Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: oUMPgl44dj6LgmjYlyr7IzBMM3AlGURJLBVzM6ZxTek=
Subject key identifier: A0:D1:5B:32:CB:FB:A0:87:0E:D2:42:E2:9A:C9:16:A2:92:D2:C4:D4
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 019D39AE8CE8450DA787055F8C153434740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 0C7B
Signing time: Sun 29 Mar 2026 13:00:33 +0000
Manifest this update: Sun 29 Mar 2026 13:00:33 +0000
Manifest next update: Mon 30 Mar 2026 13:00:33 +0000
Files and hashes: 1: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: cLoqn27Jkv3cjW6L2qFJewS/JRngYK+hcjkIZjNJcaM=)
2: yIldRRlB5bm94vmFwH-N8K1Rolk.roa (hash: aHVLfMmPkPo5z8uQwk9maqTl2LVG/IoG19YLPq/oNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8c:e8:45:0d:a7:87:05:5f:8c:15:34:34:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Mar 29 13:00:33 2026 GMT
Not After : Mar 30 13:00:33 2026 GMT
Subject: CN=a0d15b32cbfba0870ed242e29ac916a292d2c4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:67:7d:c0:55:59:46:9c:db:12:67:49:1d:
e6:6e:51:b7:65:06:aa:ef:8b:17:95:4e:ef:0d:6d:
af:bf:c3:e1:04:33:97:0b:76:93:c3:72:ef:c3:9c:
a2:89:aa:1c:f1:bd:3f:d7:47:11:4d:25:6d:a2:9c:
90:f1:a5:7f:fe:35:1f:34:18:02:d0:68:d7:49:9d:
7b:db:16:65:3e:b8:9c:53:0f:70:c1:eb:96:8e:17:
35:7f:69:f1:53:4f:75:3c:b8:f6:27:9b:e5:ee:a5:
73:ff:12:b0:2d:6d:ee:fb:0a:42:31:22:4e:c7:4d:
f3:90:0c:78:e2:47:4d:ef:ac:28:47:0f:fa:be:43:
c9:e7:fa:fa:74:3b:1c:12:ae:22:39:a9:e0:eb:36:
38:e5:9a:48:81:79:f0:0f:80:18:af:dd:31:de:de:
98:ba:89:88:31:f9:4f:78:f6:78:bf:aa:6b:90:8e:
0e:7f:1d:ce:e6:27:e4:ff:33:04:69:7a:6d:4f:62:
ac:b5:31:95:9f:45:42:53:75:89:74:e8:34:74:07:
92:0c:a4:23:fb:19:72:d6:28:86:63:30:ff:89:55:
9a:90:aa:9f:ac:08:a5:20:08:37:62:bd:20:d8:30:
88:c4:7a:a3:3f:a3:f3:da:38:ea:45:b8:f3:b2:72:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:5B:32:CB:FB:A0:87:0E:D2:42:E2:9A:C9:16:A2:92:D2:C4:D4
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:cf:fc:bc:e3:fd:ea:b1:31:ef:72:fa:56:02:1a:a9:4c:
f5:f2:a9:cb:e7:ad:f8:cd:40:46:3b:d3:5d:e4:fb:ab:46:05:
8e:04:4e:6a:21:a6:c5:6e:72:c2:72:fb:a6:64:4e:1e:3b:f4:
41:82:26:96:0b:a7:70:47:84:08:54:2c:4e:ab:41:3a:e8:42:
b8:ef:8a:8c:4b:2a:14:02:e0:06:11:9f:9f:7a:87:bd:c6:0d:
12:5d:21:c8:5b:e1:92:4d:45:7b:d9:2f:5d:52:1f:cc:5b:b3:
33:d5:2b:4c:11:e1:82:e9:f8:bc:f1:bb:b9:16:d6:59:08:41:
4f:06:b8:69:88:14:61:ac:e1:ce:62:83:d2:27:fc:33:78:69:
ef:5c:a0:b5:b4:39:f5:19:60:bf:eb:9d:d9:ad:3d:e2:08:5c:
e6:bd:93:ce:62:b3:d5:97:c0:d3:b5:79:56:67:29:94:93:63:
16:b6:3d:c3:1a:d8:30:68:15:52:a5:57:3a:5b:e3:b1:46:03:
59:06:56:01:01:49:ae:b4:94:99:34:f8:f3:35:27:11:0d:49:
b9:b8:48:3f:ca:30:e7:86:e2:ea:d1:7d:ad:d4:24:40:de:0b:
e3:cc:d6:b0:f9:4e:2c:27:c9:7a:a8:d5:72:2a:24:9e:c2:e1:
55:b4:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:00 2026 by rpki-client