Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: Dmg5t7D6FlFTNzdYbTb93SI9/+iLyK/tDR7j9JSPDR8=
Subject key identifier: 1A:0C:9D:F2:63:B2:1E:A2:62:B9:1E:5B:6E:D2:3D:F9:1B:03:A2:B8
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019A50E28D0B3DA6FCAD313589067D33F7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0A3E
Signing time: Tue 04 Nov 2025 22:00:15 +0000
Manifest this update: Tue 04 Nov 2025 22:00:15 +0000
Manifest next update: Wed 05 Nov 2025 22:00:15 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: gheBibBlSuvjBvoRvSTqnrked7hURIAOJv9+OSIzCaA=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:8d:0b:3d:a6:fc:ad:31:35:89:06:7d:33:f7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Nov 4 22:00:15 2025 GMT
Not After : Nov 5 22:00:15 2025 GMT
Subject: CN=1a0c9df263b21ea262b91e5b6ed23df91b03a2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:b7:5b:90:db:44:a9:6f:c5:ee:8d:2b:05:
27:7f:90:34:27:8a:ef:62:97:87:0a:98:ce:03:61:
19:0f:89:07:a0:03:0b:4f:8b:be:a9:62:a1:ae:be:
c9:4e:5d:df:dc:a5:ac:23:ce:78:8c:ff:e1:14:88:
99:3e:db:50:a8:dc:49:5a:49:dd:85:e9:7f:23:b6:
b1:44:e2:60:56:3f:db:0f:ee:55:2e:48:43:09:59:
1a:25:e4:2a:06:34:fc:26:84:ca:94:10:e3:ee:d8:
6b:ce:b1:86:2b:d5:a6:bd:e9:ec:d9:78:46:fc:02:
11:22:bc:53:7f:17:f4:b5:5c:b2:8e:f3:90:65:aa:
81:7a:ba:cd:30:37:a9:38:2b:2e:9e:ab:ab:34:9f:
fc:15:f8:7a:1c:83:2b:a2:8d:75:1c:62:05:ca:7a:
93:0e:e0:a3:0e:da:64:eb:1d:e2:5a:af:74:0d:39:
70:17:1a:39:24:f2:73:7b:a0:a6:17:8d:5c:bc:62:
aa:09:c6:59:4c:ae:34:8d:a1:85:2f:91:8f:5f:f8:
ed:f2:f4:fc:57:06:be:b4:6e:4a:7d:02:95:e9:0c:
51:af:0e:c5:03:f5:57:89:3a:af:99:27:4e:71:ff:
32:8b:0f:6f:55:c2:ba:e9:46:2d:5e:17:52:a1:39:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:9D:F2:63:B2:1E:A2:62:B9:1E:5B:6E:D2:3D:F9:1B:03:A2:B8
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:f8:85:25:eb:3e:82:0a:c0:8b:47:35:f0:2e:8c:36:9e:
87:2c:af:97:8c:f1:2e:6a:16:0b:4e:dd:5f:d8:74:e9:cd:97:
ce:9f:6d:7d:7c:54:6e:81:19:6e:0d:04:fd:72:58:02:03:c4:
19:c7:39:67:fb:95:81:1d:4e:47:d1:ce:e0:f5:b0:c5:89:30:
dc:cf:95:6f:56:87:ff:6f:8d:30:25:6c:0f:3c:75:18:f5:52:
63:9d:47:0b:a8:0a:30:bf:2c:75:2f:e6:81:db:b3:69:ce:35:
5c:96:fb:c0:f1:58:b1:29:5f:39:38:21:53:eb:44:64:a1:fd:
57:8c:ee:48:d5:d2:24:99:74:dd:bc:3b:80:fe:88:e8:a4:d3:
a5:a9:cc:40:70:26:fb:50:d6:f2:96:3c:1b:65:72:76:40:b1:
f0:0a:cf:a7:3c:ca:65:42:ba:e4:92:1f:43:2e:a4:79:90:4a:
76:f4:c2:0a:28:93:31:69:df:d6:d9:0d:35:65:9c:9a:50:d2:
2a:da:48:52:66:75:42:24:29:8d:74:76:3c:86:a8:97:7a:e6:
e0:54:29:ef:f8:00:85:f1:dd:a5:50:65:48:8c:7d:a6:dd:74:
64:a7:fe:6a:a3:c4:91:3b:1f:13:06:ed:9b:74:5d:6f:b7:2c:
f5:27:7c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4o0LPab8rTE1iQZ9M/f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjUxMTA0MjIwMDE1WhcNMjUxMTA1MjIwMDE1WjAzMTEwLwYDVQQD
EygxYTBjOWRmMjYzYjIxZWEyNjJiOTFlNWI2ZWQyM2RmOTFiMDNhMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ+3W5DbRKlvxe6NKwUnf5A0J4rv
YpeHCpjOA2EZD4kHoAMLT4u+qWKhrr7JTl3f3KWsI854jP/hFIiZPttQqNxJWknd
hel/I7axROJgVj/bD+5VLkhDCVkaJeQqBjT8JoTKlBDj7thrzrGGK9Wmvens2XhG
/AIRIrxTfxf0tVyyjvOQZaqBerrNMDepOCsunqurNJ/8Ffh6HIMroo11HGIFynqT
DuCjDtpk6x3iWq90DTlwFxo5JPJze6CmF41cvGKqCcZZTK40jaGFL5GPX/jt8vT8
Vwa+tG5KfQKV6QxRrw7FA/VXiTqvmSdOcf8yiw9vVcK66UYtXhdSoTmjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoMnfJjsh6iYrkeW27SPfkbA6K4MB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqX4hSXr
PoIKwItHNfAujDaehyyvl4zxLmoWC07dX9h06c2Xzp9tfXxUboEZbg0E/XJYAgPE
Gcc5Z/uVgR1OR9HO4PWwxYkw3M+Vb1aH/2+NMCVsDzx1GPVSY51HC6gKML8sdS/m
gduzac41XJb7wPFYsSlfOTghU+tEZKH9V4zuSNXSJJl03bw7gP6I6KTTpanMQHAm
+1DW8pY8G2VydkCx8ArPpzzKZUK65JIfQy6keZBKdvTCCiiTMWnf1tkNNWWcmlDS
KtpIUmZ1QiQpjXR2PIaol3rm4FQp7/gAhfHdpVBlSIx9pt10ZKf+aqPEkTsfEwbt
m3Rdb7cs9Sd8ww==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:35 2025 by rpki-client