Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: 8cUmMMCj66DObPimpGtFaJz6v6vSHMD7GygyVI3053k=
Subject key identifier: B2:2C:CD:77:78:EA:DE:2D:99:5B:0C:F6:78:B2:AB:F1:7F:D6:40:2A
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 019D29CE64C0FF05CC5DD7502F83A5C8BCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:25 +0000
Manifest this update: Thu 26 Mar 2026 11:01:25 +0000
Manifest next update: Fri 27 Mar 2026 11:01:25 +0000
Files and hashes: 1: 5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa (hash: QQ5YRKyPOHLwW62MQSDhBmGI/lB6OrTfowyUhMbXM7A=)
2: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: ujZzpcqA3sMu58QUX6wVfDpgySu2ofkTKNbQo4dp3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:64:c0:ff:05:cc:5d:d7:50:2f:83:a5:c8:bc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Mar 26 11:01:25 2026 GMT
Not After : Mar 27 11:01:25 2026 GMT
Subject: CN=b22ccd7778eade2d995b0cf678b2abf17fd6402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:75:c1:89:00:01:a8:a4:18:98:e3:ef:31:
db:47:e9:af:f4:da:50:0e:76:25:8b:00:86:84:04:
4d:c1:a6:b8:e6:db:96:f3:af:a7:52:d8:4e:48:43:
57:1a:37:3f:37:0c:87:e9:ce:35:8f:cc:43:57:16:
f2:6b:37:6e:e8:7e:4f:44:a2:07:15:f6:51:bf:85:
6e:bb:bd:53:b7:51:fe:10:cd:46:95:40:e7:ec:29:
77:bf:e8:df:76:95:ae:96:90:86:8d:15:08:50:eb:
aa:1a:31:c2:94:21:34:37:4a:54:0b:d7:18:a1:3e:
79:ca:f8:7c:a3:ba:e4:c7:72:f4:cd:cb:05:88:54:
ee:62:fc:c2:30:77:f4:f2:04:c6:b0:23:9c:b3:a5:
14:8a:3b:c2:b2:ce:b7:7e:17:14:86:68:f9:04:04:
fe:eb:41:30:1d:ca:d2:76:b5:fa:a6:5c:b4:fb:70:
87:ee:3b:09:57:eb:00:89:3e:07:cc:3a:46:55:96:
f6:1a:6c:ba:e3:08:dd:8e:cc:ea:1b:ec:38:78:4a:
4a:5b:01:b6:7a:b9:fc:8f:7a:7d:62:cd:40:cd:c5:
b3:94:d2:42:a0:ae:4d:eb:59:51:e3:44:74:01:0c:
a9:6c:d8:9c:da:7e:8b:50:49:27:79:61:f3:eb:d1:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:CD:77:78:EA:DE:2D:99:5B:0C:F6:78:B2:AB:F1:7F:D6:40:2A
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:71:62:8f:71:ed:fb:5b:e6:a9:de:f1:5b:96:7b:77:e1:21:
23:e3:ab:64:78:93:68:e9:73:c2:34:7d:d1:a4:78:fe:22:84:
96:83:7e:f3:09:1a:b0:5e:b2:a2:ef:c3:7e:da:42:0d:34:60:
0f:f0:28:1c:96:7c:3c:1b:50:fe:42:af:50:01:86:b3:55:d0:
11:9c:9c:d4:89:4f:22:f6:12:f6:12:0a:c4:1c:c9:36:a9:6b:
bf:fa:ea:c2:9c:6e:07:17:37:ae:ee:ce:bf:e9:4d:c9:f9:0b:
12:41:dc:9c:93:a2:01:b4:1b:8e:e5:87:37:99:37:42:40:8d:
16:7b:88:c3:ed:c4:06:f7:bb:f9:ac:81:7a:1f:e3:07:19:1f:
f3:9a:66:36:a9:9e:4e:7c:bf:51:a5:45:d9:54:2c:d0:59:33:
f9:16:8a:ad:91:dd:39:a5:04:f7:b9:ec:51:c3:0d:64:f3:50:
d9:6a:18:dd:6c:2a:65:61:b1:3c:14:c2:9a:8b:03:af:a4:19:
16:39:ef:84:bb:e0:ba:b7:d2:6a:43:3f:d5:2d:a4:0b:15:b3:
74:47:31:26:58:89:62:f5:c5:4d:5b:c9:6e:3f:0c:9a:fd:fa:
51:f1:e2:81:ea:40:a0:c4:88:41:fa:dc:0d:1d:b0:77:9e:5a:
81:51:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:51 2026 by rpki-client