Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: e+eb1KCdi800JR7ZKYjgiNHIAJFV45sQ16ggfY/8HqI=
Subject key identifier: 9C:D4:AE:34:BB:C2:BE:BA:AF:09:D0:A7:39:EE:3C:72:7D:B9:8E:31
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019D389BC552202DC4C2DF1E1E3B0078E440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa (hash: R0V6ZIQY2hcuRRo+byPK6DVVEuSr1ojs/WwAjiQIcr8=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: NRjeugnRIWnOoBG3pPnz2Q4FmCPtkMltIn7iYHgTeGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c5:52:20:2d:c4:c2:df:1e:1e:3b:00:78:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=9cd4ae34bbc2bebaaf09d0a739ee3c727db98e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:f5:d2:68:5c:ac:4f:1b:c8:5a:e3:cf:c2:
2a:a7:28:08:ee:10:cb:2e:f0:f6:9f:0a:cf:ac:9c:
7f:02:2a:d6:32:87:81:bf:09:d5:7e:b0:d8:cb:8b:
68:c1:60:87:14:48:12:0d:99:bb:9d:a1:0f:d8:62:
1b:95:b2:8d:c2:9f:5a:29:54:9b:ca:e6:64:d0:6a:
c6:cb:83:cd:7f:54:f7:47:03:30:75:51:98:1e:ea:
09:9f:c1:a1:e4:12:13:7f:b2:66:93:98:da:56:5d:
b6:02:09:3a:1e:bb:0c:36:7e:8f:84:de:bb:88:1e:
00:46:04:01:c7:f6:71:37:af:b5:69:db:44:b8:be:
4d:96:86:f9:45:7d:9f:81:50:6a:ab:68:2c:cb:9b:
aa:4e:93:45:21:b1:b0:b4:cc:dd:af:42:dd:77:07:
b3:fb:66:c1:f4:80:db:a1:f1:c3:b8:53:06:ac:7d:
45:8b:41:81:61:5b:ed:0c:89:0e:a6:26:f6:63:78:
4e:46:16:fb:d6:af:eb:1e:e5:92:3a:18:59:85:f4:
64:b1:48:5c:54:da:b2:f3:10:d7:41:90:30:cf:bb:
68:82:d9:e4:a1:4f:d8:16:29:bd:23:1c:47:4a:f7:
cc:7e:d2:c6:8e:92:37:f9:6e:59:37:cc:d9:70:6d:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:AE:34:BB:C2:BE:BA:AF:09:D0:A7:39:EE:3C:72:7D:B9:8E:31
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3f:de:45:b8:b4:4d:ca:7b:9d:b9:ff:fe:fa:66:67:00:b5:
b3:20:76:04:2f:07:0f:32:97:71:32:9e:2f:97:fc:98:b1:5f:
18:ce:0e:6f:42:f1:b6:37:26:4e:99:e0:45:55:73:96:00:cc:
df:49:e8:b6:8d:58:ff:a1:68:f3:37:ab:40:12:62:b8:56:1b:
e7:88:d2:b6:e8:e1:d9:d3:0d:ca:9c:47:d5:b3:9e:a6:13:b1:
4f:62:35:4b:3d:26:95:b8:d1:56:0b:a8:f8:e1:b8:4f:10:8b:
ad:99:40:fc:36:5f:af:a1:2e:1a:1b:f0:e4:9c:9c:3c:74:60:
f4:c5:93:93:94:f0:5a:4d:bc:d5:28:1c:6f:b9:68:b5:ad:60:
19:fd:e8:eb:64:6a:14:5a:e6:4c:f9:ba:38:44:27:9d:ee:a4:
35:4a:47:cb:e7:d8:53:6c:bd:06:e8:f6:ac:bc:b0:fc:64:43:
62:ac:9c:63:83:96:f0:68:e2:49:eb:17:0c:c5:e2:c6:f9:02:
c5:17:44:fb:8b:a7:03:e0:3c:4c:a7:62:db:72:72:25:b8:6d:
f5:3e:f2:61:79:7d:e7:8f:dd:99:c0:37:25:e0:b3:13:ef:b2:
d4:b9:e3:5e:98:8e:a4:d9:29:cc:e7:79:cb:f4:88:75:1d:65:
19:28:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:34 2026 by rpki-client