Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: pbOhKDRW6svZ4ogGeZHjcwElWSlgCIMF+cgdJyuzQSo=
Subject key identifier: 82:89:B7:97:00:12:BE:83:33:70:5F:31:B1:D5:F2:E3:76:D2:8A:F4
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019CB13651C57877C9EF6EA9C1B03379C134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 0189
Signing time: Tue 03 Mar 2026 01:00:52 +0000
Manifest this update: Tue 03 Mar 2026 01:00:52 +0000
Manifest next update: Wed 04 Mar 2026 01:00:52 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: m7xyUnAOBStfC/0b8hrd8M6AL9T9qVJf6Il5jN6//6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:51:c5:78:77:c9:ef:6e:a9:c1:b0:33:79:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Mar 3 01:00:52 2026 GMT
Not After : Mar 4 01:00:52 2026 GMT
Subject: CN=8289b7970012be8333705f31b1d5f2e376d28af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:50:f4:c4:e3:90:52:b6:1c:cc:e0:d2:0e:
ab:f9:59:c7:9f:87:5a:4d:65:18:22:4a:5f:63:56:
9c:53:77:c3:15:95:b5:92:bc:b9:8b:4b:cf:e4:d6:
11:34:c7:6f:39:37:83:86:2d:91:66:82:5f:c6:f1:
f0:92:58:ac:aa:00:d8:6d:3c:2a:fd:db:ea:37:79:
6d:a8:ae:29:1e:a7:59:d9:9e:01:22:91:4a:24:be:
98:74:b6:76:99:ff:47:9e:8d:cd:b9:58:32:16:64:
cf:1e:fb:97:e1:53:b8:f7:83:d6:ca:38:98:ec:0e:
bd:d6:3c:84:07:82:81:9c:c4:63:7b:92:70:b0:e5:
62:ec:98:0a:bb:1c:0b:20:a0:4f:ce:39:6a:64:72:
fc:1e:1d:9e:14:1a:a8:8f:13:40:8f:1d:b1:76:0a:
65:42:7a:ce:04:a4:76:40:de:c2:f5:88:91:d7:97:
d1:22:bb:22:14:56:ae:eb:00:d8:7a:bb:17:62:66:
36:71:29:4f:55:a5:4e:72:cb:84:67:d9:85:59:43:
4d:f7:09:c0:97:6c:7d:97:78:32:21:79:ad:15:33:
b5:32:31:95:4a:4b:18:bb:8c:73:20:7c:fe:f5:db:
89:c1:d1:c2:2c:a5:15:e3:05:a0:f6:5f:6d:21:ab:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:B7:97:00:12:BE:83:33:70:5F:31:B1:D5:F2:E3:76:D2:8A:F4
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1c:71:7e:15:2c:15:1f:a4:9b:db:40:0c:e2:cf:91:82:5f:
52:a4:52:33:c7:f8:f0:85:a3:0c:ce:f1:62:ca:3d:5d:58:12:
f1:c6:12:2d:ee:d4:b8:ef:84:18:ee:c8:d4:a0:d1:34:36:57:
93:88:71:79:56:fd:6f:df:a4:84:38:9f:73:59:cb:10:f3:f8:
c8:45:ea:bb:89:59:0b:22:0e:09:56:93:a9:26:53:f8:b2:3e:
5c:86:ed:e1:2f:5a:c7:8b:fe:0d:d2:8b:41:39:10:6f:e4:68:
2b:b6:7f:41:c8:d0:b4:cb:de:d0:4c:83:03:e9:74:0d:14:49:
a4:06:2c:0f:bb:ad:e0:20:cd:cd:57:13:50:d9:bc:d9:1e:aa:
57:a9:9a:14:be:49:af:1e:26:37:d6:b0:a3:c2:bc:ab:ab:95:
0f:c6:94:6b:03:50:f5:a2:17:47:2a:6e:3e:67:73:33:28:88:
21:bf:da:79:19:3d:e4:b5:53:ae:bb:20:26:06:bc:5c:fc:3a:
84:57:1d:da:10:be:b8:fb:d6:99:5a:2f:3e:2b:2c:51:f3:e9:
5d:06:04:e5:cc:42:4e:f3:03:39:a1:34:33:ec:ed:34:f0:ce:
69:e3:cd:bf:7e:84:93:59:f7:79:0e:4e:a9:07:47:a4:f6:47:
0c:74:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:21 2026 by rpki-client