Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: GLyKdSY+2OX2v2fxfbldOP97j2Kz6A1Qsq4J6Yhu4AA=
Subject key identifier: A4:F0:44:26:A5:FF:79:19:25:AC:6A:F0:8F:7A:66:DC:6B:E5:48:F5
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 019D27039CBBB6848B4F320D00025D5F50DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0EC6
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: gID17Odm9a3YbUHNUUjzsY72K9By7RoliQqpjYfSXpA=)
2: w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa (hash: fUMokcIKd3DOh6naOLFCtJpr9vVF9HoG1tnLSbQmKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9c:bb:b6:84:8b:4f:32:0d:00:02:5d:5f:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=a4f04426a5ff791925ac6af08f7a66dc6be548f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:91:e7:67:9a:04:61:9b:c4:ca:ff:59:e5:
55:93:f7:3d:2e:7c:e3:74:d1:90:82:bc:c0:7a:4e:
a0:07:bb:c6:49:a4:4f:8d:c9:d7:ea:f2:72:5f:19:
e0:96:13:fe:f4:5c:ac:da:31:fc:f1:79:4a:f3:2a:
b1:b8:66:90:b6:5c:d8:fe:e4:63:17:42:7d:0e:2b:
ed:f3:36:b1:55:ff:02:81:06:71:c6:d3:2a:ee:59:
af:58:6b:11:b6:7b:0f:7b:19:b9:5a:eb:d9:e4:45:
bf:5f:f3:d4:14:a9:a9:46:1a:a9:35:ef:32:b5:9f:
ed:ef:bb:34:c5:a4:30:04:00:6e:9d:ab:09:c5:a9:
21:d7:0b:09:c4:32:54:45:e0:cb:b9:d0:4b:76:62:
43:49:d7:a4:73:e9:20:68:5b:53:13:32:e1:6e:34:
4a:88:86:e8:0c:63:45:f8:5e:de:9a:a2:9e:cb:57:
b7:42:9b:b0:ef:20:26:6d:2a:28:87:fb:21:92:f7:
b6:d3:07:90:2e:65:5d:31:17:ec:96:4c:f6:e5:b1:
91:d0:fc:25:b8:2b:92:32:d6:1d:9f:d7:ef:c9:65:
8b:25:12:86:c5:c0:18:05:96:ce:61:5b:1d:d5:93:
00:11:eb:36:ca:61:f4:c6:2e:3f:54:02:3e:4b:0c:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F0:44:26:A5:FF:79:19:25:AC:6A:F0:8F:7A:66:DC:6B:E5:48:F5
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8b:fe:ef:40:11:99:08:76:2d:4e:52:b5:40:3a:39:4b:c5:
11:57:8b:9d:f0:24:35:80:7c:bf:3e:04:14:21:05:1e:53:c9:
ac:fc:5e:50:94:7c:20:ec:7b:dd:bb:be:e6:02:3a:62:39:81:
31:3c:79:c4:25:bb:1f:2f:69:65:19:19:12:90:87:13:5b:1b:
d4:f0:62:b1:24:1e:c9:8c:aa:ca:32:1f:8f:60:00:0b:24:f9:
77:61:e2:c6:d5:e6:6a:5e:63:1d:5b:17:11:8b:df:72:14:18:
72:3f:69:aa:c2:a2:f2:bf:73:e9:cb:ce:09:14:4c:e6:d4:a6:
5d:78:2c:46:e0:be:08:28:0c:9c:85:45:04:f7:59:8a:07:dd:
b2:45:04:0d:30:87:fa:a0:0e:aa:2d:77:bf:a0:cd:d2:dc:92:
e4:dd:88:c2:bc:ba:64:6c:8e:8f:31:88:60:7f:0d:8a:62:dc:
da:e1:15:82:3c:ff:25:80:88:45:82:e5:65:44:41:85:5f:a8:
d9:57:67:48:c5:1e:07:4a:80:81:bb:ac:69:c3:9d:39:b6:eb:
69:e2:de:b9:cd:12:97:1f:c2:c5:aa:a7:31:af:23:4c:98:6d:
00:0a:86:60:00:d4:80:da:f9:c1:9a:f5:ab:a5:b2:d6:e2:2e:
85:87:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:43 2026 by rpki-client