Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: OjPjRm74JXfRHyhlPNK+5JV7Fxf7ZN/vDnILZmVotrg=
Subject key identifier: 43:E3:BB:91:BE:96:8F:F8:CC:1F:B9:4C:7D:B5:F4:9A:19:0B:D1:42
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019CAF7E8C5253D438EBDD92A1DC935E2AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 043E
Signing time: Mon 02 Mar 2026 17:00:32 +0000
Manifest this update: Mon 02 Mar 2026 17:00:32 +0000
Manifest next update: Tue 03 Mar 2026 17:00:32 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: 8ccfzNU19bwK0vYiIyyunpBgeOzR2osY8oHaOtSocNA=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:8c:52:53:d4:38:eb:dd:92:a1:dc:93:5e:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Mar 2 17:00:32 2026 GMT
Not After : Mar 3 17:00:32 2026 GMT
Subject: CN=43e3bb91be968ff8cc1fb94c7db5f49a190bd142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:a6:b3:1d:06:e1:9e:9c:a7:75:e8:5c:df:
be:6d:5c:56:dc:c6:33:9b:d5:6a:c1:19:63:15:75:
f9:f7:05:be:53:7d:1a:a7:ae:ba:96:ff:fe:86:f3:
6c:01:5a:ae:9e:12:55:58:6d:8b:f6:49:ff:e8:41:
11:d1:3c:1d:a5:d2:6a:0d:47:3a:60:ac:f4:91:a9:
2c:45:5c:d7:ed:0e:b9:43:08:9f:75:23:43:a9:2b:
54:2e:c6:fc:d6:f9:a1:c3:9b:f6:ce:2f:bc:a3:f4:
f9:0e:50:8c:30:dd:d0:e1:89:fa:56:27:d8:48:af:
4b:dc:a0:fb:78:cf:2a:10:dc:89:81:03:ad:47:69:
40:5c:90:e0:02:be:bb:7e:56:25:4e:ef:f0:85:15:
c7:a3:ca:0f:61:79:d9:59:f4:a6:17:d8:19:b2:4f:
65:72:2f:6e:b0:cc:29:af:5f:c3:c4:d5:5f:f4:50:
f8:f5:17:cf:1c:3e:cf:f9:1e:03:3b:99:3c:cb:06:
4f:0a:fe:22:1a:98:6f:af:59:5c:ef:86:e0:11:74:
e1:46:19:71:ee:d3:bb:3c:bc:28:24:d4:64:d1:16:
46:a0:e2:86:61:c8:9b:6f:c2:f4:e8:b0:69:a1:12:
20:2f:e2:cf:82:2e:b0:e9:f4:7a:e9:10:6b:08:9c:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:BB:91:BE:96:8F:F8:CC:1F:B9:4C:7D:B5:F4:9A:19:0B:D1:42
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:25:18:45:16:04:2b:45:af:9f:57:0f:14:64:b3:d9:a2:f8:
06:64:2c:de:e0:b1:b6:02:69:2a:1f:9d:0f:e6:00:2f:bd:54:
9a:6d:87:07:4f:09:bb:97:85:e6:87:77:0c:82:26:80:b7:30:
eb:c1:89:b6:ab:37:03:89:a4:fc:ab:2e:a8:a1:d9:1a:f1:fb:
f3:9c:62:ed:cb:3c:bc:d8:73:dd:92:08:56:41:bf:c8:2a:6c:
61:8f:85:97:91:e3:df:6f:69:4e:49:45:82:c9:3a:01:99:c4:
97:e7:f0:6d:c4:9d:bd:28:9b:9b:0e:eb:b4:19:a0:d5:54:71:
2f:83:25:6f:69:e0:dc:ce:45:24:46:cc:89:c0:3a:6c:20:1a:
4a:51:72:9e:ad:23:67:43:cb:56:55:7b:b0:80:0e:4b:da:ed:
7e:21:19:58:ff:3f:8c:61:2d:b0:14:48:b1:fc:de:62:12:37:
09:43:0c:d5:0c:f2:d3:ea:de:ad:25:86:b2:54:e9:ac:63:5b:
83:e7:0d:85:9d:a0:f1:55:43:bf:d8:89:13:d8:96:e6:dd:8d:
a0:ec:39:ca:40:fb:4a:4c:95:1e:1e:6f:af:d7:60:de:97:5d:
3d:73:e8:c5:d5:58:02:87:ea:dd:4b:07:d0:f0:cb:c8:13:e5:
d7:88:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:21 2026 by rpki-client