Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: dupK3nx/4REXiF28YHaiYmRQI+rV4w7ZMr1odDQb2Io=
Subject key identifier: D3:8B:97:14:C9:F7:87:42:85:28:4D:3F:72:B0:AA:FD:0E:E6:01:14
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019CE4B55EF1BD9223F0007D3EA4A11D73B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0487
Signing time: Fri 13 Mar 2026 01:00:17 +0000
Manifest this update: Fri 13 Mar 2026 01:00:17 +0000
Manifest next update: Sat 14 Mar 2026 01:00:17 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: KdZRTyZEUim/IQy2j6x99rnZDGc7B8VvaVg3v1qJzhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:5e:f1:bd:92:23:f0:00:7d:3e:a4:a1:1d:73:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Mar 13 01:00:17 2026 GMT
Not After : Mar 14 01:00:17 2026 GMT
Subject: CN=d38b9714c9f7874285284d3f72b0aafd0ee60114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:1f:1f:7d:4b:cc:a4:f6:4c:7a:d6:5d:f6:
75:e3:bd:62:3d:c0:1a:9c:76:17:38:e5:40:9b:3c:
18:b1:cb:24:a4:dd:9a:ca:91:52:23:6c:45:c1:82:
87:a6:cf:15:1c:a0:05:98:04:c0:2d:17:68:22:95:
31:77:04:e9:38:bd:71:af:cc:de:6b:d5:cf:2c:fe:
99:58:76:36:10:a8:38:63:bd:2a:74:ef:ee:52:5d:
6b:ac:66:c9:32:5d:3e:9b:07:c8:6a:60:b4:b1:61:
11:01:5b:fd:cf:6f:a8:fc:7d:4a:02:70:24:35:1d:
8d:bc:3b:95:31:50:c3:d2:4b:b7:2e:61:c0:9f:11:
20:99:d5:bd:e5:d1:58:f7:e9:42:40:f0:41:00:4a:
97:f6:2f:d5:19:1b:11:bb:a1:d1:b7:21:95:fa:c7:
f0:18:56:41:a3:85:b5:8c:b5:4d:51:46:93:55:28:
aa:44:ee:15:15:52:d7:9a:ae:5c:59:30:87:43:38:
53:ae:90:32:c3:f4:97:4a:35:1d:88:0f:8e:0b:f1:
fa:dc:29:e7:b0:c2:ee:7a:39:8d:d0:33:3a:65:81:
3d:0e:ea:46:72:5d:35:77:ed:99:49:c0:d6:83:b6:
cd:21:d2:d2:02:ed:43:40:f8:56:5b:ba:8e:b0:cf:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:97:14:C9:F7:87:42:85:28:4D:3F:72:B0:AA:FD:0E:E6:01:14
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:cb:2c:2f:17:66:86:22:5d:37:94:32:bd:5f:c3:2e:9e:d4:
c6:69:09:81:65:45:30:d3:ec:e1:ac:40:2d:41:1d:68:1e:33:
04:fc:c0:d5:cc:08:34:a0:e3:e8:f0:07:05:49:66:e5:c5:5f:
e3:ba:bf:a6:66:09:93:5c:2e:d1:c2:68:c1:5a:77:5a:c1:3b:
fd:91:9c:a7:ae:6b:60:5c:8a:5c:87:3a:ae:88:19:4c:df:cb:
4e:36:52:c0:5d:d1:9f:06:c0:e0:ff:e5:a6:a0:0d:e6:9d:b1:
00:f2:25:1a:fa:be:76:e0:94:a0:24:28:9d:d4:8a:e8:88:c1:
e6:5b:54:7b:5d:94:3d:7f:9f:10:77:6c:38:52:54:5c:0a:4d:
73:6c:a0:a0:64:e6:64:ce:62:e1:16:50:66:5c:89:8c:7a:24:
22:4b:4a:e1:72:cf:f8:e4:4a:89:e8:86:f7:0b:8c:97:7a:15:
ac:fd:c6:d0:49:c6:f2:38:49:db:60:a2:dd:03:aa:63:88:c2:
dd:2c:74:87:45:ba:b0:17:c9:1c:ff:4d:42:76:9e:29:f1:6e:
63:e9:23:37:32:c6:99:fb:aa:62:56:c8:9a:72:1f:4c:0c:1e:
2e:10:46:65:f0:f5:33:e7:a4:10:d4:1e:d3:f3:57:43:17:07:
6e:b4:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:43 2026 by rpki-client