Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: U63TJ91PJU3XJxE1uqhMKYn2JpRqeDZmc/Xsi5RMEvQ=
Subject key identifier: AC:88:A5:82:F2:16:E0:68:3A:C3:CE:7B:96:0F:DA:57:4B:E5:EB:04
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019CAC10172F5C8B09A5787B764D84F788AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0B77
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=)
2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: fDijYlwCgB2jK7+xQwHfvdW0fNme5CeGkRrvaYlJQpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:17:2f:5c:8b:09:a5:78:7b:76:4d:84:f7:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=ac88a582f216e0683ac3ce7b960fda574be5eb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:53:cc:ed:5b:36:87:67:00:79:93:cb:a6:
e8:b5:fc:0e:5e:61:ac:cb:15:cd:e1:c3:09:86:1f:
dd:9e:f7:10:b4:4e:9f:e7:8c:44:b5:4c:7e:6b:43:
98:b4:ef:09:a4:c1:0f:4a:6b:18:18:aa:b3:ce:9d:
43:e6:49:54:3d:e1:da:07:45:50:66:36:9f:b3:21:
d5:58:e9:4a:3d:d6:46:09:ac:38:6d:05:f7:33:20:
74:df:9f:2b:1d:3c:68:89:bb:2e:4b:ea:fb:2b:51:
4c:4e:d2:28:64:52:d2:75:ea:d1:ad:73:65:38:d0:
a3:2f:07:2f:5b:c1:67:c6:bd:1a:93:7d:87:4e:ca:
8f:d6:b3:1c:f0:b3:be:b8:a0:5a:56:ae:bd:24:47:
d3:f5:6a:b2:f8:66:7f:e0:5d:43:71:ca:7a:5a:c2:
10:a4:ba:77:98:89:24:52:e8:37:ce:17:eb:cc:fe:
7d:be:ab:0a:bd:c8:01:1c:a4:24:91:4b:44:21:0a:
a8:e9:c7:5f:c4:10:b4:0c:5f:ff:42:4e:a9:15:5d:
00:6e:a1:7d:7b:1f:ff:e3:4b:f0:0c:c2:69:1e:dd:
96:35:98:44:af:03:1d:e4:d4:34:9b:65:a4:06:f8:
63:ca:a6:f2:a3:f5:51:03:53:34:69:3e:7a:bd:69:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:A5:82:F2:16:E0:68:3A:C3:CE:7B:96:0F:DA:57:4B:E5:EB:04
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:73:03:e0:7f:c1:f0:04:e1:52:4b:24:f3:a7:20:a2:89:57:
96:57:4a:0a:0d:74:c7:c2:85:3a:2f:98:ca:f5:e3:da:bf:da:
2d:e9:ec:99:f8:96:8a:a3:57:e8:9a:05:a8:5c:ce:5e:de:8f:
67:fe:da:f3:47:a6:68:ee:95:b2:82:63:0c:98:2c:15:8d:f4:
98:50:01:64:64:e2:36:f9:c6:1c:df:83:52:9c:9d:ae:ce:19:
4a:c5:4d:f1:ae:b3:57:8c:6d:1e:13:21:49:6e:74:5c:4d:4d:
98:9b:2e:5d:48:fc:61:3a:71:28:b1:7c:52:4c:44:68:c1:54:
f0:1b:6e:42:22:7b:65:33:7f:58:6d:13:28:9f:55:70:17:97:
12:3f:18:31:1e:33:86:58:2e:33:7b:01:fb:67:04:9b:c9:5e:
fc:e9:af:6b:8a:42:90:60:e3:ca:dd:90:51:83:17:74:cf:e3:
c9:72:fa:73:83:be:ff:bb:5e:23:b9:6e:77:ed:dc:ee:fd:23:
dc:78:0a:ba:a7:e4:a6:8e:8b:0f:3c:2c:08:2a:58:3c:41:65:
af:38:ef:79:56:9d:a8:ef:1f:2f:35:29:64:4c:e9:cd:43:44:
7f:84:ea:75:b9:dd:4f:41:a0:e8:64:f8:a6:6b:f0:d3:68:12:
9a:23:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:45 2026 by rpki-client