Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: ntmORgrqEaKTXgi7IEQyA5cALI6U+K8s6BfmMiVYkfY=
Subject key identifier: 7F:12:BD:78:B2:57:A2:08:D0:4D:B7:4A:A9:FD:9C:18:32:F1:4D:94
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 01A0DBDFDB513993EB51A3CFE7E9ED35849B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0DA2
Signing time: Sat 26 Sep 2026 04:01:15 +0000
Manifest this update: Sat 26 Sep 2026 04:01:15 +0000
Manifest next update: Sun 27 Sep 2026 04:01:15 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: LC7D1sXxWTLBgQCAmAQmZFDlw1CUCV0pcMCYAOBA4mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:db:51:39:93:eb:51:a3:cf:e7:e9:ed:35:84:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Sep 26 04:01:15 2026 GMT
Not After : Sep 27 04:01:15 2026 GMT
Subject: CN=7f12bd78b257a208d04db74aa9fd9c1832f14d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:b5:51:ed:e7:51:1b:41:55:a5:97:68:b9:
85:2c:48:f5:84:e3:ab:2f:dc:1e:fe:b3:29:ce:93:
13:10:30:1d:4e:ab:b2:82:05:61:5e:33:5d:f2:a9:
a5:82:1d:98:02:b8:1b:16:28:56:d4:f4:0e:9c:5e:
be:17:69:18:9c:55:57:29:10:8c:98:79:ff:23:ce:
bb:9d:3c:18:9a:f0:55:b5:dc:12:30:20:c5:c2:f6:
d5:30:90:59:39:1f:ac:b4:0b:b4:e9:ab:2e:24:86:
46:4a:e0:49:61:69:ae:fe:92:8f:5e:35:b0:8c:25:
f9:31:5e:b5:9e:a9:d3:53:6e:7c:1f:b9:42:7d:b2:
37:c2:53:61:31:c0:bb:3d:b1:1a:6b:f2:38:c6:4c:
76:f2:a0:69:8b:d6:af:7f:35:6e:1e:72:c3:93:c0:
bb:a3:e1:a9:aa:63:d3:54:8e:71:7b:d0:45:ef:08:
ca:fb:54:09:3b:51:20:d6:31:71:72:4e:ea:a0:3a:
e8:17:3f:3a:aa:f4:ce:14:83:25:fb:56:49:66:3f:
57:b8:ae:de:4e:fb:4b:09:ec:d6:98:7e:47:12:b1:
77:42:93:e8:34:50:db:c9:73:76:62:7b:b2:06:2d:
a7:30:a3:4a:1d:04:36:4a:4d:88:1c:6a:bb:16:56:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:BD:78:B2:57:A2:08:D0:4D:B7:4A:A9:FD:9C:18:32:F1:4D:94
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:15:9c:03:f9:e3:66:71:d5:23:79:e5:da:ec:d0:ec:99:e6:
24:b5:71:1d:c6:30:be:a1:84:da:d8:1b:f6:1b:6e:22:df:2a:
78:70:8f:46:6a:a2:f5:01:bc:11:ad:5f:3a:f6:a3:f9:66:c6:
6b:1c:aa:7f:78:b9:16:56:3e:42:cc:0c:4e:e3:5a:ad:3e:78:
4e:6c:55:f7:26:19:b3:c6:60:b8:0f:99:01:60:24:ff:c5:2f:
c0:f1:30:25:a8:78:b9:03:c4:bd:8e:86:ac:d1:ae:41:94:5a:
a0:cb:d1:83:82:31:47:e2:72:c5:ea:1e:cc:5b:41:d8:4a:18:
02:86:67:8f:32:55:70:e0:53:b0:7e:a6:51:77:ff:1d:c2:49:
f7:6c:a5:7e:f6:f1:70:70:e9:f0:c4:69:5d:0c:45:39:f9:7b:
c2:87:f5:44:0c:7d:9d:3a:a0:0b:c1:4b:1b:f1:3c:41:3a:45:
54:ca:13:a6:90:c1:fc:24:8b:f3:05:ac:2f:39:32:d6:f6:ee:
3a:aa:e8:e2:b9:a5:6e:22:df:eb:24:d8:24:9a:58:7e:91:a9:
78:6d:ff:8e:65:a0:bf:e5:d1:52:3d:6c:3c:26:e4:89:3d:a6:
40:ab:b9:ce:4b:f4:06:58:93:1c:00:6a:5f:3a:ac:4c:1b:74:
7c:0c:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:34 2026 by rpki-client