Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: IBl3AyXnykKhO/Bq02qC1KL7JkXIpVvS4Wc/odHeHXA=
Subject key identifier: 67:F6:DD:6B:A1:14:E0:E2:63:82:64:35:77:E2:85:8B:FC:82:DF:5E
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019D2A3C4FE94BEA94949E6955BB38C72F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 13:01:28 +0000
Manifest this update: Thu 26 Mar 2026 13:01:28 +0000
Manifest next update: Fri 27 Mar 2026 13:01:28 +0000
Files and hashes: 1: EhbDV-ZEobAKZPJC0NEd9rEnh3M.roa (hash: 8dSJ4V344uYPfv20kAYh7+/QdkqmIXoZCP2MoBXPCpg=)
2: Fkfx-G5QL9i_y4t8EzraGT25sro.roa (hash: Z3pIWqwQsVYBQFolUdVnXyqDy8vnTGDvbMN3ug4bHxw=)
3: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: 8o638No7QOfcbTRhrC9RgnHVIgLB3LGE8o3fUj7hdq8=)
4: m0NQBZ6XvTWPMiWsX0wTun30DiM.roa (hash: 7AzW8C0oi0Ht7xq3BopOUhvowxO30E+ewpFpqQ9MzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4f:e9:4b:ea:94:94:9e:69:55:bb:38:c7:2f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Mar 26 13:01:28 2026 GMT
Not After : Mar 27 13:01:28 2026 GMT
Subject: CN=67f6dd6ba114e0e26382643577e2858bfc82df5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:83:05:db:fb:f6:a9:a7:84:9a:a8:31:bc:
52:c6:1c:19:54:f5:6a:b2:5e:f7:dc:2b:11:d7:1d:
f5:fd:ef:80:36:b0:34:9a:3b:4a:6f:ff:96:ab:4d:
c0:3d:d5:ba:28:72:d6:bf:63:f2:6b:4b:c8:7b:0c:
4d:43:a4:fb:52:bb:33:a8:59:5d:fb:39:f9:f5:6b:
80:a3:60:dc:5b:19:4a:6d:d9:52:29:2d:94:36:cf:
4b:8f:31:60:0e:06:56:3d:9d:67:ce:ed:dd:0c:bb:
e6:fc:c7:6e:88:85:02:26:94:e8:4a:95:ae:91:9d:
b5:8a:a0:25:ca:69:ef:38:7b:c7:e8:cc:e1:e1:87:
76:f1:70:c8:72:8b:2c:bc:82:e6:94:38:3d:24:87:
da:c9:6b:97:35:39:4c:74:07:80:e7:10:5d:8f:f8:
a6:2e:f1:b2:b7:ba:85:f2:d3:29:c4:c6:7f:0b:ca:
30:e6:dc:ab:2b:22:73:2f:62:be:5d:7e:f5:c4:68:
d7:56:40:04:f2:82:25:46:d9:5b:5a:76:0d:60:a6:
a0:e6:41:2c:ae:51:8a:8d:fb:70:9b:ab:a4:cb:a1:
f7:30:c8:ee:96:54:73:5c:c4:63:0c:fa:8b:77:28:
cc:70:73:e8:7e:f8:9c:b5:5d:7e:b3:25:9f:b5:d9:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F6:DD:6B:A1:14:E0:E2:63:82:64:35:77:E2:85:8B:FC:82:DF:5E
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ec:a3:66:06:f8:1b:4b:1a:0f:5f:7d:40:96:93:16:39:3d:
41:79:c3:02:08:d5:76:d9:ad:99:ab:a1:14:32:5f:6c:f8:3e:
5e:71:c4:25:8e:06:5f:3e:ff:86:62:5d:b0:56:86:04:2b:f9:
23:73:87:ec:82:38:48:f8:94:a5:b8:0e:4d:21:7c:93:d3:e1:
6f:75:59:69:69:9d:3a:04:3a:1f:b9:ba:ff:b2:c3:7c:af:bb:
82:b2:97:b0:e9:8e:3c:e1:66:16:bf:44:17:04:e9:7d:d1:71:
0c:6b:d8:46:3a:53:2f:91:8d:76:f6:49:ad:ee:bc:b6:8c:61:
74:11:8e:e4:e8:59:28:9f:a1:b0:cc:37:34:ec:45:31:d3:ef:
6b:bc:b2:fb:53:48:4e:23:d5:4c:01:96:da:82:1d:49:d8:5f:
3c:04:dc:a3:b2:4e:c6:90:c2:97:1f:d7:0d:6d:2e:db:75:e2:
35:ac:8c:e8:68:3b:71:38:db:13:33:7f:64:ed:ee:8a:0a:de:
c3:3b:f0:18:82:31:66:6c:89:d6:73:9a:84:a5:6a:89:ff:8c:
d7:ad:92:73:6a:80:46:a4:79:bc:dd:35:86:a7:1c:1f:5d:e0:
5d:b0:27:44:14:5c:ba:8b:50:10:a2:e2:18:73:59:63:fc:60:
48:18:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:08 2026 by rpki-client