Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: 434WNkvyBp9Tt5O1ofRq1muwFVxFivT6RGBmSLkSlTM=
Subject key identifier: 63:9D:29:F6:9F:A9:BD:FB:DB:44:A1:5D:6D:09:48:52:DB:87:20:05
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019D292963CBDDBC3C40F46DF88F78F06521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 07E3
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: y8L8YVGCiY1Nrzx5/NBOfe0zPNHjyXZFc0MWEFhOhU4=)
2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:63:cb:dd:bc:3c:40:f4:6d:f8:8f:78:f0:65:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=639d29f69fa9bdfbdb44a15d6d094852db872005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:e9:73:75:54:e2:ba:1e:f5:78:44:80:7c:
6b:07:26:b1:f0:c8:f0:c4:98:1e:a4:1c:da:ed:fb:
94:d3:46:e4:86:7d:f6:c7:74:25:db:09:8c:3e:79:
66:cb:89:a4:61:b5:d6:7d:d7:95:5a:d0:c1:de:93:
15:a5:91:27:59:07:69:94:4b:23:ff:1e:2b:b7:53:
7b:66:8a:1c:62:58:fb:c3:6d:0c:9a:eb:4f:45:67:
17:8a:80:60:da:a5:05:2d:c1:50:59:26:3d:33:30:
50:27:7c:bc:16:3e:5d:5b:46:d8:e6:16:9c:8d:46:
2f:89:99:8d:c6:7f:6b:43:f8:f8:dd:9c:7c:8f:9c:
71:b6:2b:87:91:c1:51:4c:51:40:a7:9f:d0:a4:33:
b4:32:c0:c0:41:d4:cb:0d:98:f7:b8:3d:99:c4:3e:
ab:33:1b:55:0a:72:94:44:65:36:bd:1a:68:f3:87:
ea:8d:a5:57:8f:4e:fd:36:1b:89:82:b6:e1:4e:c0:
04:c2:c0:4f:72:13:e6:f9:0a:13:32:b7:93:59:28:
33:ae:cc:3b:5f:74:32:dd:c2:38:b8:c6:b0:0b:dc:
2d:ef:e5:64:50:14:2f:a2:c8:ff:1e:c5:2c:e0:d5:
49:25:16:c3:37:07:54:aa:ce:d5:81:04:26:39:c4:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:29:F6:9F:A9:BD:FB:DB:44:A1:5D:6D:09:48:52:DB:87:20:05
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b0:e1:bd:8a:1e:ce:62:9c:80:79:81:4d:54:fc:80:fe:66:
35:1d:ae:d1:84:5c:fa:11:0d:b1:09:a9:c2:38:ca:a9:a0:78:
6e:a1:d5:3f:35:33:48:54:27:51:8f:4d:ba:5f:4e:20:58:d7:
f4:c1:f6:17:dc:4d:79:7f:ba:c4:15:be:ea:91:d1:db:47:4f:
b5:e4:73:8f:ee:d7:80:16:2e:05:f4:e5:00:19:c8:45:15:80:
70:5d:10:18:a9:07:2c:9e:52:47:4c:1d:2a:13:a9:d5:36:da:
d6:3e:42:7f:22:5b:d6:b5:16:e8:cb:40:ca:93:55:1d:c0:ce:
0d:ec:24:4d:13:94:38:9d:9f:bb:b4:f9:c4:ed:99:c6:11:ee:
33:8d:62:84:50:17:da:86:2f:cc:15:fc:59:fc:9b:d3:69:81:
fd:c8:7d:6b:93:9a:02:4a:01:00:43:b3:dd:99:e8:bf:9b:02:
06:91:2b:13:75:f0:63:04:f6:a9:10:26:07:7f:5d:cb:8c:cd:
6d:3e:01:d7:8b:f1:bb:f1:b4:af:5e:52:f1:eb:26:1b:75:12:
f5:7a:74:f8:3a:4f:04:47:b6:40:92:78:eb:76:41:c7:5d:b6:
74:73:f4:32:0d:2c:d2:68:0b:0e:ae:41:6f:3b:0b:82:fe:39:
c6:4e:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:21 2026 by rpki-client