Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: +PrRCpSWW3vNpHrfkmJ5AIa8PgeB2paJAR0xj+Ig2qg=
Subject key identifier: DC:6B:DD:A8:0B:35:F0:7C:41:8A:2A:4A:5F:39:75:F8:3C:86:12:64
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 01A0D94CFB314A56387935FA6BDCD9A36CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 03B0
Signing time: Fri 25 Sep 2026 16:01:35 +0000
Manifest this update: Fri 25 Sep 2026 16:01:35 +0000
Manifest next update: Sat 26 Sep 2026 16:01:35 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: kkeJFOSQo6vVPJFPiHhuHkzK08RGHzxRNoSFTFRy2no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:fb:31:4a:56:38:79:35:fa:6b:dc:d9:a3:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Sep 25 16:01:35 2026 GMT
Not After : Sep 26 16:01:35 2026 GMT
Subject: CN=dc6bdda80b35f07c418a2a4a5f3975f83c861264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:52:e3:e5:10:0c:10:5c:7e:c0:f3:f0:8b:
b9:08:c7:df:7d:f3:fd:08:e2:8e:61:55:80:36:c8:
fe:d6:04:cc:b3:f4:93:a9:27:65:40:e6:53:ad:c3:
2d:69:98:77:68:83:10:78:a5:46:20:2c:70:60:ec:
97:3c:61:4b:57:c8:43:4f:2b:da:46:55:dc:10:8c:
70:e7:ac:ad:5b:6c:8b:b0:29:12:eb:f0:5d:e5:61:
af:83:6b:61:41:e7:0e:b2:e8:39:cc:78:3e:e6:85:
be:62:f9:90:66:1e:1b:29:b7:cf:d3:6c:30:cc:b2:
ad:d6:f8:dd:67:d5:aa:f8:33:a7:7a:96:ac:a5:12:
43:00:c5:36:6d:b2:e1:24:ec:ea:06:a8:a3:9d:db:
9c:f6:29:ef:49:f2:0a:a2:3a:fe:54:7a:65:4d:4b:
d4:51:94:09:86:1a:ae:b3:a9:39:c1:1a:2d:0c:af:
49:23:2e:dc:e8:bf:42:6f:5e:35:30:66:f9:64:2e:
a0:a6:18:2f:a3:57:93:c0:ff:b6:59:77:43:cf:bf:
c0:5a:d6:45:d3:bd:0f:40:39:77:b4:2c:06:4e:33:
62:3b:e7:24:1b:31:54:ca:f6:df:d9:01:79:cb:f7:
cf:8d:de:27:a0:e0:7a:9d:41:5d:66:bb:5b:8a:f7:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:DD:A8:0B:35:F0:7C:41:8A:2A:4A:5F:39:75:F8:3C:86:12:64
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:40:f7:79:31:c4:8d:87:64:9a:84:d5:4e:c2:14:09:e6:bf:
91:80:65:86:33:8f:ff:17:35:3d:f4:98:d9:8c:86:d2:3b:dd:
b9:b8:75:28:4d:aa:fc:ac:10:33:a3:2c:2e:0e:b5:12:fb:bd:
1f:4d:bf:49:c5:77:7f:de:5c:7f:ab:71:86:46:ea:54:d5:05:
f9:13:40:41:f4:68:d0:ff:b1:05:1b:58:af:a1:24:32:46:18:
45:61:d6:48:44:5a:bd:63:57:0d:fb:21:25:35:6e:c9:f2:92:
e6:9e:e0:98:0d:9e:56:56:7e:1e:b9:d1:39:eb:26:6d:d3:47:
7a:23:ec:50:0b:2c:85:12:f3:f4:4e:56:a7:58:08:15:1f:ea:
06:b6:72:0f:20:83:7d:73:05:af:d4:f7:39:fc:b9:b1:10:cf:
7d:29:ae:48:03:ed:10:bd:21:1d:a8:9e:42:95:db:b1:85:1e:
8d:b2:d4:18:1c:ef:a2:0f:cc:48:61:b9:2a:f2:f4:e7:cd:7f:
88:98:0b:8b:36:a5:3f:9f:63:16:b5:ca:14:27:11:9e:ff:b3:
0d:eb:af:00:10:70:eb:1d:35:75:2a:30:d4:03:53:e2:dc:ce:
c2:be:e4:9b:c3:24:55:5f:6a:00:d5:90:29:d5:d0:0a:41:20:
98:f1:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:31:42 2026 by rpki-client