
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: rSYFSyg7psB402XIKZgoqa0R/N+H6NqT14aZIjZafBI=
Subject key identifier: AC:1E:0F:A3:6C:03:E7:55:BA:4B:AC:62:2D:F0:18:35:C3:45:26:FA
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019D3909D9130D89C9D87CA184AA5485D6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 0A57
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: /2CPE4F836obRpCVx4Rfe4mVT+IRQwjVQw3i3LGhgkI=)
2: njOWzyw6BPbysiyLRcVX59-q4hc.roa (hash: vhZ8qAXL4RUIeajsso+zjNGjDXDgCoWsrZSWesPHRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d9:13:0d:89:c9:d8:7c:a1:84:aa:54:85:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=ac1e0fa36c03e755ba4bac622df01835c34526fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:69:e9:0d:4a:82:58:e1:34:13:a5:c0:b0:
94:f8:33:84:5f:6a:ce:fc:be:ee:bb:76:40:82:b1:
61:8a:d1:00:96:56:df:ae:a1:4d:ba:71:59:74:c5:
09:ec:99:1f:03:4b:a8:96:b1:0f:70:45:9b:4f:39:
43:ea:e2:8d:cb:77:a6:3b:13:aa:68:71:0a:59:3d:
34:30:fd:b4:1f:3e:57:90:94:56:85:4e:8d:94:5f:
25:9d:9d:5c:15:02:7a:06:5f:51:9d:de:94:09:fe:
9e:61:f6:1a:75:ed:22:a9:32:63:a1:2a:36:7a:dc:
dd:80:0c:64:76:9a:ff:11:c2:37:45:54:6a:2f:d2:
a9:4d:29:7c:02:8f:71:c8:d5:d5:3d:fe:a1:39:93:
ce:ea:2d:9d:e9:76:8e:fd:42:d8:e8:dd:31:98:fb:
7e:ba:fd:17:ca:e2:eb:5f:d5:5f:c5:96:d3:0e:ed:
63:13:6d:25:f3:dd:84:c9:48:6b:bc:35:8c:a0:21:
be:34:9e:ae:c6:09:8e:62:13:cd:d0:da:40:ee:a1:
1a:46:72:18:41:a3:83:5a:fe:2a:62:35:29:56:50:
f7:aa:88:30:ca:1b:aa:8b:9a:62:19:a2:c3:e0:58:
4f:2b:e5:06:42:5d:87:e8:27:db:2c:87:36:dd:8b:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1E:0F:A3:6C:03:E7:55:BA:4B:AC:62:2D:F0:18:35:C3:45:26:FA
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:8c:67:b7:a5:2a:4e:4b:90:6a:c7:71:75:5c:78:fe:89:
4f:24:2f:7f:fd:ca:b4:0d:1b:c2:c2:8f:47:ca:fe:6e:cd:7b:
85:ba:3e:e1:02:82:d6:bf:4d:ef:f8:4f:b2:27:fd:db:fb:bf:
b7:68:43:76:15:a4:e3:cc:02:e2:86:d7:0d:10:d5:05:a3:70:
2a:05:1a:2c:7b:3b:12:1d:0c:98:68:7e:62:8b:20:74:56:a2:
94:0b:03:2c:9e:ef:34:bf:e2:a2:f0:55:c2:cd:b4:25:35:5a:
d4:65:7a:f9:bd:5f:7e:e3:1c:d7:31:af:ec:d9:e8:51:e9:f2:
fa:ad:ec:2e:e7:bb:e7:a2:92:d2:9e:e3:2b:ba:98:53:c5:cd:
3e:99:20:32:d6:db:b2:ee:9b:b0:36:35:15:b4:d8:b1:88:10:
a4:a4:95:d7:fb:86:d6:b7:9d:47:6a:90:b0:4a:df:d6:36:88:
1d:79:1f:71:f0:ed:ab:86:f1:82:42:1c:75:eb:1f:30:ea:75:
76:00:39:bf:ab:12:3e:e7:15:48:6c:aa:70:ee:ba:da:79:fc:
c1:56:5e:9a:ac:66:4a:e4:ba:0b:9a:fa:ee:2f:e2:24:40:e4:
86:a3:75:a8:7e:0d:0d:6d:c2:1e:df:94:6b:e2:22:f8:17:b0:
b1:01:39:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CdkTDYnJ2HyhhKpUhdarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1
MDZhMjAwHhcNMjYwMzI5MTAwMDM5WhcNMjYwMzMwMTAwMDM5WjAzMTEwLwYDVQQD
EyhhYzFlMGZhMzZjMDNlNzU1YmE0YmFjNjIyZGYwMTgzNWMzNDUyNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn35p6Q1KgljhNBOlwLCU+DOEX2rO
/L7uu3ZAgrFhitEAllbfrqFNunFZdMUJ7JkfA0uolrEPcEWbTzlD6uKNy3emOxOq
aHEKWT00MP20Hz5XkJRWhU6NlF8lnZ1cFQJ6Bl9Rnd6UCf6eYfYade0iqTJjoSo2
etzdgAxkdpr/EcI3RVRqL9KpTSl8Ao9xyNXVPf6hOZPO6i2d6XaO/ULY6N0xmPt+
uv0XyuLrX9VfxZbTDu1jE20l892EyUhrvDWMoCG+NJ6uxgmOYhPN0NpA7qEaRnIY
QaODWv4qYjUpVlD3qogwyhuqi5piGaLD4FhPK+UGQl2H6CfbLIc23YvDnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKweD6NsA+dVukusYi3wGDXDRSb6MB8GA1UdIwQY
MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt
MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh
LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhuMZ7el
Kk5LkGrHcXVceP6JTyQvf/3KtA0bwsKPR8r+bs17hbo+4QKC1r9N7/hPsif92/u/
t2hDdhWk48wC4obXDRDVBaNwKgUaLHs7Eh0MmGh+YosgdFailAsDLJ7vNL/iovBV
ws20JTVa1GV6+b1ffuMc1zGv7NnoUeny+q3sLue756KS0p7jK7qYU8XNPpkgMtbb
su6bsDY1FbTYsYgQpKSV1/uG1redR2qQsErf1jaIHXkfcfDtq4bxgkIcdesfMOp1
dgA5v6sSPucVSGyqcO662nn8wVZemqxmSuS6C5r67i/iJEDkhqN1qH4NDW3CHt+U
a+Ii+BewsQE50Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:38:41 2026 by rpki-client