d:71:fd:10:29:b4:6e:a8:28:84:f9:97:
5b:f6:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:39 2026 by rpki-client