Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: qFm9NyaYPcYtz+F9yYxrtR0bzrYNKrL5yjI33hkFeak=
Subject key identifier: DB:95:6E:D4:86:FD:D5:3B:6A:9A:2E:23:5E:7E:EB:1E:04:B8:05:2B
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 019CACB573D1EDE69B3B6B9999F696BFE385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 04:01:38 +0000
Manifest this update: Mon 02 Mar 2026 04:01:38 +0000
Manifest next update: Tue 03 Mar 2026 04:01:38 +0000
Files and hashes: 1: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: AezOLBanRRC7wZXuGKISaxCmIVF7xVisOYStGRTVOV0=)
2: yIldRRlB5bm94vmFwH-N8K1Rolk.roa (hash: aHVLfMmPkPo5z8uQwk9maqTl2LVG/IoG19YLPq/oNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:73:d1:ed:e6:9b:3b:6b:99:99:f6:96:bf:e3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Mar 2 04:01:38 2026 GMT
Not After : Mar 3 04:01:38 2026 GMT
Subject: CN=db956ed486fdd53b6a9a2e235e7eeb1e04b8052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:ef:fd:02:d5:24:c3:b7:da:f5:28:bb:bc:
13:69:dd:6f:7b:58:7a:a9:53:a5:2d:b4:f2:f7:f9:
43:12:ec:ae:84:23:c6:e8:bb:c5:94:b9:a1:59:a7:
27:fb:2f:0a:5d:e8:1c:49:39:fd:5e:86:a3:01:4a:
46:93:ca:45:f4:ed:70:7d:30:9a:ad:8a:fe:da:35:
9c:b6:0c:d2:eb:86:11:59:35:25:5a:d2:7f:13:5b:
da:a8:a2:0d:c6:29:b3:49:74:35:99:c2:ea:26:fe:
a1:e0:b6:a9:04:77:27:a2:c1:81:2e:ce:48:f6:e2:
8c:ab:69:73:38:0a:d1:eb:07:0d:de:c0:b8:57:57:
1b:03:b8:d8:c5:5a:35:1d:c8:28:24:b3:6b:7f:ea:
e1:ae:54:8f:71:67:a8:12:31:5e:21:58:ea:25:00:
fb:f4:a1:1d:74:ac:55:fc:41:24:3a:d7:16:d2:42:
b4:25:b7:a1:65:04:0f:94:a5:a9:ab:b2:73:1e:3e:
3a:c0:1e:1c:6b:cf:0e:7c:bc:48:1e:3b:ab:a7:90:
72:6b:74:35:5d:f6:1f:50:87:ec:54:c1:4f:9b:12:
22:dd:f3:35:02:ae:4a:7d:8b:18:35:1e:9b:0e:16:
a4:19:b7:96:94:4f:8e:a0:5c:63:9c:63:67:67:c7:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:6E:D4:86:FD:D5:3B:6A:9A:2E:23:5E:7E:EB:1E:04:B8:05:2B
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:36:01:24:c4:7a:d4:a4:08:d0:df:12:91:e3:a5:88:55:30:
bb:25:f2:f8:cc:2c:66:4e:38:28:9b:9f:ba:d9:32:28:98:8a:
e8:9a:3e:b6:b9:48:d5:73:7e:92:3a:46:6b:68:8c:72:7b:0d:
f5:3f:c0:f5:10:21:34:81:66:c1:05:6d:b2:cc:35:a1:05:56:
a7:8e:ef:38:24:ea:76:42:78:15:66:d1:67:c8:1f:c2:b7:e5:
05:86:69:19:7d:2e:6c:a6:65:d8:73:69:99:13:a7:3b:39:4b:
85:1c:99:03:c6:5c:68:0b:ca:84:f0:09:e1:11:e8:76:3c:4c:
7e:b5:9a:cc:77:c5:44:32:8d:92:3f:81:fc:8a:60:a7:78:26:
f7:b6:ca:26:a3:89:8b:01:e9:e6:cb:99:f5:dc:e9:11:16:8c:
99:e2:46:f3:c1:0f:3f:db:32:9a:b3:6d:53:b9:39:70:78:bd:
6a:49:5c:4a:07:97:4b:dc:a6:77:78:d9:60:f1:86:cd:0b:56:
bc:9b:66:df:6e:77:10:62:2d:fd:61:a4:5d:fb:23:c8:d9:2f:
16:37:64:bf:8b:33:5d:18:1c:43:2b:15:ec:f8:1c:47:fd:c3:
48:89:07:3f:2c:22:81:28:23:d3:ac:2b:08:9a:34:3e:aa:b7:
7c:c4:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:41 2026 by rpki-client