Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: +5vfJHrbiQMt7q9/jVqkRd45KSGzqksXGsHyB8bB/7I=
Subject key identifier: 49:43:55:91:B0:D9:66:09:7C:DA:CA:F2:BF:E8:DA:1F:56:4E:EB:F0
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 019D28BBAA194C734E0D616100F4AD78ED12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 110A
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: 5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa (hash: CM2yuZbmUG7aD/W6YESLWl+Ll1dOOpDPDyQg/E7d6L8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: 2LA9GQEgNWvgfHCjL2vBbE6LZe6h7zfiU+tZkRh/KcU=)
3: OXINEPIBnVaglpO2WDs_RqIzbkc.roa (hash: aSnB+0+0CnA11ivltYbXw+kEcjRN69vsEQ+sqlBivaA=)
4: PSJHF0T7csTccKL_3bcCSL4cmds.roa (hash: gSWHMoNkvXzeD2od1079ScFl5g/lvv5imGebCIsGgDs=)
5: WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa (hash: 8G8cCnlz9tk6XzMq2zPRRygvIM2OH91XUUZ803rheUU=)
6: jBtjySCq2ld1Ntg6smiqyHDsdNs.roa (hash: zVyG6ZDReg9r2lMt4sCY0P5PMeh7pF+y9sNnS21ueDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:19:4c:73:4e:0d:61:61:00:f4:ad:78:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=49435591b0d966097cdacaf2bfe8da1f564eebf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:b6:e4:e8:14:4a:80:7f:5e:14:c2:37:60:
71:d9:82:99:ce:2e:e7:87:23:9c:51:c6:53:0a:a5:
9f:e2:b1:81:27:68:a9:58:90:49:8b:32:97:28:dd:
56:07:e4:b9:31:01:48:b9:64:20:fa:00:ad:7a:d9:
85:0a:05:d6:68:b4:7e:23:8e:df:cd:14:a7:bd:5f:
bd:9f:cf:28:15:f5:25:18:73:bb:b0:d9:e7:ad:73:
4d:3d:fc:59:ec:66:df:40:6b:40:a5:d1:4a:ba:9a:
12:cc:f3:31:46:2c:ff:7a:b7:19:bf:c7:9b:ee:7c:
91:1b:c0:bb:8b:45:59:ab:b8:15:c1:ca:89:e4:ab:
13:dd:b8:5c:df:08:6a:3b:29:97:ad:81:67:1e:a4:
c9:78:8c:a6:71:e0:f4:2a:6b:42:1c:65:4c:c4:a2:
87:92:cd:4e:6c:fb:11:ce:97:68:8a:ea:d4:3d:de:
6d:66:86:81:0e:f2:8d:d2:82:f8:62:ae:2f:35:8a:
8d:99:af:db:2a:72:7e:36:00:06:bf:c6:75:3c:40:
9e:a8:e9:0e:ac:9c:e5:ad:56:45:76:52:8f:81:aa:
7c:d2:60:df:31:56:4c:20:61:a0:db:20:fa:81:b0:
13:f5:cd:85:92:a8:56:ba:33:90:0a:ee:95:3f:88:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:55:91:B0:D9:66:09:7C:DA:CA:F2:BF:E8:DA:1F:56:4E:EB:F0
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:a6:15:99:b2:ef:11:93:ad:01:47:cf:02:ee:02:ba:f8:
36:3f:7c:99:27:e8:d7:6e:e7:99:53:a9:47:04:2c:6b:63:d9:
6f:21:0f:33:fe:2d:c6:63:69:7c:c6:55:85:c0:34:ed:a3:ae:
f7:fa:c7:d8:16:97:6d:a1:78:48:c7:15:8c:41:93:d4:38:93:
24:58:82:01:34:3f:34:01:29:5b:94:e5:01:9c:6f:39:bc:b7:
94:86:2d:9f:d3:3d:52:f2:2b:6e:10:63:17:79:ea:43:81:32:
26:51:4d:28:c5:16:7b:01:8b:ab:0a:72:15:df:f9:71:75:ed:
69:aa:70:0d:87:49:00:ea:87:e6:c4:94:67:fc:b7:1a:e0:48:
83:dc:a0:dc:c3:63:76:00:d1:13:8c:08:66:25:38:3b:b5:94:
70:2f:a0:ff:63:ab:7f:17:20:ce:e3:5a:50:fc:9c:24:88:ab:
1d:6d:e1:23:ed:d4:4e:09:1d:d6:bb:3c:2e:1a:e2:56:f3:26:
b7:03:f7:90:d2:5f:87:fb:b2:54:ec:e6:bc:9f:0b:7d:79:cf:
12:dd:ea:b3:ad:ab:3c:54:5b:de:90:28:65:05:58:7c:6b:d4:
67:07:2f:9a:d0:2e:10:b6:94:63:2f:2d:13:24:d3:7c:81:d5:
97:08:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:12 2026 by rpki-client