Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: 7doMXOyi3tYkhkZyAHNB96pYnSvxk57lKestW2uiZsw=
Subject key identifier: 70:43:7C:94:23:D5:00:5C:07:C1:47:6A:9B:7F:47:35:4E:FA:40:60
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019CABA220AD4C0DCBEC99F42DAAB4BC7297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa (hash: R0V6ZIQY2hcuRRo+byPK6DVVEuSr1ojs/WwAjiQIcr8=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: O/4TNd4Vzt4iS7sUCDAlE6deiEyh3mAQrbeXrQHL38Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:20:ad:4c:0d:cb:ec:99:f4:2d:aa:b4:bc:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=70437c9423d5005c07c1476a9b7f47354efa4060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:20:61:09:80:bc:bd:45:a6:50:a3:57:f1:
50:cb:af:b4:9c:a7:e1:81:bb:e7:fa:6d:86:7e:72:
95:af:b0:4a:ec:ed:a4:21:4e:09:54:87:33:08:b9:
b7:14:5e:98:15:ff:ff:fe:1f:db:24:59:83:f2:c3:
d3:d8:2f:47:f1:4e:b2:5e:f9:d1:94:f2:55:0e:e1:
ae:dd:36:55:c9:24:ea:e3:b7:47:d3:2c:6f:c5:f6:
b7:73:f6:7e:82:08:b6:b9:9a:fd:12:91:a3:20:1f:
1b:00:33:eb:15:0c:7e:7a:25:f5:6d:13:65:29:78:
08:32:5d:50:a1:67:78:c8:39:01:0e:70:cf:18:db:
42:cd:46:79:9f:27:20:8a:28:8b:c7:45:79:3b:bb:
af:8b:76:ca:2a:c7:2b:fd:74:37:0b:d3:be:60:16:
46:64:44:e7:a4:c8:40:d1:48:05:0b:77:eb:d6:6c:
8b:82:19:9c:b7:71:5d:5e:a6:e6:bb:eb:c2:63:70:
a9:44:f3:4f:08:16:15:5a:f9:21:38:c9:07:dc:cc:
91:d0:2b:1b:c9:62:5c:9e:17:f3:21:93:6f:7d:0d:
e0:25:2f:5b:51:80:4b:d9:2c:ca:ef:cd:01:54:3b:
2a:eb:05:14:04:66:06:eb:6c:13:6f:f2:1d:1e:6e:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:7C:94:23:D5:00:5C:07:C1:47:6A:9B:7F:47:35:4E:FA:40:60
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:57:5e:82:9d:f1:91:38:de:15:d2:c7:6b:97:a4:e8:de:c3:
80:94:f1:3b:3f:eb:e4:86:79:49:85:02:e8:92:52:1b:5e:bd:
6d:3e:bb:18:33:50:9f:38:4c:c7:d3:9c:04:90:2f:e2:af:5e:
8c:15:b7:54:6c:e4:9b:1d:6f:10:d9:65:d7:40:14:9b:fe:1f:
a2:1c:1e:ef:e6:6b:ce:a5:10:2b:cd:36:10:79:ed:00:11:fe:
14:54:45:31:e1:07:63:f0:61:c6:35:94:15:ed:bc:99:3e:e5:
97:d5:64:c9:7a:15:50:51:eb:e6:b1:7b:51:1c:7b:10:f7:61:
a7:f8:10:42:fc:64:0a:bf:68:9e:aa:b9:33:76:ca:cb:4a:ba:
f9:5f:2a:de:83:1a:18:e3:2c:d2:24:80:f4:6a:2a:d6:23:01:
a7:c4:3c:81:6a:a2:0a:2c:57:bf:fa:0d:1e:9b:21:0e:55:c0:
de:82:a5:52:7a:22:9b:e4:7b:98:88:ef:24:2e:a5:0b:09:50:
37:94:09:b8:f7:91:7c:20:f7:9d:38:91:68:45:5d:8b:ff:10:
34:0e:9c:8d:58:ca:ac:da:91:32:b6:20:8b:37:0c:8a:c5:43:
ba:ac:21:6d:b7:10:1e:6d:1c:cc:5a:6e:e8:0c:17:e3:a1:a4:
6b:bf:f3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroiCtTA3L7Jn0Laq0vHKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjYwMzAxMjMwMDU0WhcNMjYwMzAyMjMwMDU0WjAzMTEwLwYDVQQD
Eyg3MDQzN2M5NDIzZDUwMDVjMDdjMTQ3NmE5YjdmNDczNTRlZmE0MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ysgYQmAvL1FplCjV/FQy6+0nKfh
gbvn+m2GfnKVr7BK7O2kIU4JVIczCLm3FF6YFf///h/bJFmD8sPT2C9H8U6yXvnR
lPJVDuGu3TZVySTq47dH0yxvxfa3c/Z+ggi2uZr9EpGjIB8bADPrFQx+eiX1bRNl
KXgIMl1QoWd4yDkBDnDPGNtCzUZ5nycgiiiLx0V5O7uvi3bKKscr/XQ3C9O+YBZG
ZETnpMhA0UgFC3fr1myLghmct3FdXqbmu+vCY3CpRPNPCBYVWvkhOMkH3MyR0Csb
yWJcnhfzIZNvfQ3gJS9bUYBL2SzK780BVDsq6wUUBGYG62wTb/IdHm7W/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBDfJQj1QBcB8FHapt/RzVO+kBgMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1degp3x
kTjeFdLHa5ek6N7DgJTxOz/r5IZ5SYUC6JJSG169bT67GDNQnzhMx9OcBJAv4q9e
jBW3VGzkmx1vENll10AUm/4fohwe7+ZrzqUQK802EHntABH+FFRFMeEHY/BhxjWU
Fe28mT7ll9VkyXoVUFHr5rF7URx7EPdhp/gQQvxkCr9onqq5M3bKy0q6+V8q3oMa
GOMs0iSA9Goq1iMBp8Q8gWqiCixXv/oNHpshDlXA3oKlUnoim+R7mIjvJC6lCwlQ
N5QJuPeRfCD3nTiRaEVdi/8QNA6cjVjKrNqRMrYgizcMisVDuqwhbbcQHm0czFpu
6AwX46Gka7/zNw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:55 2026 by rpki-client