Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: a7v9DzJ37iXj+L68UGUGcAoYfhLSzUdzFHdUuqCk59A=
Subject key identifier: 55:C0:89:D3:A8:88:2B:D0:B8:DB:D6:40:3B:F8:8D:DF:A9:B2:1C:AE
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019CB023FDAF4A492D4BB472E634F9846675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 036E
Signing time: Mon 02 Mar 2026 20:01:14 +0000
Manifest this update: Mon 02 Mar 2026 20:01:14 +0000
Manifest next update: Tue 03 Mar 2026 20:01:14 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: 0w5EtP+uMNMBnKvp9Yafv+c+9Zs0heRxNWXnPt/L9bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:fd:af:4a:49:2d:4b:b4:72:e6:34:f9:84:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Mar 2 20:01:14 2026 GMT
Not After : Mar 3 20:01:14 2026 GMT
Subject: CN=55c089d3a8882bd0b8dbd6403bf88ddfa9b21cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bc:8c:c7:a8:f6:84:58:95:30:b3:d7:af:36:
2d:e6:7b:e7:38:1b:74:32:75:ba:af:17:e9:ee:40:
e0:98:8d:86:7e:44:1e:ba:54:f8:26:f1:c9:d1:eb:
08:c7:da:25:53:ea:39:2f:f6:73:93:97:a8:d7:61:
a3:ec:c1:32:b4:52:f1:68:5d:fd:1b:3e:7c:2d:2d:
26:71:15:96:d8:24:cc:0c:63:78:12:d2:2d:40:21:
af:c6:00:9f:f2:bb:86:95:6d:33:77:07:64:45:f0:
8c:60:9b:b2:92:93:76:6b:b2:fc:c4:fb:bb:1c:ce:
e8:7b:d2:09:66:6f:c8:8f:cf:e4:fe:7e:f0:c8:34:
44:6e:c9:56:9c:31:26:d3:fc:48:52:aa:4b:fe:fb:
24:2a:8d:ee:d8:31:5e:78:5c:e3:10:1d:e4:ff:dc:
4c:a0:2e:34:7e:4d:fe:8a:94:a3:2b:ae:e3:66:1d:
e4:3a:e4:78:3e:d1:f6:5b:e8:38:39:ab:3d:38:6c:
95:51:73:8c:44:f7:a7:64:3f:42:7d:fe:c3:94:e3:
b2:fc:2d:9f:91:ce:c6:39:50:fa:9c:a5:c1:00:92:
85:5e:69:25:4a:77:3f:63:80:2b:de:52:e3:9f:67:
9f:64:c4:8f:d0:60:24:6c:4f:c6:d0:fb:ba:36:85:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C0:89:D3:A8:88:2B:D0:B8:DB:D6:40:3B:F8:8D:DF:A9:B2:1C:AE
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:83:dc:b8:68:b2:ed:37:e5:bd:75:d7:9e:e5:a9:d3:78:26:
7d:33:09:27:cd:22:b0:ac:c1:f6:0b:ab:35:4c:e9:b5:01:4f:
22:9e:e1:81:6d:5c:a1:36:d5:72:59:3e:ef:7d:28:4f:25:db:
1e:82:27:7a:74:64:54:84:30:9a:b8:66:9a:36:9c:41:66:ed:
a8:4e:7b:13:aa:9a:69:5f:f1:6d:e0:42:9d:76:dc:5f:00:53:
df:36:bd:2a:cf:f6:52:fc:23:58:31:85:fe:16:3a:0e:91:2d:
27:f1:d0:e0:c3:94:44:46:f5:6b:bf:93:b4:7c:67:9c:77:ce:
1d:2b:00:d6:7c:68:1b:5c:41:13:0b:b7:6b:00:46:d9:b1:c2:
6d:d6:44:41:df:4e:0f:40:8a:75:33:f3:fc:48:85:5d:1b:99:
bc:c4:8c:10:16:9a:f9:c6:77:f5:62:f1:1b:31:2d:10:8a:41:
bf:f1:94:09:58:dc:b8:26:2d:a3:91:4e:e2:0a:a5:ad:ea:01:
28:c7:7d:2d:0f:3a:35:8c:90:79:60:0a:26:d1:18:76:b5:21:
8e:96:9f:a6:77:59:a6:74:a5:60:a8:4e:e2:33:3b:70:8e:54:
55:1e:37:7d:3a:8b:43:fb:a7:94:7a:7d:d2:5f:3d:24:16:6b:
47:07:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:19:45 2026 by rpki-client