Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: 1xpZL0YIIb4j7ps85vUoRLc9JYBJ95y7sYRHBWgvRdo=
Subject key identifier: 95:58:D4:50:68:30:5C:4F:46:09:40:92:7E:E3:CC:C9:A3:86:6E:F0
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019CADC854F814FA69D41DD2DEE3F1A0175D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:01:53 +0000
Manifest this update: Mon 02 Mar 2026 09:01:53 +0000
Manifest next update: Tue 03 Mar 2026 09:01:53 +0000
Files and hashes: 1: 2qeXnV7d55wsyTxXPZhmXkTZqtI.roa (hash: N5i/RmZVF7k/2lLz1w31AlHZluiVFO2dv4zutOE7K+A=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: 5Ip0K/TVG+qCxz4ca9oB7EHXWzycwl+tGwtWa5FaC8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:54:f8:14:fa:69:d4:1d:d2:de:e3:f1:a0:17:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Mar 2 09:01:53 2026 GMT
Not After : Mar 3 09:01:53 2026 GMT
Subject: CN=9558d45068305c4f460940927ee3ccc9a3866ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:26:c1:d1:c7:63:2b:81:dd:12:a9:2e:46:
6c:de:9f:3d:10:b2:ec:6b:8b:26:83:fc:3b:88:fa:
2e:d8:25:84:19:11:21:05:93:7b:4c:b9:33:ac:e0:
2d:2b:37:bc:3f:b5:0e:11:3a:e1:c8:61:44:b4:5d:
52:08:fb:f4:9f:d8:b3:b8:39:a5:b4:76:98:96:dd:
5e:71:d0:3e:f1:48:69:98:4d:60:17:64:6e:08:cd:
37:7a:b1:c9:6b:fd:b8:ce:d6:1c:74:43:7c:56:5f:
aa:2c:b0:a1:cb:1d:7f:95:cf:5e:e6:6d:b0:54:74:
e0:49:c8:34:51:89:94:52:28:e7:90:ac:40:5b:5d:
73:99:4f:55:5e:1e:6d:31:eb:64:10:dd:fd:ee:64:
20:93:91:e1:21:4f:77:a8:84:3e:d6:eb:fa:9c:8a:
c3:da:11:82:ed:11:de:37:ac:7f:30:f3:ec:8e:de:
9c:52:0a:fb:3d:da:d6:df:d9:b7:f2:24:56:09:f6:
bf:6d:74:d0:46:c0:20:83:e9:a9:03:a0:fb:94:ac:
95:07:87:60:49:83:38:ae:05:37:f1:58:d6:15:8b:
1f:67:d2:3d:d4:f1:b7:a0:9c:79:33:72:b3:88:2d:
c0:c4:3d:81:ae:f8:be:66:52:73:f0:2e:05:bb:05:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:D4:50:68:30:5C:4F:46:09:40:92:7E:E3:CC:C9:A3:86:6E:F0
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:11:8f:ca:26:c0:ba:e9:89:66:a2:ef:fa:1a:e8:84:9d:
d3:cd:35:cc:97:8e:50:e3:b2:cf:b1:07:47:6a:5b:71:24:a8:
cb:2b:3e:c5:cf:95:a8:34:f0:e3:b6:b9:fa:e0:03:7f:d5:dd:
7f:f9:2f:7a:ab:1f:25:3a:f9:8a:6b:3f:88:cc:0f:1d:d0:1d:
a8:d2:b3:3c:7b:23:e7:ce:72:c7:ec:f7:3a:88:4e:09:3c:cc:
95:2f:96:46:8a:62:c9:2f:d8:80:ba:09:4b:0b:00:52:7f:38:
13:b6:47:cb:1b:5a:5d:99:29:c2:e4:7b:98:58:a5:dd:b4:af:
c3:14:c4:a9:1d:1e:f0:37:a3:7c:bc:d2:80:6c:00:99:b8:41:
44:95:95:cc:cd:9e:da:35:74:26:f2:f0:b8:6d:93:e4:a2:2a:
ce:24:a4:cc:88:dd:1d:ca:f8:76:73:be:45:49:24:30:ec:4a:
dc:de:49:99:7b:aa:b3:35:15:68:58:5e:d7:cd:77:cf:7c:09:
db:8a:95:5a:c4:32:76:95:e5:54:9e:8c:9f:43:26:77:47:bc:
1a:50:47:b3:8f:83:ad:2a:c0:c5:dd:82:58:50:c9:fa:b6:4f:
5f:e7:4e:75:97:de:43:5a:de:18:87:7c:68:71:15:38:0c:f1:
cb:b7:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:49:59 2026 by rpki-client