Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: FBHFO4iem1FqG79LBOmG9LlENYfTMJj7aLloF8omyr0=
Subject key identifier: 03:AC:05:9B:62:1F:FE:D6:81:0A:94:F8:88:AE:FA:C7:4A:BF:B5:79
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019D28BB16362C0C1E2F7FD8942985CB72A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 03E1
Signing time: Thu 26 Mar 2026 06:00:42 +0000
Manifest this update: Thu 26 Mar 2026 06:00:42 +0000
Manifest next update: Fri 27 Mar 2026 06:00:42 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: fzOt3jtwdWakNfitxnSRrGmN8uJZIEYvjhopuiuiEP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:16:36:2c:0c:1e:2f:7f:d8:94:29:85:cb:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Mar 26 06:00:42 2026 GMT
Not After : Mar 27 06:00:42 2026 GMT
Subject: CN=03ac059b621ffed6810a94f888aefac74abfb579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:15:a3:6d:ab:69:a3:fb:46:bc:f5:7c:e1:
34:63:4a:d1:89:f2:d6:11:b5:f4:99:3b:1b:bf:b8:
a3:c0:04:c6:7a:ca:5b:79:13:13:28:95:b3:83:d9:
54:77:c7:c3:ca:fd:51:2c:7b:d1:b6:28:96:f2:4e:
ed:3e:25:f1:da:bb:be:30:5d:20:7d:d7:60:66:e1:
5c:b7:0b:bc:ea:b9:30:b1:59:6a:f0:9a:2e:ef:c2:
d0:44:4e:15:c5:67:61:d4:bf:6f:f6:e6:7a:4a:1a:
b1:43:ec:d0:01:db:92:3f:50:e0:b7:77:43:c6:56:
bf:a6:fa:87:e9:66:83:59:e8:51:21:71:13:29:da:
39:11:a3:c6:59:a6:5d:ba:4d:b3:2c:3f:6c:90:d7:
a2:f5:25:41:8e:5c:ea:a6:83:14:30:9f:c5:5f:31:
0a:4b:c7:68:eb:87:68:2c:48:d0:62:79:3d:76:7e:
8b:7a:f5:b8:f6:0c:ca:cd:97:e1:68:0a:90:c2:e2:
61:47:a5:b5:ca:22:62:77:9c:5b:5c:0e:5c:de:10:
d0:cf:2c:1e:e7:a9:05:52:d6:8a:e3:3a:65:12:00:
a1:0e:a7:79:f6:42:82:ba:b1:42:29:e2:e8:d1:a8:
a7:7d:61:6f:0a:74:2c:ec:8a:cb:ce:e2:45:74:04:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:05:9B:62:1F:FE:D6:81:0A:94:F8:88:AE:FA:C7:4A:BF:B5:79
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dc:b4:90:cd:78:02:32:4e:65:04:92:cb:af:77:6f:5b:09:
2c:9f:4e:70:e3:47:72:7f:7d:15:42:8d:1f:50:4f:7b:d5:b6:
a4:f7:09:25:cb:c9:0c:e0:02:74:46:9b:44:51:e8:28:2c:a7:
c9:f6:20:3c:bd:45:e6:27:3a:38:ba:32:19:4e:f5:4a:23:58:
05:50:39:83:a7:b4:ed:e7:6a:af:81:ff:70:08:9d:ce:21:d7:
a3:4e:7c:cd:08:44:25:30:d4:49:c4:db:ca:12:8b:7f:bd:d1:
ca:18:5a:78:54:4c:47:d1:f0:8f:89:b4:8d:dc:bf:d9:d9:8b:
00:1f:8b:38:b7:ce:61:d7:d1:77:ff:3e:d2:8c:c4:f9:e5:fe:
64:f8:a1:2e:7e:12:50:79:0d:e7:0e:c9:44:e7:18:1c:5a:70:
bf:08:a7:14:d1:61:1e:3b:d2:0d:20:8a:7d:15:ce:4c:f6:af:
79:9f:e3:e7:63:21:ba:a7:57:d0:44:a1:f7:26:c3:cd:d7:ac:
b4:74:98:2d:c4:34:dc:43:08:80:ea:9e:f2:87:34:97:28:b5:
5e:fb:ce:78:83:f1:88:35:b5:3f:3b:b9:ca:54:ac:9d:27:b7:
8b:71:d5:0b:7c:ae:6a:46:01:d7:23:74:5a:3c:5a:47:e7:e7:
ad:44:68:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxY2LAweL3/YlCmFy3KoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw
ZjNlZDYwHhcNMjYwMzI2MDYwMDQyWhcNMjYwMzI3MDYwMDQyWjAzMTEwLwYDVQQD
EygwM2FjMDU5YjYyMWZmZWQ2ODEwYTk0Zjg4OGFlZmFjNzRhYmZiNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9AVo22raaP7Rrz1fOE0Y0rRifLW
EbX0mTsbv7ijwATGespbeRMTKJWzg9lUd8fDyv1RLHvRtiiW8k7tPiXx2ru+MF0g
fddgZuFctwu86rkwsVlq8Jou78LQRE4VxWdh1L9v9uZ6ShqxQ+zQAduSP1Dgt3dD
xla/pvqH6WaDWehRIXETKdo5EaPGWaZduk2zLD9skNei9SVBjlzqpoMUMJ/FXzEK
S8do64doLEjQYnk9dn6LevW49gzKzZfhaAqQwuJhR6W1yiJid5xbXA5c3hDQzywe
56kFUtaK4zplEgChDqd59kKCurFCKeLo0ainfWFvCnQs7IrLzuJFdASSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOsBZtiH/7WgQqU+Iiu+sdKv7V5MB8GA1UdIwQY
MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt
ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy
LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYty0kM14
AjJOZQSSy693b1sJLJ9OcONHcn99FUKNH1BPe9W2pPcJJcvJDOACdEabRFHoKCyn
yfYgPL1F5ic6OLoyGU71SiNYBVA5g6e07edqr4H/cAidziHXo058zQhEJTDUScTb
yhKLf73RyhhaeFRMR9Hwj4m0jdy/2dmLAB+LOLfOYdfRd/8+0ozE+eX+ZPihLn4S
UHkN5w7JROcYHFpwvwinFNFhHjvSDSCKfRXOTPaveZ/j52MhuqdX0ESh9ybDzdes
tHSYLcQ03EMIgOqe8oc0lyi1XvvOeIPxiDW1Pzu5ylSsnSe3i3HVC3yuakYB1yN0
WjxaR+fnrURojA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:09 2026 by rpki-client