Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: kCGaboSEW8yGWbTtkFnILmXm1rqp0iSk4jV3NnSuh1E=
Subject key identifier: 2C:FE:C5:43:5F:C5:6C:B7:F3:10:81:C6:6A:60:E2:B6:BF:0D:3F:CB
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 019D2B4E7A48C33D47B08C4C16046D78E5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 0E4A
Signing time: Thu 26 Mar 2026 18:00:56 +0000
Manifest this update: Thu 26 Mar 2026 18:00:56 +0000
Manifest next update: Fri 27 Mar 2026 18:00:56 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: LOXsJ3GIXwtt7TMom2inoSIL9qMGEJ2lhVpC62bJgLU=)
2: lr150d2XGILiqF-TQMwRxqDTm5w.roa (hash: swf9GzpHqLFrOjJ0Syj99F4hF6OOAJag78U+mc9YBAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:7a:48:c3:3d:47:b0:8c:4c:16:04:6d:78:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Mar 26 18:00:56 2026 GMT
Not After : Mar 27 18:00:56 2026 GMT
Subject: CN=2cfec5435fc56cb7f31081c66a60e2b6bf0d3fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:ef:76:07:58:2e:94:6e:d5:0c:f7:94:d3:
b1:66:8d:d1:22:20:e1:ce:9d:4e:a6:69:bb:17:bc:
e0:51:65:18:cf:7b:91:de:27:3f:6b:02:d9:6c:2c:
ee:42:0a:a3:84:2b:81:06:bf:07:8a:f4:45:36:42:
fd:21:51:71:01:20:24:6c:d7:cd:66:11:70:cc:b6:
79:b6:57:f0:04:ca:a8:3d:53:97:a7:0e:95:b8:f3:
d4:2c:36:7e:72:a5:3d:29:56:65:39:44:e8:4d:2c:
7a:fc:c2:7f:be:57:4e:47:23:48:17:69:9e:a2:56:
38:55:78:46:4b:bd:c6:58:62:4c:1d:fe:28:b9:f7:
28:7a:9f:35:80:9a:49:b0:b4:98:3a:e9:6e:97:b2:
29:11:8c:e5:cc:64:bd:78:1f:24:dc:c4:de:df:1f:
2e:15:d3:d6:a0:bd:c6:4a:7d:e6:b7:c2:41:e4:ac:
b2:82:b7:74:8f:11:f1:ca:ad:34:1f:ba:b2:69:df:
1c:a0:ab:9d:bd:1c:3c:70:83:cf:25:da:96:99:6a:
9b:d6:d1:b4:dc:59:f1:08:69:a2:95:37:a3:26:34:
d0:a5:19:7b:b2:55:f0:65:a1:2b:51:3c:41:bf:3d:
81:4c:a4:40:0f:44:0b:46:7a:ef:d4:5f:89:57:68:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:C5:43:5F:C5:6C:B7:F3:10:81:C6:6A:60:E2:B6:BF:0D:3F:CB
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:88:e4:15:8e:9c:cf:47:c0:52:f1:ac:b7:cb:4d:6d:a2:d1:
e6:86:99:30:87:d0:a2:4b:46:a2:90:01:cc:ab:8f:a4:55:f8:
53:b1:5a:88:b2:ea:90:ae:45:89:f8:a0:35:9c:25:74:c4:53:
5b:12:2b:16:57:4f:a9:d3:97:c7:e4:7a:63:d3:47:24:34:cc:
a6:4a:d8:38:d8:0e:e7:c1:75:5b:07:c9:d1:77:46:8b:cb:52:
06:0d:98:69:00:b6:8e:06:5c:47:da:0f:c1:81:b7:55:5a:86:
44:97:86:1a:47:46:63:67:ad:c0:ab:02:62:e9:bf:8d:0b:14:
5e:40:61:b8:e7:a6:aa:5b:44:a4:a0:21:be:32:6f:ea:0e:b9:
8e:53:22:5b:f2:bb:1f:d0:fa:f1:c2:cf:d4:b2:4b:b3:b7:30:
2b:2c:c4:be:7d:ad:c1:50:34:61:28:ab:29:b6:65:49:64:2f:
27:d1:99:3a:a8:96:00:22:f8:1e:76:68:72:65:b3:bf:54:12:
d7:84:f4:b4:d7:6c:e3:be:a7:f3:58:65:bb:7b:f2:79:be:3c:
98:9c:5d:ad:a2:87:2d:84:cb:0c:65:6f:27:7e:39:19:1c:bf:
8d:88:47:f5:f8:f5:18:4e:1b:da:7f:1b:08:bd:ee:bc:da:fa:
8d:84:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:59 2026 by rpki-client