Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: VOaao4pJIQuRuWvtWXVIh9PalUcy1qbh0yUaNmAowSU=
Subject key identifier: B2:3B:E0:43:10:BC:89:A3:F7:4B:D9:CD:71:F6:5C:8C:60:8A:2A:34
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019CACB466B5CD33D004FCFA2E2B4A6B49EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 046A
Signing time: Mon 02 Mar 2026 04:00:29 +0000
Manifest this update: Mon 02 Mar 2026 04:00:29 +0000
Manifest next update: Tue 03 Mar 2026 04:00:29 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: r0mc2sQC9ZyEkNVEn5KVoBnXnWPGvI82m7ZTU6XAuTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:66:b5:cd:33:d0:04:fc:fa:2e:2b:4a:6b:49:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Mar 2 04:00:29 2026 GMT
Not After : Mar 3 04:00:29 2026 GMT
Subject: CN=b23be04310bc89a3f74bd9cd71f65c8c608a2a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:fd:cf:3a:8a:db:bd:eb:64:a3:8f:e0:70:
e1:ba:96:c4:73:15:25:36:e4:9f:4a:8e:78:cc:88:
d7:19:79:63:4e:82:39:4a:cd:1b:fd:46:38:2d:bc:
94:47:1e:0b:17:b9:d3:0e:0e:cb:b6:7f:00:03:49:
df:f1:4f:fc:01:65:72:73:79:f8:8c:fe:fe:3e:6c:
e5:dc:d3:a4:69:05:d1:63:84:46:f6:d5:2c:0e:e5:
79:28:87:49:63:86:d7:5f:33:56:6b:68:f1:3d:df:
86:4e:9e:69:93:b6:4b:bc:ae:c3:17:e8:17:a9:be:
ce:2b:41:db:c7:1f:05:cc:f6:52:fe:b7:63:bb:68:
fb:c9:d7:b2:b8:68:c6:59:49:b2:8a:7a:fa:c5:48:
17:ca:da:0a:d4:31:12:b2:60:2c:a3:c0:70:ee:60:
73:02:a1:d0:ec:1f:6a:31:51:b9:a5:19:85:34:d5:
b9:ed:8a:84:32:47:28:b0:0d:92:2d:a3:ff:dc:ba:
c7:28:a8:2f:af:7d:2a:3a:19:86:74:74:cc:b9:4f:
ce:a9:70:e1:5f:68:db:0f:ec:91:7a:c5:96:b2:a8:
eb:bb:df:44:39:1a:6e:73:4a:31:c8:9f:26:34:38:
1e:f8:93:03:ea:61:94:be:9f:5f:59:6c:54:1b:57:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3B:E0:43:10:BC:89:A3:F7:4B:D9:CD:71:F6:5C:8C:60:8A:2A:34
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7d:a7:d7:8d:3b:8d:b1:21:8f:28:9a:0d:21:50:84:e8:da:
78:6e:c1:0a:74:cb:83:35:ae:2b:17:44:c0:b1:2c:bc:b6:0b:
f3:dd:b6:fb:49:27:f2:aa:4e:94:17:cd:97:66:ab:cc:fa:09:
3f:5e:e2:ca:b6:23:1e:84:1f:59:56:ec:05:46:00:48:59:14:
60:04:3c:fe:69:b5:1a:4b:bd:16:8e:a0:77:d3:b6:ac:ea:0a:
91:0e:8b:cc:e3:61:a1:e3:b0:33:96:31:5b:36:16:31:a9:d5:
3e:65:79:8b:07:db:a2:04:ab:d5:87:41:47:a7:16:ca:13:09:
71:f9:7d:a6:fb:1b:8d:ad:ce:1f:b0:03:13:93:aa:ca:23:f9:
07:de:4d:56:02:d6:31:4c:7b:11:c6:34:34:75:32:c0:e8:f1:
58:77:43:4e:31:0d:60:b4:75:cf:41:20:98:bb:4f:13:50:02:
d0:3f:05:95:63:dc:fb:64:4d:6a:d8:54:32:0b:5d:c0:0b:4f:
16:12:c1:c3:24:4b:20:af:e4:17:17:54:c4:3a:6d:30:0b:e4:
d2:9a:b8:76:40:9b:2a:82:8d:f6:b1:20:1b:d0:59:ce:3c:2d:
f1:7e:4a:08:91:aa:d0:e4:1e:82:01:20:2a:ad:5b:40:2e:85:
62:65:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:17 2026 by rpki-client