Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: W21FOd+9LuNjVeflKVcKio+tw6tSjfw8soBiw+hbbMs=
Subject key identifier: D0:80:62:AA:D6:86:3A:45:84:86:7C:0D:84:27:CD:A6:FC:36:08:C4
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019CADFE2E5B1881F9ECB8E207800E561CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 0A0F
Signing time: Mon 02 Mar 2026 10:00:42 +0000
Manifest this update: Mon 02 Mar 2026 10:00:42 +0000
Manifest next update: Tue 03 Mar 2026 10:00:42 +0000
Files and hashes: 1: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: 3+Rijwp7B8Tq4+S3xUQDgy9AaurbQwGRIxDHjUFwkME=)
2: njOWzyw6BPbysiyLRcVX59-q4hc.roa (hash: vhZ8qAXL4RUIeajsso+zjNGjDXDgCoWsrZSWesPHRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:2e:5b:18:81:f9:ec:b8:e2:07:80:0e:56:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Mar 2 10:00:42 2026 GMT
Not After : Mar 3 10:00:42 2026 GMT
Subject: CN=d08062aad6863a4584867c0d8427cda6fc3608c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:04:5f:f7:a4:37:2e:d2:66:b5:e6:5f:6e:
ff:b1:13:9f:c3:d0:d9:e8:53:13:a9:75:44:fd:28:
9f:c8:c1:7f:af:88:00:4b:a3:7a:8a:9c:ac:8f:47:
6d:2b:29:15:38:2f:ee:31:c7:fc:4a:e9:7d:32:62:
41:cb:2a:93:41:cf:b3:85:00:91:a9:5b:28:0a:a5:
39:19:86:41:5c:8c:b1:9b:95:87:17:fb:49:dc:fd:
11:3f:f2:9e:1c:94:e3:a1:18:8b:f1:8e:9b:df:e5:
b8:29:62:83:05:62:03:83:c2:5b:72:14:37:53:c7:
a4:0e:48:43:a7:05:ac:27:79:a6:1a:34:f2:59:74:
c3:b9:8e:1a:2f:39:a1:24:22:c3:22:5a:5d:55:f0:
06:40:4a:61:52:5a:20:e1:9e:71:a9:73:b7:17:6c:
53:53:1e:13:7a:b0:38:b4:45:ee:91:f7:d4:cf:e0:
a4:cd:bc:c0:f0:5e:8a:b8:e1:3e:a9:bb:65:be:07:
37:97:e6:2b:e5:6e:29:a4:21:31:3a:4c:20:be:30:
83:ad:10:22:96:2a:84:95:87:4b:59:74:4d:33:f9:
45:59:6a:e2:ef:a9:27:96:1f:46:b8:08:ef:bd:2a:
5c:7e:bf:af:06:f0:3a:19:53:eb:06:6a:4b:b9:23:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:62:AA:D6:86:3A:45:84:86:7C:0D:84:27:CD:A6:FC:36:08:C4
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:71:96:af:ad:4b:68:d0:1c:e7:8f:d3:70:1d:5f:41:66:
87:15:aa:03:d9:5c:86:e1:13:82:97:a4:0e:8b:c5:5b:69:50:
a8:9f:17:97:64:36:6e:6e:2f:bb:77:34:f9:77:e8:b3:a7:13:
f0:06:7c:67:47:de:60:bc:d8:bb:0e:cd:96:5d:71:5f:77:27:
ef:5b:ed:3a:af:bd:94:b0:2f:61:bd:a1:a9:2e:21:28:11:68:
20:c1:f0:3f:2f:38:f0:35:35:ea:10:2d:1a:a8:d7:9d:a4:b0:
53:05:fa:44:a0:c1:a5:48:bc:8d:0a:fc:79:16:ca:a1:bd:91:
03:25:50:1d:b6:0f:97:38:71:4b:af:24:be:82:c9:08:62:3e:
c2:99:59:2c:6e:08:26:df:17:96:fc:46:f9:c3:9e:a6:f9:b2:
f7:4f:aa:9a:17:81:e3:77:78:10:47:6b:6d:f4:38:48:66:92:
02:2a:4d:a7:d9:67:a2:44:1c:a0:41:58:a2:8a:25:af:cc:f2:
18:7f:da:54:98:89:e1:e0:e6:5b:ed:77:09:31:f6:e8:5d:ee:
b9:19:f2:a7:39:e6:88:34:7a:ba:dd:bd:3f:4d:7f:b8:4e:b4:
1a:2d:3d:35:4d:59:f3:3f:83:50:4b:ff:fb:06:03:d4:8b:b5:
75:34:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:55 2026 by rpki-client