Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: hiv/GZ48U+ZOANFfBpZUWp8NoIu49dwbUKB6tKA+Pe4=
Subject key identifier: BF:6D:5F:F5:2D:5F:73:2E:C3:65:FB:EF:F9:60:CB:33:59:E4:85:7C
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019E1E6C30582DCACB103C2DE3A2DD8BCA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0862
Signing time: Tue 12 May 2026 23:01:07 +0000
Manifest this update: Tue 12 May 2026 23:01:07 +0000
Manifest next update: Wed 13 May 2026 23:01:07 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: nb81aY12lbIqEQL0xDmvsSrWCUPbM7ALNznRvImikSg=)
2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:30:58:2d:ca:cb:10:3c:2d:e3:a2:dd:8b:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: May 12 23:01:07 2026 GMT
Not After : May 13 23:01:07 2026 GMT
Subject: CN=bf6d5ff52d5f732ec365fbeff960cb3359e4857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:5a:75:3b:0b:2d:4e:c0:0e:fc:53:b4:88:
33:55:9e:46:75:c0:65:17:bc:d6:06:7b:31:52:0e:
70:9c:bf:73:82:d0:e6:14:c5:f7:1f:4c:15:17:e2:
1c:75:ca:80:0e:84:4c:50:b1:74:9c:21:63:00:2f:
a3:ac:d4:d5:f8:cb:ad:81:76:aa:cd:6a:fd:6c:55:
4a:d4:c3:24:76:0b:b2:77:ae:22:be:5a:00:be:8f:
8e:70:1c:27:93:83:67:cb:08:9e:72:d7:dd:18:df:
b1:9f:60:1b:ac:fe:19:a7:ba:f4:7f:ac:6e:c8:4e:
23:c2:27:f1:ab:da:b1:c6:f6:54:f1:56:a2:32:60:
12:85:39:0d:62:c2:db:2d:0a:fb:8b:91:4d:f8:ce:
ad:30:12:9b:34:3c:ee:b1:e0:e2:c9:1b:1e:5d:53:
f9:7b:28:71:01:2f:38:ad:d8:83:67:20:ae:6d:b3:
9b:dd:e1:7f:91:65:35:6f:a9:c1:f5:c7:3f:42:2d:
b0:72:87:88:57:2f:3b:45:23:89:28:c9:01:2c:3e:
29:aa:3e:b5:52:f3:b8:1f:45:e7:a5:de:95:b0:62:
82:77:39:f4:9d:c2:33:cd:60:78:81:11:6a:55:ad:
fb:da:f4:af:29:e6:4b:2f:92:60:0a:58:35:3c:8e:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:5F:F5:2D:5F:73:2E:C3:65:FB:EF:F9:60:CB:33:59:E4:85:7C
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:00:fb:33:8c:0f:7f:4c:2c:09:12:48:6d:77:0e:a6:eb:e2:
b0:a7:bd:c5:f9:68:85:45:83:d8:64:f2:6c:c4:e3:0a:8a:12:
da:05:99:5d:87:cb:c8:6a:8d:d1:1f:bb:03:cd:1e:ef:09:68:
0d:5a:1b:2d:d8:98:e6:1e:57:8f:d2:7b:95:4f:cb:45:2e:2d:
39:9f:76:94:94:12:2b:5d:bb:00:44:a9:34:28:f8:0d:76:82:
9f:57:01:d0:b5:88:29:d8:f5:fd:10:df:e9:6b:07:f2:a6:ae:
4f:94:19:45:be:ea:05:88:fc:da:6d:52:99:9d:a8:a2:c2:0a:
da:b0:82:9b:56:ee:59:c7:54:1a:0c:c6:cc:ba:cf:3a:53:69:
a2:4d:42:d7:cd:fb:b9:61:90:19:2b:26:89:a0:9f:13:9e:71:
86:be:57:88:5a:75:d7:61:52:ba:7a:00:37:2f:ca:e9:24:33:
35:88:0e:e5:6c:0d:3e:e3:6c:c6:7f:ba:6e:76:97:7a:3a:b3:
22:5f:75:cb:f2:8c:5d:ba:b5:b7:31:e0:3e:e9:ac:35:7f:25:
a3:91:3b:21:d5:e6:93:c6:4f:20:44:ee:45:c6:2c:18:5b:46:
0a:1c:d0:0d:20:0e:26:06:87:89:5b:3b:d8:bc:eb:90:7e:ba:
9c:92:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:08 2026 by rpki-client