Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: ZfADHl8AOPiJBwS+xUu1rga+XteUU3rwiQ7ABXzESiA=
Subject key identifier: 6C:F8:37:03:F8:4D:A9:A4:6D:29:1C:64:2D:F1:9D:AD:16:DA:D6:8D
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019FAABEE9C0AEFD13FB9EB9A9949886ADEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0D04
Signing time: Tue 28 Jul 2026 22:01:06 +0000
Manifest this update: Tue 28 Jul 2026 22:01:06 +0000
Manifest next update: Wed 29 Jul 2026 22:01:06 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: MlCkaCchnwGS7C4dgJtccWNqk9IeEY3xH8yBtCkKDKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:e9:c0:ae:fd:13:fb:9e:b9:a9:94:98:86:ad:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jul 28 22:01:06 2026 GMT
Not After : Jul 29 22:01:06 2026 GMT
Subject: CN=6cf83703f84da9a46d291c642df19dad16dad68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:e5:49:89:bd:a3:f9:8c:4e:42:ea:bf:51:
6f:77:fa:58:58:38:8b:0b:5a:6d:8c:5a:1d:e0:2c:
c1:b1:ed:21:cb:5f:7c:c0:59:f1:29:8f:a0:8c:3e:
01:c2:14:b5:cf:cd:25:53:f9:61:bf:dc:ce:bb:ae:
e4:fa:31:e5:14:47:86:63:52:54:bf:8e:d5:13:38:
5a:18:49:7a:28:75:40:aa:ad:83:00:11:6e:d4:61:
96:82:e6:6a:f8:18:39:b8:08:ab:c3:83:f7:6e:98:
10:8d:a8:a6:06:ba:85:f8:6d:b1:4b:07:d0:6a:78:
63:84:a3:7e:43:36:3b:8d:7c:08:7a:08:e4:59:3c:
9a:11:01:67:19:12:44:67:37:5c:5f:62:5c:78:97:
17:f5:18:6e:2a:5c:eb:9d:b7:fe:d5:13:3c:9a:49:
f7:50:42:ea:46:45:3d:e8:8f:16:fa:43:0d:e4:d4:
da:c0:b9:e1:9b:0a:4a:b0:96:a0:fa:74:6a:8c:c8:
d1:e8:46:e4:da:58:09:6f:6e:81:f3:29:80:d9:92:
8e:af:e5:cc:b3:d1:03:91:05:87:a4:6a:d1:76:70:
95:a6:d5:0b:24:ca:3b:03:2b:56:62:59:88:38:b9:
46:42:33:7a:83:42:a4:78:0c:a6:a4:8b:fc:67:5d:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:37:03:F8:4D:A9:A4:6D:29:1C:64:2D:F1:9D:AD:16:DA:D6:8D
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4c:7b:87:a7:78:1e:fb:5c:08:a1:99:e8:28:6e:0d:4f:96:
c4:f8:79:31:60:98:a5:c5:f6:de:03:85:ab:66:08:e7:dd:3c:
1a:b8:66:70:60:96:3c:a5:52:20:8c:bf:19:af:fc:5e:d4:9b:
a7:04:e6:8e:5c:0c:74:13:62:bd:10:65:9e:9f:9a:e4:04:12:
25:6e:ca:5d:f3:18:02:81:78:d6:9c:81:cb:31:6b:c3:3b:5f:
46:b3:cb:dd:06:8b:6c:b6:bb:85:d2:85:ed:da:55:59:56:9d:
e7:b7:6a:b2:86:3c:27:aa:64:56:a0:34:bb:43:37:00:58:6f:
b5:58:3d:97:59:d3:96:3c:8c:9a:4b:58:34:4e:86:cf:95:fa:
39:7c:3f:12:4c:60:9d:89:c6:76:4b:4e:b3:7a:21:d1:32:e1:
a7:2e:af:9a:9b:8d:0b:a5:de:1c:c5:d5:00:96:ab:56:65:3f:
86:73:57:48:3c:b8:81:7a:e1:2b:f2:b4:76:b5:32:56:d9:61:
70:c9:79:56:b8:91:2b:8f:1d:95:ca:47:62:a6:e5:0f:cd:f5:
ff:32:46:8c:f3:f1:c1:af:9d:8f:d7:34:01:e3:b1:b4:d8:90:
6a:4f:f2:49:3d:33:07:0b:7f:32:4c:9f:b9:88:a2:b1:eb:c5:
ac:73:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:20 2026 by rpki-client